Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34342e302f32342d3234203d3e203338353234.roa
File:                     3131392e322e34342e302f32342d3234203d3e203338353234.roa (raw, json)
Hash identifier:          KQh69ZSNN94ceVxQtEkKUGX90k12cg/aXsb69Z4i+z0=
Subject key identifier:   CF:7B:79:18:4B:3F:AA:7D:BE:F3:5E:4F:D8:AC:DB:1E:94:8F:4E:A6
Certificate issuer:       /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
Certificate serial:       501F51D993AE17D4F8D965035E777668A17AABCB
Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34342e302f32342d3234203d3e203338353234.roa
Signing time:             Mon 01 Jul 2024 01:03:43 +0000
ROA not before:           Mon 01 Jul 2024 00:58:43 +0000
ROA not after:            Mon 30 Jun 2025 01:03:43 +0000
asID:                     38524
IP address blocks:        119.2.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl
                          rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:1f:51:d9:93:ae:17:d4:f8:d9:65:03:5e:77:76:68:a1:7a:ab:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
        Validity
            Not Before: Jul  1 00:58:43 2024 GMT
            Not After : Jun 30 01:03:43 2025 GMT
        Subject: CN=CF7B79184B3FAA7DBEF35E4FD8ACDB1E948F4EA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:97:0d:bb:79:5c:4c:bd:cf:16:b5:62:b5:
                    84:87:76:d0:b0:4d:86:70:44:9f:ee:13:53:1b:c3:
                    96:0f:5e:69:40:d3:19:ea:bd:9b:00:4b:2d:e1:54:
                    f7:5c:c3:72:f5:9a:ac:b7:09:ed:51:d3:96:3a:39:
                    b9:d8:b6:81:3f:25:ac:2f:82:99:48:19:b6:3a:9e:
                    9d:c2:b1:1c:4c:58:83:92:47:38:1a:bb:2c:73:87:
                    47:ad:06:e6:43:c9:3e:f0:69:b1:2e:fc:da:da:76:
                    df:77:10:64:47:08:b0:49:b8:c6:14:62:86:91:02:
                    3a:94:59:7a:3c:8a:78:e3:b8:93:08:5c:8a:5e:1a:
                    09:c7:2d:bb:4f:1e:1d:c0:d5:67:3f:ba:d8:c8:7b:
                    c1:5e:d0:cc:a7:b6:7d:28:4d:58:9c:56:3e:fb:63:
                    ec:95:49:c5:42:29:e2:01:b6:a2:b4:92:f5:7a:e4:
                    4a:42:67:e4:53:e2:51:e4:1c:1e:08:b9:12:d6:a6:
                    bb:2c:66:44:b1:a2:08:b2:aa:e2:0e:0a:fb:fd:37:
                    04:8e:de:78:f5:77:84:b9:cd:a7:ff:8f:00:33:ca:
                    06:d3:8a:a9:95:0e:e0:38:79:42:58:05:ce:e6:85:
                    6c:46:2a:99:ea:df:06:cd:e1:ca:be:16:fe:15:e3:
                    89:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7B:79:18:4B:3F:AA:7D:BE:F3:5E:4F:D8:AC:DB:1E:94:8F:4E:A6
            X509v3 Authority Key Identifier:
                keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34342e302f32342d3234203d3e203338353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.2.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:4e:b7:86:49:6f:90:b9:ea:92:86:ae:64:2d:df:26:02:c5:
         8e:b4:ee:78:37:a6:f6:33:66:21:93:c2:7a:f5:b4:0a:9a:57:
         c4:43:7f:e7:94:5e:c7:29:2f:30:44:dd:4e:78:f1:bc:f4:9b:
         c4:90:f4:27:fd:d6:3c:94:08:68:b4:3c:13:0e:1b:d4:6b:dd:
         3e:1a:c5:4a:33:64:16:dd:b9:f8:86:70:4f:6e:32:f3:59:f0:
         b7:f7:aa:32:dd:8b:66:c6:d3:2e:06:dc:6b:cd:e8:94:91:a7:
         af:c7:57:c4:72:3d:14:02:4d:c3:5d:dc:b7:17:70:91:39:a5:
         1c:15:b4:11:89:72:95:e6:a6:48:f7:b4:c6:ca:ef:2c:05:6b:
         92:10:ab:04:dc:d1:4f:64:05:ed:26:d9:62:55:fa:37:cd:a8:
         96:7d:ac:8c:6c:e1:85:49:51:74:77:d7:06:93:4e:bd:ad:33:
         6e:59:28:0a:73:eb:c2:7c:91:ad:99:98:a5:47:7f:cc:2b:51:
         2a:d1:df:39:00:e2:1c:a0:1f:2f:67:f1:4f:da:18:1f:73:1b:
         df:ec:d8:f6:ed:6c:44:07:6d:3c:5c:0c:6e:32:84:4d:16:32:
         87:16:63:e5:52:52:a5:0e:e8:4d:c7:e3:8c:f8:78:e2:4a:7b:
         49:91:b8:55
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUUB9R2ZOuF9T42WUDXnd2aKF6q8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD
RDI4M0U5QTAeFw0yNDA3MDEwMDU4NDNaFw0yNTA2MzAwMTAzNDNaMDMxMTAvBgNV
BAMTKENGN0I3OTE4NEIzRkFBN0RCRUYzNUU0RkQ4QUNEQjFFOTQ4RjRFQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX4ZcNu3lcTL3PFrVitYSHdtCw
TYZwRJ/uE1Mbw5YPXmlA0xnqvZsASy3hVPdcw3L1mqy3Ce1R05Y6ObnYtoE/Jawv
gplIGbY6np3CsRxMWIOSRzgauyxzh0etBuZDyT7wabEu/Nradt93EGRHCLBJuMYU
YoaRAjqUWXo8injjuJMIXIpeGgnHLbtPHh3A1Wc/utjIe8Fe0Myntn0oTVicVj77
Y+yVScVCKeIBtqK0kvV65EpCZ+RT4lHkHB4IuRLWprssZkSxogiyquIOCvv9NwSO
3nj1d4S5zaf/jwAzygbTiqmVDuA4eUJYBc7mhWxGKpnq3wbN4cq+Fv4V44l3AgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUz3t5GEs/qn2+815P2KzbHpSPTqYwHwYDVR0j
BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0
NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4
M0U5QS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2ZmOTY5ZmMtMzljNy00NGNkLTg3
MTYtOWNlNGM2ZDVhYzkxLzAvMzEzMTM5MmUzMjJlMzQzNDJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDMzMzgzNTMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB3AiwwDQYJKoZIhvcNAQEL
BQADggEBAEpOt4ZJb5C56pKGrmQt3yYCxY607ng3pvYzZiGTwnr1tAqaV8RDf+eU
XscpLzBE3U548bz0m8SQ9Cf91jyUCGi0PBMOG9Rr3T4axUozZBbdufiGcE9uMvNZ
8Lf3qjLdi2bG0y4G3GvN6JSRp6/HV8RyPRQCTcNd3LcXcJE5pRwVtBGJcpXmpkj3
tMbK7ywFa5IQqwTc0U9kBe0m2WJV+jfNqJZ9rIxs4YVJUXR31waTTr2tM25ZKApz
68J8ka2ZmKVHf8wrUSrR3zkA4hygHy9n8U/aGB9zG9/s2PbtbEQHbTxcDG4yhE0W
MocWY+VSUqUO6E3H44z4eOJKe0mRuFU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:51 2024 by rpki-client on console-fra.rpki-client.org