Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3131392e31382e3135322e302f32312d3234203d3e203333363137.roa
File:                     3131392e31382e3135322e302f32312d3234203d3e203333363137.roa (raw, json)
Hash identifier:          tiNmNAGxR1XPc5v7evCcqVEDbasNaq/VeaRVG4VzAFE=
Subject key identifier:   98:82:D0:AC:04:F9:A8:03:A2:A2:C3:C6:56:0F:E3:75:C1:C6:BD:CC
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       1B3FB88A25ACA96EF5E5A1C651AAA30B2CE01E34
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3131392e31382e3135322e302f32312d3234203d3e203333363137.roa
Signing time:             Mon 29 Jul 2024 15:02:34 +0000
ROA not before:           Mon 29 Jul 2024 14:57:34 +0000
ROA not after:            Mon 28 Jul 2025 15:02:34 +0000
asID:                     33617
IP address blocks:        119.18.152.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3f:b8:8a:25:ac:a9:6e:f5:e5:a1:c6:51:aa:a3:0b:2c:e0:1e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Jul 29 14:57:34 2024 GMT
            Not After : Jul 28 15:02:34 2025 GMT
        Subject: CN=9882D0AC04F9A803A2A2C3C6560FE375C1C6BDCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:19:50:2d:c0:2e:a4:d7:66:c1:18:20:13:a8:
                    40:53:a5:38:53:61:de:45:4c:15:82:87:ee:c2:3f:
                    49:0f:de:3a:1b:3d:9a:db:66:2f:d7:86:11:fa:c1:
                    07:c6:3a:e2:f2:3f:89:d3:f8:54:30:b9:9b:8d:be:
                    26:d9:1b:58:e2:8b:fd:dc:dd:16:26:52:81:54:21:
                    22:03:19:81:38:a9:06:8a:60:b0:45:ec:35:8d:f9:
                    28:7e:8f:0c:34:b3:96:f6:c8:66:ac:da:a7:b0:c0:
                    f1:85:e6:5d:d2:f6:48:db:59:3c:00:d0:93:e4:89:
                    64:34:07:ad:22:8c:d5:84:1f:0c:f5:f0:7a:49:76:
                    68:47:75:d3:24:7c:af:4f:81:d8:fc:a5:2f:32:df:
                    15:1b:ef:d6:d2:6a:a1:ac:c8:7c:10:49:ea:b6:32:
                    a4:22:57:73:c5:d7:cb:a8:56:76:38:8e:be:3b:a5:
                    f8:87:87:18:bf:37:22:a1:0c:01:0a:67:9b:cb:9d:
                    54:4c:65:70:00:af:36:ac:d1:af:8e:59:8d:31:2f:
                    d9:b5:48:65:14:8c:8c:ca:89:31:62:1e:2f:aa:0a:
                    98:44:27:ae:56:18:c1:59:bc:62:3f:1b:cc:c3:f3:
                    77:b0:d2:f8:e1:32:eb:e4:98:2e:99:f1:53:c9:d9:
                    b4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:82:D0:AC:04:F9:A8:03:A2:A2:C3:C6:56:0F:E3:75:C1:C6:BD:CC
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3131392e31382e3135322e302f32312d3234203d3e203333363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.18.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:02:67:98:eb:f1:db:a1:90:ec:f7:7a:ca:ca:8b:6a:12:93:
         07:52:5a:06:23:87:1b:40:d0:62:cc:1e:17:cd:54:90:e1:0a:
         4f:b1:ba:c2:75:42:43:0f:0d:52:0b:ca:39:55:b1:f7:58:58:
         73:fa:59:f0:92:94:f1:a1:27:ac:50:72:6a:e5:6e:a8:63:59:
         e6:30:85:6b:34:76:80:75:86:0b:74:56:4e:72:f0:4e:e5:50:
         63:44:85:27:cf:02:f0:12:4f:fc:88:72:91:3c:ca:67:ca:80:
         f8:80:aa:1f:00:9a:8d:da:39:16:55:b0:0c:58:d1:dc:21:b3:
         dc:69:90:5a:a5:ba:85:f0:85:92:45:37:01:64:74:05:03:58:
         5e:25:81:68:a5:36:2f:5d:3c:86:4a:21:78:57:b9:1a:66:96:
         92:be:af:f0:68:38:91:e9:60:17:7e:38:ce:71:d0:5e:c2:db:
         bf:99:39:19:1c:73:8b:15:6e:6c:69:ec:51:b3:86:0e:67:02:
         2b:64:d6:37:9a:16:21:33:62:26:80:21:26:b2:c3:f0:ae:e0:
         35:00:94:d5:a0:1a:95:62:d9:3a:79:4c:76:5d:35:64:70:14:
         81:be:97:bb:14:6a:f3:d4:6f:d7:be:33:da:c3:7f:97:39:2c:
         a3:db:e2:12
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGz+4iiWsqW715aHGUaqjCyzgHjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4
MTFBNzA0RDAeFw0yNDA3MjkxNDU3MzRaFw0yNTA3MjgxNTAyMzRaMDMxMTAvBgNV
BAMTKDk4ODJEMEFDMDRGOUE4MDNBMkEyQzNDNjU2MEZFMzc1QzFDNkJEQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPGVAtwC6k12bBGCATqEBTpThT
Yd5FTBWCh+7CP0kP3jobPZrbZi/XhhH6wQfGOuLyP4nT+FQwuZuNvibZG1jii/3c
3RYmUoFUISIDGYE4qQaKYLBF7DWN+Sh+jww0s5b2yGas2qewwPGF5l3S9kjbWTwA
0JPkiWQ0B60ijNWEHwz18HpJdmhHddMkfK9Pgdj8pS8y3xUb79bSaqGsyHwQSeq2
MqQiV3PF18uoVnY4jr47pfiHhxi/NyKhDAEKZ5vLnVRMZXAArzas0a+OWY0xL9m1
SGUUjIzKiTFiHi+qCphEJ65WGMFZvGI/G8zD83ew0vjhMuvkmC6Z8VPJ2bQnAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUmILQrAT5qAOiosPGVg/jdcHGvcwwHwYDVR0j
BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw
RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB
NzA0RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04
ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMxMzEzOTJlMzEzODJlMzEzNTMyMmUzMDJmMzIz
MTJkMzIzNDIwM2QzZTIwMzMzMzM2MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3cSmDANBgkqhkiG
9w0BAQsFAAOCAQEARwJnmOvx26GQ7Pd6ysqLahKTB1JaBiOHG0DQYsweF81UkOEK
T7G6wnVCQw8NUgvKOVWx91hYc/pZ8JKU8aEnrFByauVuqGNZ5jCFazR2gHWGC3RW
TnLwTuVQY0SFJ88C8BJP/IhykTzKZ8qA+ICqHwCajdo5FlWwDFjR3CGz3GmQWqW6
hfCFkkU3AWR0BQNYXiWBaKU2L108hkoheFe5GmaWkr6v8Gg4kelgF344znHQXsLb
v5k5GRxzixVubGnsUbOGDmcCK2TWN5oWITNiJoAhJrLD8K7gNQCU1aAalWLZOnlM
dl01ZHAUgb6XuxRq89Rv174z2sN/lzkso9viEg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org