Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3135372e3131392e35362e302f32322d3234203d3e2039333431.roa
File:                     3135372e3131392e35362e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier:          M85Io3lowbA/O0oRKzmAb4biVC3FXuzw6ese8WeZEyY=
Subject key identifier:   B9:78:A9:1E:67:A3:52:2D:4B:BB:A8:13:04:C7:F8:40:EE:4F:52:B1
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       3B5FD0C19C7EF34C42CE245C391920384017C3A7
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3135372e3131392e35362e302f32322d3234203d3e2039333431.roa
Signing time:             Wed 10 Jan 2024 00:08:13 +0000
ROA not before:           Wed 10 Jan 2024 00:03:13 +0000
ROA not after:            Wed 08 Jan 2025 00:08:13 +0000
asID:                     9341
IP address blocks:        157.119.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5f:d0:c1:9c:7e:f3:4c:42:ce:24:5c:39:19:20:38:40:17:c3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Jan 10 00:03:13 2024 GMT
            Not After : Jan  8 00:08:13 2025 GMT
        Subject: CN=B978A91E67A3522D4BBBA81304C7F840EE4F52B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f7:c8:1e:bd:f1:8c:71:a9:36:df:b5:0f:8c:
                    44:8f:16:f0:b2:3a:bc:0f:16:75:31:7e:f8:73:88:
                    3d:80:63:1c:e7:12:b2:27:c0:8c:c6:bd:e8:ea:68:
                    de:b7:e0:e6:4e:c3:01:97:e7:05:a4:48:06:58:1d:
                    66:a7:13:42:59:39:c0:30:1f:7f:ca:d8:fb:11:c6:
                    33:ef:16:d4:9b:74:57:e5:a8:85:f1:b9:a7:8b:78:
                    ef:3d:51:7b:0d:07:cd:73:b4:be:6f:80:d5:43:df:
                    01:63:46:4b:35:18:1e:fd:44:9c:25:50:62:23:aa:
                    40:b8:0d:2c:22:3d:78:ac:75:f2:3d:5b:e7:c4:51:
                    50:51:19:5e:65:52:64:fc:2a:ad:b8:8e:ad:92:fb:
                    76:27:d4:54:5b:28:d8:c7:fb:2a:c1:c9:a7:bd:1c:
                    6f:11:79:00:17:6a:2e:7a:84:f9:b3:b9:d1:4e:1d:
                    ba:bc:cc:de:b6:85:a3:39:50:47:e8:cc:0d:f0:ab:
                    27:52:29:a6:87:09:29:98:1b:f5:c2:6b:69:d9:d9:
                    18:59:f8:fd:85:61:9a:77:8d:41:1c:e4:f1:46:7f:
                    df:31:ec:99:81:fe:00:c5:0f:9f:6e:54:93:11:a5:
                    c5:74:8d:27:4b:b1:80:18:df:bc:bd:6f:7a:93:84:
                    83:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:78:A9:1E:67:A3:52:2D:4B:BB:A8:13:04:C7:F8:40:EE:4F:52:B1
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3135372e3131392e35362e302f32322d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.119.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:4d:ac:a1:ea:d1:e4:7b:27:c9:04:f3:69:55:9b:ee:7b:03:
         8b:d8:37:af:d6:a6:09:9d:66:26:e7:d7:41:39:ab:4c:63:b2:
         39:08:49:13:41:74:03:7e:1a:c6:c9:f4:1e:0f:09:78:ed:4b:
         02:1f:f7:3d:40:d5:8d:f2:51:b2:f6:93:10:5a:f3:16:12:e6:
         2d:32:c5:cc:4d:17:8a:b9:56:06:3b:a8:a6:d6:a9:ea:ec:ff:
         53:67:3a:7f:5f:2e:bb:2b:34:62:d4:1f:76:19:5e:41:11:30:
         5d:00:db:73:39:07:95:89:36:ff:c5:10:ae:c6:3e:a8:2f:31:
         ad:0a:45:7d:0e:93:45:a2:c5:02:8f:c4:1b:e2:76:b7:b7:f6:
         27:4f:0d:17:f0:69:51:b2:39:48:1d:58:e8:e5:63:87:4f:38:
         04:14:f0:96:7e:1f:37:01:36:d9:61:c8:38:e4:61:08:80:6e:
         8e:0b:f3:1f:9a:b5:63:e6:74:b3:00:f9:8d:6b:61:8f:1e:13:
         8d:88:cd:35:3f:35:e6:1b:59:72:f2:08:d2:57:4e:18:4f:b4:
         4e:81:ed:4a:1a:b7:f0:43:ca:a2:66:e7:94:c3:9d:9c:d4:64:
         4f:f6:a1:02:26:27:21:04:6e:dd:af:40:10:15:58:33:bb:2b:
         f3:54:46:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org