Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136392e302f32342d3234203d3e2039333431.roa
File:                     3131392e3235322e3136392e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          7UmDa+dUJ/hUc8yrj09Ekc7r61HDjmYGjKl+r1PysPM=
Subject key identifier:   86:FB:F7:B6:27:2E:9F:89:4E:05:77:FF:C2:79:21:A9:A8:37:45:65
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       7B9F9E2302A0DD7224F67C316A2A231201A63B57
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136392e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 21 Apr 2024 04:00:01 +0000
ROA not before:           Sun 21 Apr 2024 03:55:01 +0000
ROA not after:            Sun 20 Apr 2025 04:00:01 +0000
asID:                     9341
IP address blocks:        119.252.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9f:9e:23:02:a0:dd:72:24:f6:7c:31:6a:2a:23:12:01:a6:3b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Apr 21 03:55:01 2024 GMT
            Not After : Apr 20 04:00:01 2025 GMT
        Subject: CN=86FBF7B6272E9F894E0577FFC27921A9A8374565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:0b:d9:21:ed:69:b7:d6:86:0b:7f:9b:0e:
                    af:5c:22:33:b1:67:0e:11:59:30:88:f8:bb:81:8c:
                    6e:0e:aa:9c:86:5d:14:01:36:aa:f7:40:08:2a:f7:
                    88:03:7f:6b:f8:ba:af:4f:0b:09:96:65:4f:a5:69:
                    37:65:80:e1:4c:8e:0f:69:aa:a5:87:63:9e:2a:00:
                    75:f2:87:10:cf:dd:ee:04:88:66:50:07:32:21:f2:
                    e3:7b:74:76:ca:b8:f0:7b:15:98:5c:f0:1b:5b:00:
                    49:52:7d:61:44:92:d6:70:a0:dd:6a:51:06:a1:fc:
                    8c:22:67:7d:3c:57:d1:07:1f:c7:30:a0:e6:96:98:
                    2b:23:7b:f8:0d:57:b2:cf:aa:1f:b1:93:a9:e5:41:
                    1c:85:4a:04:49:87:cb:5b:19:02:4c:ff:9c:63:61:
                    42:e4:7e:b9:dc:d8:0f:61:e1:15:1a:43:29:e4:92:
                    c6:a9:1a:1d:03:70:7f:3d:bb:64:b5:a7:f6:dd:7c:
                    54:75:27:e4:c0:0e:c6:aa:45:32:2d:82:f7:f1:d2:
                    69:38:92:d4:a1:8e:3c:dc:5a:2f:5d:62:33:8a:bc:
                    ef:25:96:94:d2:53:9b:e7:c5:75:2e:0f:2b:18:02:
                    30:ce:f7:99:01:3c:aa:3d:de:54:62:35:7e:59:13:
                    0e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FB:F7:B6:27:2E:9F:89:4E:05:77:FF:C2:79:21:A9:A8:37:45:65
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136392e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.252.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:b9:86:b5:87:01:9e:92:6d:eb:bc:ce:05:d5:e4:d6:a5:c3:
         d5:4e:4b:af:00:25:0a:b1:5a:f7:09:17:78:d9:7c:f5:1f:91:
         50:87:ac:cf:6c:8d:8d:2b:dc:33:0e:e3:a7:6f:ea:68:c9:c9:
         2c:b5:ff:6f:a7:8c:37:92:c4:07:2b:46:f6:5e:c8:5e:05:c8:
         66:a6:2e:37:1b:fb:32:52:d7:5e:00:4d:c3:3e:01:1f:24:5f:
         cd:66:fc:d9:7c:8a:fe:3f:d5:bb:a6:0a:97:ac:cd:af:4b:a1:
         cc:2d:6c:92:05:f4:06:80:4c:08:f1:e8:fe:d6:ef:f4:0c:9a:
         9d:6f:44:26:8b:aa:24:ce:91:58:a3:6d:fb:cf:84:2e:d1:9d:
         3f:3c:45:f3:0c:9a:21:6c:4f:3a:31:b2:2f:e5:44:39:92:5c:
         a7:29:6b:18:0f:87:d5:2e:6a:7e:fd:66:f0:bf:c4:ff:b0:66:
         71:a1:46:9a:5b:9a:45:2f:03:be:70:f5:a5:3b:43:20:77:98:
         95:f9:97:72:78:f5:6c:52:7b:9b:0f:91:34:34:aa:9f:fe:69:
         fb:9d:96:cc:10:db:c3:c2:64:1e:95:1f:75:f5:ca:de:be:84:
         ea:1c:fb:1e:9c:51:e0:7e:91:14:50:42:63:72:5a:93:6d:ae:
         29:9a:c7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org