Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa
File:                     3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (raw, json)
Hash identifier:          7oqjul+B96Fyx6/pagmyjP5QQVBBMq8zOtlvMQysbzI=
Subject key identifier:   6D:DC:E5:7B:BE:FA:DC:6B:0B:98:6F:58:7B:F2:68:04:02:13:49:ED
Certificate issuer:       /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial:       17C14A532069E4DFA69431E6AD508FC27B4CA34B
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa
Signing time:             Thu 27 Jun 2024 12:54:11 +0000
ROA not before:           Thu 27 Jun 2024 12:49:11 +0000
ROA not after:            Thu 26 Jun 2025 12:54:11 +0000
asID:                     140481
IP address blocks:        110.76.144.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
                          rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 12:58:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c1:4a:53:20:69:e4:df:a6:94:31:e6:ad:50:8f:c2:7b:4c:a3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
        Validity
            Not Before: Jun 27 12:49:11 2024 GMT
            Not After : Jun 26 12:54:11 2025 GMT
        Subject: CN=6DDCE57BBEFADC6B0B986F587BF26804021349ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:13:fc:f9:58:27:7d:42:7b:18:9e:21:eb:
                    47:b4:68:0e:9c:d0:9f:94:07:14:7c:2c:95:d9:f3:
                    11:fa:c1:33:4f:2e:b4:e6:9e:8e:d2:7e:15:f3:66:
                    fd:00:a7:8f:4a:18:28:14:4a:9e:e4:09:5d:62:2a:
                    d1:70:b3:ae:74:78:0d:53:f2:cb:7c:4b:4e:e5:5a:
                    bd:4a:6f:32:12:20:3d:42:4f:4c:89:40:95:73:58:
                    4b:21:b8:e1:7b:46:69:75:13:3b:ed:bd:26:ea:b4:
                    c8:14:10:0c:6d:23:cc:b7:1c:69:0b:eb:e2:9c:9f:
                    ff:90:d9:1c:b4:7b:cd:3b:68:8a:fe:3b:51:21:80:
                    8b:95:37:02:9d:7c:2c:66:ef:bd:a0:93:47:cc:b7:
                    9a:fc:75:35:99:5f:eb:df:98:26:80:c3:f3:a7:29:
                    6a:d1:40:27:b4:7c:25:40:03:b7:86:a6:5b:c7:3a:
                    ef:0c:78:b8:c1:7e:d9:7b:ef:34:91:9f:49:52:83:
                    ad:8a:39:a4:54:93:27:5b:10:d7:55:6f:b8:dc:83:
                    96:bb:8f:f4:cc:7a:71:f3:5d:4f:99:ed:08:61:93:
                    e0:8e:eb:f5:2d:6c:1f:20:4f:bb:d4:f2:ab:6c:03:
                    7a:ff:fa:af:e1:2d:62:ba:55:d0:18:74:45:9b:dc:
                    7c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DC:E5:7B:BE:FA:DC:6B:0B:98:6F:58:7B:F2:68:04:02:13:49:ED
            X509v3 Authority Key Identifier:
                keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.76.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:74:04:ad:6e:53:e3:5d:cb:98:3f:22:1e:b0:e0:7f:dd:e6:
         a5:3a:05:52:f9:b1:80:14:5e:1b:0c:c4:7d:de:d6:59:60:18:
         68:53:f5:b2:ac:d7:e2:a6:95:e8:b5:14:45:31:23:2e:5e:4b:
         fe:70:c8:77:f8:46:ce:cc:2b:d5:fe:1a:87:65:2b:cc:89:2a:
         fc:d7:22:58:a4:38:01:32:66:12:cc:c9:f1:0b:ec:c1:9e:24:
         df:76:4e:92:d9:ae:ea:06:69:89:b0:61:76:92:c0:82:55:a8:
         a4:96:27:2c:09:50:88:77:de:8c:e8:55:ac:9d:01:13:8f:12:
         9f:4f:38:07:63:24:fb:ee:9f:3a:ac:ea:d1:81:4e:cb:03:98:
         67:74:4a:5a:68:f6:08:f1:cd:89:d2:3b:5c:11:6b:64:f7:8e:
         35:40:d7:2d:79:77:94:19:06:c3:1b:e0:d7:07:2b:8a:b2:1c:
         3a:f9:6e:9c:fd:c5:c8:00:29:5d:78:e0:00:78:07:94:7d:54:
         a2:e7:8c:ac:4f:19:bb:45:26:47:51:a1:b5:c4:e0:e8:1e:b2:
         aa:4b:67:c6:05:6a:3c:cb:ea:84:e7:8e:08:bc:79:ef:22:dd:
         4f:24:c8:a2:aa:c4:62:2e:ed:8b:39:61:c3:79:fc:52:19:98:
         40:10:3c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:38 2024 by rpki-client on console-fra.rpki-client.org