Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa
File:                     3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (raw, json)
Hash identifier:          +6pVD67UjeVGjTszHXfeH5DOs+PMEo+OZcwkbcYuJKY=
Subject key identifier:   50:DC:E3:C4:6C:97:D5:AB:5F:E9:85:30:D0:83:42:3C:5F:25:66:69
Certificate issuer:       /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial:       05325FED29C8484A1F00A9E7E07665C1AC9876DB
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa
Signing time:             Sat 31 Aug 2024 16:13:06 +0000
ROA not before:           Sat 31 Aug 2024 16:08:06 +0000
ROA not after:            Sat 30 Aug 2025 16:13:06 +0000
asID:                     140481
IP address blocks:        110.76.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
                          rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 12:58:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:32:5f:ed:29:c8:48:4a:1f:00:a9:e7:e0:76:65:c1:ac:98:76:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
        Validity
            Not Before: Aug 31 16:08:06 2024 GMT
            Not After : Aug 30 16:13:06 2025 GMT
        Subject: CN=50DCE3C46C97D5AB5FE98530D083423C5F256669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:db:f2:1c:df:da:c2:16:cb:aa:6b:92:51:
                    4f:cf:78:24:84:5a:f3:dd:ec:47:04:48:22:17:44:
                    37:d4:a3:14:5f:1e:2d:10:8e:1f:5a:da:77:5e:f9:
                    a9:04:5e:75:c0:ee:0b:10:d2:a5:71:c4:96:9f:aa:
                    4b:f4:14:df:6b:be:1e:d3:28:b4:a1:ca:2a:45:56:
                    0c:0a:a1:19:f8:86:d6:12:a2:b8:c2:29:f1:e3:8c:
                    4c:7c:a6:15:73:1b:c7:54:0f:39:c9:4a:67:4d:03:
                    5f:5c:3e:e1:39:7d:4d:19:28:94:ac:18:02:07:22:
                    bf:6a:f9:9c:6a:45:54:34:8b:19:08:b2:e4:39:80:
                    e3:a9:b6:94:1a:4f:38:e6:19:16:0a:26:f3:e4:2d:
                    dc:e8:aa:c8:58:a3:d0:1a:e2:b0:2c:0a:bf:3a:ce:
                    3c:ed:c7:19:4e:7d:bf:e4:f8:b4:81:00:f2:f6:89:
                    e6:f1:6e:be:c9:59:97:ee:fd:89:b3:9f:f5:f4:58:
                    f2:66:3f:ed:c5:65:5e:cf:71:4e:2a:79:73:97:1d:
                    8e:d4:69:ce:ca:63:8a:0f:95:4a:5e:1c:83:a9:e4:
                    ff:14:ad:74:1b:c0:c4:ce:52:55:90:2b:2d:80:43:
                    7a:4b:00:83:f2:52:bc:d9:8c:af:d6:d0:ea:8f:ba:
                    db:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DC:E3:C4:6C:97:D5:AB:5F:E9:85:30:D0:83:42:3C:5F:25:66:69
            X509v3 Authority Key Identifier:
                keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.76.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:88:89:84:d7:73:9a:04:26:ec:59:66:43:4d:db:31:c1:d6:
         d5:d8:d1:66:9e:22:41:e6:d2:cb:48:27:48:50:2b:d9:42:84:
         58:78:90:53:62:aa:4a:c4:d8:5b:83:e2:1f:69:1a:72:7b:65:
         80:4e:29:05:e5:12:3d:e2:d3:46:6c:02:13:ed:5c:2c:ac:5e:
         6b:37:7b:22:ab:5c:1b:d5:fe:f2:56:50:8b:13:f7:27:f8:ec:
         63:e3:1b:be:6b:a9:07:bc:c0:70:b5:33:49:5b:b1:f8:d8:92:
         db:a1:8b:1c:12:b7:1b:78:8d:4b:2b:10:e3:62:df:94:51:93:
         6c:7d:bb:3c:13:57:7c:d5:b5:ed:58:6b:6d:36:d0:45:ac:57:
         c0:51:ed:64:f6:16:44:2c:8e:30:87:f4:62:a0:ed:ce:2a:0a:
         b1:75:7c:ff:7e:ad:5c:2a:d5:cc:39:bc:d3:1d:3c:4f:95:1d:
         b9:7a:a9:16:3a:36:0c:46:bd:67:a8:e1:f6:18:b5:85:0e:ee:
         7b:2e:de:88:e4:1f:fe:ab:03:e4:f6:05:f6:ad:a5:59:f9:ca:
         7d:d6:3c:f2:ef:4a:4f:78:b1:ea:d0:6e:12:69:6f:a4:db:94:
         31:af:ee:96:e1:b6:98:d5:03:cb:77:b8:41:23:f5:77:e1:87:
         e3:da:2c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:38 2024 by rpki-client on console-fra.rpki-client.org