Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137342e302f32342d3234203d3e2039333431.roa
File:                     3131392e3235322e3137342e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          GQFqh6IVxey9go3DcAk5CLZrYIywuvULVmomJv0e0TM=
Subject key identifier:   0D:4C:64:20:C2:2C:BC:27:3F:9F:0A:95:6C:FE:21:5F:93:E5:1D:EF
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       04D170DC02CEAE7C55349B862182D44C5ED697F9
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137342e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 21 Apr 2024 06:00:01 +0000
ROA not before:           Sun 21 Apr 2024 05:55:01 +0000
ROA not after:            Sun 20 Apr 2025 06:00:01 +0000
asID:                     9341
IP address blocks:        119.252.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d1:70:dc:02:ce:ae:7c:55:34:9b:86:21:82:d4:4c:5e:d6:97:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Apr 21 05:55:01 2024 GMT
            Not After : Apr 20 06:00:01 2025 GMT
        Subject: CN=0D4C6420C22CBC273F9F0A956CFE215F93E51DEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:36:2b:27:a0:b1:91:5c:f4:b8:34:a9:e1:
                    a7:e2:b0:2d:c4:b3:70:1f:b6:41:ba:0e:7a:0a:4d:
                    f2:a5:d9:8f:ff:07:cb:7b:43:17:8e:07:03:ba:52:
                    4c:d4:a5:82:5d:5a:ba:d5:d2:2f:46:c0:2a:4a:c7:
                    b1:08:c4:8a:0b:e3:d7:24:b5:87:53:76:cb:ec:d1:
                    09:49:c1:5a:40:84:4c:ac:0b:74:90:60:be:e2:c9:
                    23:5b:cd:ca:32:fc:6b:e8:c7:4e:14:1c:9e:34:0f:
                    d6:74:5b:e4:d3:41:4d:43:2b:60:89:c1:0b:c0:70:
                    80:28:10:1d:03:fd:76:44:fd:d7:fb:b4:91:40:aa:
                    11:71:80:6f:21:68:5a:e8:26:6e:32:0a:40:ed:ea:
                    ec:77:e4:14:6e:03:00:9e:f2:09:c4:30:a4:ed:03:
                    48:c6:ae:62:7d:a2:9d:fd:c3:dc:d9:0d:08:83:78:
                    24:44:16:50:15:9b:9c:83:1f:78:28:b3:b9:d4:d4:
                    c3:bc:cc:93:41:bb:62:4a:46:3e:52:a5:43:cc:21:
                    6a:ea:6a:9a:56:08:a6:e2:98:92:0c:2d:65:d4:46:
                    39:cc:73:2d:0f:d7:b9:f8:23:b6:1c:d8:73:09:63:
                    c2:3f:81:7d:94:8f:1c:7d:66:c8:55:ec:f7:92:eb:
                    e5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4C:64:20:C2:2C:BC:27:3F:9F:0A:95:6C:FE:21:5F:93:E5:1D:EF
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137342e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.252.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:ff:88:f1:e3:58:cc:33:9f:b1:7b:b8:3e:1d:4f:94:3f:49:
         42:41:93:b1:b6:ce:3e:98:b8:de:9d:b4:10:a8:ac:a7:47:ec:
         fe:e0:70:5f:a0:e0:d8:64:50:b4:0e:91:4a:48:a8:aa:c9:9a:
         a1:c9:42:68:ca:66:85:41:be:bf:84:19:a7:dd:7a:7c:d9:00:
         b1:a8:10:d3:30:ea:fe:90:5f:46:fb:e6:75:80:3a:c0:aa:dc:
         d4:b8:fd:ff:5c:ce:72:d6:98:b6:10:38:7e:86:d9:6b:a7:24:
         7b:2e:c7:99:ae:1f:78:17:84:f1:20:62:fe:f0:37:d7:20:37:
         c6:c2:17:a4:0c:dd:7f:fb:c4:11:a5:0e:15:13:f5:8a:e2:cd:
         0c:b8:ef:eb:d7:e7:e6:9d:a3:76:54:af:04:41:35:d9:d6:a2:
         e2:4b:96:19:18:02:71:c9:d4:a2:e9:48:b5:7d:12:6e:60:13:
         72:3b:53:2b:db:73:3b:60:e1:05:fe:c7:8b:43:00:05:22:02:
         5f:0e:73:47:da:d3:67:b2:b0:0f:ea:1c:d4:1a:08:a4:60:84:
         e8:08:c5:ce:50:4a:86:11:34:cb:a5:87:cc:94:57:33:91:47:
         45:88:a1:97:56:09:28:3d:18:a8:64:19:ad:72:72:85:4c:59:
         43:2f:3e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:21 2024 by rpki-client on console-fra.rpki-client.org