Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e34372e39312e302f32342d3234203d3e2039333431.roa
File:                     3131392e34372e39312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          epuwo9lMPS8bS02F9swSvwYSMUUP1aTxbp2ZBiUd7RA=
Subject key identifier:   5B:D0:6B:31:3F:A7:43:90:FF:DE:85:5E:4A:12:7F:90:28:86:02:E4
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       69DAC2849EB5544CB92C364F6D330DCB13BDCCFC
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e34372e39312e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 11 Sep 2024 12:00:02 +0000
ROA not before:           Wed 11 Sep 2024 11:55:02 +0000
ROA not after:            Wed 10 Sep 2025 12:00:02 +0000
asID:                     9341
IP address blocks:        119.47.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:da:c2:84:9e:b5:54:4c:b9:2c:36:4f:6d:33:0d:cb:13:bd:cc:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Sep 11 11:55:02 2024 GMT
            Not After : Sep 10 12:00:02 2025 GMT
        Subject: CN=5BD06B313FA74390FFDE855E4A127F90288602E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:50:85:48:10:58:05:30:86:2b:08:2c:25:0a:
                    f8:95:17:5f:72:88:5e:bf:b4:23:e2:e5:af:d4:f4:
                    62:ca:90:23:46:26:01:49:a0:fa:17:63:09:48:55:
                    e1:95:4c:a7:18:4d:ff:64:e2:64:97:82:0e:4d:3c:
                    65:23:07:80:d3:58:22:09:62:3b:0d:f1:6b:42:7f:
                    d0:c7:41:0f:35:a0:56:fb:51:31:50:00:0f:9f:6f:
                    91:d2:34:ed:84:96:49:ba:94:29:e2:ca:5d:af:71:
                    9c:cc:be:e8:6c:a7:c8:03:31:ef:68:ca:60:ad:3d:
                    1d:f3:29:f8:58:fa:7f:f0:87:93:db:b6:fa:1f:e5:
                    dc:b1:0b:f7:db:22:ff:7e:08:81:84:86:90:8b:99:
                    83:79:76:b6:dc:64:48:62:10:d5:01:fe:29:87:2e:
                    29:48:dc:1b:1a:84:43:2f:04:26:45:da:5e:1c:81:
                    dd:94:a1:bc:76:31:d4:b4:ef:a8:ab:f3:9b:a2:1b:
                    5e:15:49:38:0d:38:a8:5f:c1:6b:8b:83:2e:a6:0f:
                    3b:5d:74:af:9f:0f:72:d9:c2:2c:15:aa:9b:2e:15:
                    af:f9:a4:09:41:76:7a:1d:31:27:2d:40:1a:38:39:
                    71:f1:be:0e:61:4d:5b:e4:2b:af:d2:9c:7b:c6:1e:
                    14:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D0:6B:31:3F:A7:43:90:FF:DE:85:5E:4A:12:7F:90:28:86:02:E4
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e34372e39312e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.47.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:81:00:fe:2a:da:b6:52:a6:08:cd:4a:07:6d:92:5b:3f:76:
         6f:59:0c:c5:a5:59:ba:09:17:8b:37:6e:a3:5d:e3:70:b8:56:
         3f:0f:00:75:48:77:21:8c:55:6c:1b:36:56:80:14:d7:dc:61:
         48:ff:1b:83:5e:35:5f:21:c7:7e:48:81:60:b8:01:96:28:1e:
         d3:91:8c:7a:6d:0f:6f:55:2a:be:68:fa:f6:e2:92:05:30:29:
         ef:0e:b9:bb:60:0a:7f:e4:5f:9a:08:46:1f:e0:61:33:aa:c1:
         16:70:f0:58:d6:ce:84:77:35:45:a1:e0:33:aa:01:bf:55:af:
         a6:21:19:d1:82:79:b0:93:01:fb:54:16:5a:66:48:d5:0e:68:
         08:d8:04:89:78:d5:70:15:c2:32:20:72:dd:09:3e:73:6f:e7:
         88:d8:cb:80:69:58:30:82:f3:60:87:40:a3:e4:21:c3:da:ed:
         28:60:f2:26:88:1f:84:a1:f1:0e:be:e3:ca:d8:4b:7b:f8:75:
         55:2f:ad:18:50:79:c0:53:24:d6:ba:d9:60:56:92:1e:9f:9b:
         f0:01:aa:eb:0a:c2:28:7d:65:2c:ff:40:da:b8:fb:4f:1f:05:
         e1:7f:1e:3d:1c:fe:17:8d:f0:17:76:1d:7f:6b:6f:20:a0:3f:
         c9:16:a4:96
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUadrChJ61VEy5LDZPbTMNyxO9zPwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNDA5MTExMTU1MDJaFw0yNTA5MTAxMjAwMDJaMDMxMTAvBgNV
BAMTKDVCRDA2QjMxM0ZBNzQzOTBGRkRFODU1RTRBMTI3RjkwMjg4NjAyRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSUIVIEFgFMIYrCCwlCviVF19y
iF6/tCPi5a/U9GLKkCNGJgFJoPoXYwlIVeGVTKcYTf9k4mSXgg5NPGUjB4DTWCIJ
YjsN8WtCf9DHQQ81oFb7UTFQAA+fb5HSNO2Elkm6lCniyl2vcZzMvuhsp8gDMe9o
ymCtPR3zKfhY+n/wh5Pbtvof5dyxC/fbIv9+CIGEhpCLmYN5drbcZEhiENUB/imH
LilI3BsahEMvBCZF2l4cgd2Uobx2MdS076ir85uiG14VSTgNOKhfwWuLgy6mDztd
dK+fD3LZwiwVqpsuFa/5pAlBdnodMSctQBo4OXHxvg5hTVvkK6/SnHvGHhTJAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUW9BrMT+nQ5D/3oVeShJ/kCiGAuQwHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNiZGNiYWUtMmU5ZC00ZjNmLThh
YjktMzQyNGU0NDg0ODRlLzAvMzEzMTM5MmUzNDM3MmUzOTMxMmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB3L1swDQYJKoZIhvcNAQEL
BQADggEBABWBAP4q2rZSpgjNSgdtkls/dm9ZDMWlWboJF4s3bqNd43C4Vj8PAHVI
dyGMVWwbNlaAFNfcYUj/G4NeNV8hx35IgWC4AZYoHtORjHptD29VKr5o+vbikgUw
Ke8OubtgCn/kX5oIRh/gYTOqwRZw8FjWzoR3NUWh4DOqAb9Vr6YhGdGCebCTAftU
FlpmSNUOaAjYBIl41XAVwjIgct0JPnNv54jYy4BpWDCC82CHQKPkIcPa7Shg8iaI
H4Sh8Q6+48rYS3v4dVUvrRhQecBTJNa62WBWkh6fm/ABqusKwih9ZSz/QNq4+08f
BeF/Hj0c/heN8Bd2HX9rbyCgP8kWpJY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:21 2024 by rpki-client on console-fra.rpki-client.org