Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136342e302f32342d3234203d3e2039333431.roa
File:                     3131392e3235322e3136342e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          Cj4Wq9fyw2p1Jr6o/WgvqxQ4mrZtI5AOEdq551/Nd8E=
Subject key identifier:   E8:C8:BA:EA:2E:6E:F4:8B:E6:FA:F6:CA:A9:B4:8C:BD:87:C8:86:F5
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       4DE120C2873C0158457A7F311CF77231251CAF23
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136342e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 21 Apr 2024 05:00:01 +0000
ROA not before:           Sun 21 Apr 2024 04:55:01 +0000
ROA not after:            Sun 20 Apr 2025 05:00:01 +0000
asID:                     9341
IP address blocks:        119.252.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e1:20:c2:87:3c:01:58:45:7a:7f:31:1c:f7:72:31:25:1c:af:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Apr 21 04:55:01 2024 GMT
            Not After : Apr 20 05:00:01 2025 GMT
        Subject: CN=E8C8BAEA2E6EF48BE6FAF6CAA9B48CBD87C886F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c6:61:7c:10:85:c8:6b:20:da:3d:26:44:fd:
                    29:e5:0e:12:67:26:e7:6e:60:ed:97:ea:1b:d4:d3:
                    11:ab:75:74:88:0b:24:ba:95:08:d7:41:e8:86:17:
                    79:e4:a2:d4:e1:71:9e:37:0b:a5:e4:3b:df:2d:ad:
                    75:be:78:6c:07:6a:e4:aa:f2:97:24:6a:48:b4:71:
                    c9:5c:b6:62:ad:d9:ba:6f:12:c2:bc:86:00:78:a9:
                    b3:4c:87:17:87:1c:89:d7:a4:82:c0:47:53:ce:af:
                    c0:8c:c0:6d:d7:ac:83:1c:60:c9:e4:1e:4f:a1:c5:
                    a7:60:e6:66:4c:33:ec:8d:d8:d6:07:d6:6c:76:55:
                    e5:79:31:3b:89:26:04:a3:77:96:de:00:e1:d6:57:
                    93:8b:0f:87:1c:c9:99:d7:12:e8:a7:1e:14:8b:00:
                    05:03:33:bf:f1:27:bb:ee:74:1c:89:2c:bc:64:42:
                    86:05:be:b4:18:7b:46:86:41:4c:09:ee:de:48:db:
                    dd:dc:b5:17:5c:32:18:29:c6:65:47:3d:89:ed:f4:
                    fd:08:0c:07:70:d2:40:34:97:c1:5c:2b:5e:70:45:
                    32:92:80:5d:c4:da:97:36:29:60:4e:30:5c:63:78:
                    77:94:8d:e0:2c:a6:22:48:3b:02:b9:ad:fe:0e:a1:
                    af:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C8:BA:EA:2E:6E:F4:8B:E6:FA:F6:CA:A9:B4:8C:BD:87:C8:86:F5
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136342e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.252.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:00:74:e9:12:d3:d3:b5:0b:eb:74:bc:46:09:cd:39:a7:eb:
         bf:cf:d9:b5:91:d4:1e:c7:1a:34:1a:df:5f:40:59:82:f8:6a:
         c8:a9:4a:59:be:aa:09:46:16:0b:78:8b:40:bb:c6:39:02:87:
         11:c7:01:b8:c4:1b:27:1d:1c:bd:6e:42:1b:f8:ea:f9:46:98:
         4a:4c:3b:55:ff:f8:24:f2:d1:c3:f4:b2:c5:b9:f8:cb:ed:3a:
         36:48:96:4d:55:68:6a:e4:21:9b:39:82:93:f9:ad:83:cd:d7:
         03:df:ee:9c:ec:53:9c:3b:b7:ec:8d:19:cb:f2:fd:64:1b:4c:
         04:bc:02:6f:8e:0d:1c:81:3f:0d:04:b5:29:fb:01:32:14:9b:
         f4:ad:82:f2:d4:43:8c:45:4e:27:d7:ea:ea:70:b5:b1:de:dd:
         7d:b3:bb:3e:e0:46:43:ee:d4:e2:4f:76:00:98:ff:b1:e5:94:
         27:c4:53:34:a0:b2:35:ed:1c:a5:a3:3b:ce:d4:07:56:98:b4:
         a9:e5:17:cb:17:88:d8:83:f9:c5:03:84:c8:f1:98:bd:59:53:
         35:31:6e:3b:23:6d:89:57:fe:79:4c:e1:24:32:aa:b2:7b:c6:
         f3:41:27:45:8b:21:14:ac:8e:63:b9:6c:5b:92:e5:df:6d:42:
         3c:bd:df:d5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTeEgwoc8AVhFen8xHPdyMSUcryMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNDA0MjEwNDU1MDFaFw0yNTA0MjAwNTAwMDFaMDMxMTAvBgNV
BAMTKEU4QzhCQUVBMkU2RUY0OEJFNkZBRjZDQUE5QjQ4Q0JEODdDODg2RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtxmF8EIXIayDaPSZE/SnlDhJn
JuduYO2X6hvU0xGrdXSICyS6lQjXQeiGF3nkotThcZ43C6XkO98trXW+eGwHauSq
8pckaki0cclctmKt2bpvEsK8hgB4qbNMhxeHHInXpILAR1POr8CMwG3XrIMcYMnk
Hk+hxadg5mZMM+yN2NYH1mx2VeV5MTuJJgSjd5beAOHWV5OLD4ccyZnXEuinHhSL
AAUDM7/xJ7vudByJLLxkQoYFvrQYe0aGQUwJ7t5I293ctRdcMhgpxmVHPYnt9P0I
DAdw0kA0l8FcK15wRTKSgF3E2pc2KWBOMFxjeHeUjeAspiJIOwK5rf4Ooa/zAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU6Mi66i5u9Ivm+vbKqbSMvYfIhvUwHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04
YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM2MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8pDANBgkqhkiG
9w0BAQsFAAOCAQEApgB06RLT07UL63S8RgnNOafrv8/ZtZHUHscaNBrfX0BZgvhq
yKlKWb6qCUYWC3iLQLvGOQKHEccBuMQbJx0cvW5CG/jq+UaYSkw7Vf/4JPLRw/Sy
xbn4y+06NkiWTVVoauQhmzmCk/mtg83XA9/unOxTnDu37I0Zy/L9ZBtMBLwCb44N
HIE/DQS1KfsBMhSb9K2C8tRDjEVOJ9fq6nC1sd7dfbO7PuBGQ+7U4k92AJj/seWU
J8RTNKCyNe0cpaM7ztQHVpi0qeUXyxeI2IP5xQOEyPGYvVlTNTFuOyNtiVf+eUzh
JDKqsnvG80EnRYshFKyOY7lsW5Ll321CPL3f1Q==
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org