Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e32322e302f32332d3234203d3e2039333431.roa
File:                     3132312e3130302e32322e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier:          JfJZ2FvThWe2NlbmaUSmIxpMvfHt8n5T+tb99NohYe4=
Subject key identifier:   6B:01:73:F5:28:73:78:E2:0E:35:68:4D:BE:E8:63:F4:76:11:33:D3
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       2578E05E1128191CFD3175FDCC1A34F206674226
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e32322e302f32332d3234203d3e2039333431.roa
Signing time:             Tue 23 Apr 2024 03:00:01 +0000
ROA not before:           Tue 23 Apr 2024 02:55:01 +0000
ROA not after:            Tue 22 Apr 2025 03:00:01 +0000
asID:                     9341
IP address blocks:        121.100.22.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:78:e0:5e:11:28:19:1c:fd:31:75:fd:cc:1a:34:f2:06:67:42:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Apr 23 02:55:01 2024 GMT
            Not After : Apr 22 03:00:01 2025 GMT
        Subject: CN=6B0173F5287378E20E35684DBEE863F4761133D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3e:fc:37:ce:fe:76:db:81:24:c0:5d:fe:bb:
                    d8:42:a5:ab:55:aa:ab:ce:07:f9:84:94:c0:a3:49:
                    84:7d:ae:9e:22:eb:c5:bc:9b:f4:22:cd:5b:86:da:
                    06:61:30:98:71:3d:15:3e:76:28:1a:38:ce:bd:92:
                    84:37:f6:39:68:26:05:b1:0f:23:0a:2b:c0:51:54:
                    b9:87:d3:a6:fb:0d:68:8f:6f:bd:11:fb:7c:35:5a:
                    95:0c:c8:99:13:5e:9a:4c:fa:2a:d5:ea:ab:75:f9:
                    17:74:b3:93:5a:cf:ea:e7:53:b9:a1:81:3e:05:24:
                    be:53:b5:91:6c:c4:13:4f:65:d6:f1:dd:08:51:1a:
                    7a:40:d3:3d:9d:f7:22:6c:5a:db:ec:f6:93:46:5b:
                    97:35:dd:81:a6:7c:45:ff:61:e3:66:e9:76:86:9b:
                    c1:d0:5a:00:0e:02:57:68:c7:f7:11:b6:24:69:34:
                    eb:ba:29:54:5b:7d:a9:2a:24:be:c0:8d:23:1d:02:
                    88:92:25:ad:f4:bc:ed:a7:ca:f5:b2:ec:bc:7c:95:
                    24:6d:dd:17:5a:20:2a:61:63:49:03:5d:67:29:18:
                    e9:63:b7:5f:3f:9a:e3:71:d6:9e:73:a0:1b:73:37:
                    23:d2:b9:b3:91:fb:ff:e9:80:69:97:17:01:ea:9e:
                    86:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:01:73:F5:28:73:78:E2:0E:35:68:4D:BE:E8:63:F4:76:11:33:D3
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e32322e302f32332d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.100.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:21:df:7c:23:50:c5:de:68:c0:be:53:47:fd:20:70:e2:80:
         36:cc:74:23:62:df:29:a5:d3:17:fb:45:a4:40:3f:17:9a:22:
         1d:2f:96:76:e5:54:df:37:c7:88:77:5c:9c:d7:5f:80:e3:9d:
         eb:c5:f4:e5:58:53:fa:14:f9:ff:a2:e3:91:06:6a:4c:cb:91:
         90:6b:8c:6d:03:1c:3d:8d:08:ed:b9:36:a6:cb:3c:f2:3d:5f:
         2d:c4:ea:06:f5:1a:e8:4d:01:ac:e9:24:3e:77:5d:08:9e:50:
         b4:cb:b5:2d:3c:95:b6:ad:44:a6:24:70:6e:97:07:91:76:b8:
         72:76:87:fe:2e:c2:25:35:7b:3c:77:30:40:8f:b0:3d:93:e6:
         87:3c:80:cf:90:f5:2c:3b:61:af:e9:e4:45:03:04:87:bf:62:
         c1:b1:04:18:a0:11:c8:5f:76:a8:d2:99:72:e8:33:84:2b:cf:
         c3:36:7b:9b:60:3e:bc:74:3c:5b:86:be:34:85:4e:bf:2b:85:
         01:7e:ae:ad:f4:5c:b9:23:2b:89:3e:93:fe:22:f8:73:68:62:
         5c:44:de:fb:b1:7f:80:b2:95:ae:0f:1d:91:ee:88:cf:ee:10:
         de:ee:b8:f5:c0:1c:bd:b5:d8:14:7e:e4:ad:d4:1e:d5:b8:cc:
         96:03:ca:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:21 2024 by rpki-client on console-fra.rpki-client.org