Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136332e302f32342d3234203d3e2039333431.roa
File:                     3131392e3235322e3136332e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          fYHAQVsVcQCNL3xb51+GJV+fYvleZqNOqomOM+E58jA=
Subject key identifier:   64:7C:90:9F:D6:BE:67:72:87:24:ED:D6:A4:26:56:CF:2C:B5:25:BF
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       3A9448ED86C74967CAFBD980EEA768A8A439C14B
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136332e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 21 Apr 2024 06:00:01 +0000
ROA not before:           Sun 21 Apr 2024 05:55:01 +0000
ROA not after:            Sun 20 Apr 2025 06:00:01 +0000
asID:                     9341
IP address blocks:        119.252.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 03:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:94:48:ed:86:c7:49:67:ca:fb:d9:80:ee:a7:68:a8:a4:39:c1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Apr 21 05:55:01 2024 GMT
            Not After : Apr 20 06:00:01 2025 GMT
        Subject: CN=647C909FD6BE67728724EDD6A42656CF2CB525BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:61:46:72:23:44:9b:ec:a2:c0:62:94:17:c2:
                    53:c3:3d:fd:15:b9:6c:88:7e:14:fd:71:0f:d5:46:
                    0f:12:8c:07:ee:48:c6:fb:11:71:19:97:33:4a:3f:
                    b8:f4:ee:f3:0e:06:d9:31:5e:0c:a3:13:4f:6a:00:
                    e8:f2:4d:73:83:04:13:26:87:ca:b9:a2:b8:1d:ef:
                    6a:8b:64:57:b7:8c:07:a5:00:b9:35:f7:2b:c7:ab:
                    28:25:2b:a8:e2:90:8c:00:af:a5:d4:56:f6:12:39:
                    99:84:77:59:ad:03:ef:fe:99:9d:88:74:d1:e9:96:
                    b4:5d:45:19:46:17:90:71:b5:03:ab:65:47:bb:ad:
                    c2:19:10:56:86:5c:e3:10:ec:60:19:99:c9:29:0a:
                    1e:9d:a4:4b:bb:17:3c:db:02:1c:57:47:62:f2:77:
                    ec:14:ae:82:a1:49:57:f0:68:af:12:16:e2:08:e7:
                    f2:91:9d:3c:7e:c2:00:90:03:9f:0b:20:d5:80:a3:
                    c3:32:2a:3e:75:00:06:63:17:6d:5a:55:a5:7d:e5:
                    e5:fa:26:f5:6a:91:ca:5f:74:c1:f3:b1:89:91:69:
                    22:04:43:f0:74:8e:93:2d:66:d3:4c:ae:44:43:d9:
                    17:9e:a3:d4:db:4c:9a:dc:0e:2b:ad:cb:ad:2e:06:
                    e8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7C:90:9F:D6:BE:67:72:87:24:ED:D6:A4:26:56:CF:2C:B5:25:BF
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136332e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.252.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:d2:87:c5:f3:01:70:37:0d:63:51:dd:33:b8:9e:af:c2:be:
         0e:a8:61:e7:31:ad:5a:b2:3b:7c:a5:6e:63:ef:04:36:7f:6b:
         7b:54:2c:4a:38:60:bb:80:68:03:62:86:11:85:93:12:bf:07:
         42:ab:99:6b:30:28:53:7e:f8:7c:1a:71:9e:09:62:f3:eb:31:
         bd:77:a6:90:f2:bc:32:b6:ba:47:bc:f4:ad:6c:dc:da:5b:a3:
         09:78:75:61:35:cc:3e:fd:b8:08:94:54:21:d3:34:ff:ba:dc:
         f5:c2:26:09:dc:3b:e1:2d:d4:7d:7e:25:fb:de:09:cc:67:7f:
         f8:07:7e:80:6a:79:52:56:59:cc:08:b8:f7:61:8e:44:bc:ad:
         12:e0:92:9b:53:ee:b5:46:c5:ba:e9:c0:f8:fe:69:1f:48:aa:
         2c:73:50:5d:78:74:e4:dd:bf:91:0d:d6:13:41:e4:5e:7c:1c:
         92:c6:6f:08:e8:e9:6e:7b:db:18:5d:b0:ee:3f:2a:d0:b8:23:
         36:69:38:89:01:fa:d0:06:30:83:33:cd:6b:6b:40:1c:fb:06:
         47:e8:c7:e6:f0:29:f7:f3:ad:ae:71:68:16:38:2f:92:a0:05:
         c5:be:30:aa:cf:b1:22:5f:20:52:cd:dd:36:83:f7:b9:04:1b:
         f8:25:11:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:12:28 2024 by rpki-client on console-fra.rpki-client.org