Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38312e302f32342d3234203d3e203137363731.roa
File:                     3131342e3139392e38312e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier:          dinJxtIYiL6Hj3iapu8e4T2LzIAoG4WEPsT0CeiY0k0=
Subject key identifier:   F6:E2:67:96:59:8A:F2:36:4B:09:FC:31:98:C3:78:78:C9:5D:F0:B6
Certificate issuer:       /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial:       41D8AE01F45D5AE435EB059B773EAEDD7867D771
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38312e302f32342d3234203d3e203137363731.roa
Signing time:             Sat 15 Jun 2024 12:01:54 +0000
ROA not before:           Sat 15 Jun 2024 11:56:54 +0000
ROA not after:            Sat 14 Jun 2025 12:01:54 +0000
asID:                     17671
IP address blocks:        114.199.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
                          rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d8:ae:01:f4:5d:5a:e4:35:eb:05:9b:77:3e:ae:dd:78:67:d7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
        Validity
            Not Before: Jun 15 11:56:54 2024 GMT
            Not After : Jun 14 12:01:54 2025 GMT
        Subject: CN=F6E26796598AF2364B09FC3198C37878C95DF0B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:c0:60:60:41:b5:6e:41:0a:60:72:cc:67:
                    aa:c6:a6:51:0f:10:f3:20:95:05:ca:73:5e:b3:3f:
                    49:e0:2c:ce:69:ec:60:0b:da:d2:f6:b0:90:e6:a0:
                    fa:44:10:18:01:ed:f8:00:c2:5d:a8:3c:6d:16:36:
                    9b:75:a1:db:e2:ff:f0:d8:0c:0e:88:25:c9:b5:8b:
                    cb:e3:f4:c6:af:c6:e0:b0:b3:50:83:40:2d:ac:5b:
                    cc:02:2a:3d:cd:68:78:ca:f5:ba:26:51:75:2f:a5:
                    93:9c:ab:46:df:8a:65:bc:40:7e:2a:f7:52:db:6d:
                    0f:55:e6:6a:58:56:71:f5:36:f5:48:27:ef:ad:86:
                    ef:31:94:4a:c6:0c:a8:a5:eb:eb:c0:18:10:e4:b8:
                    ea:f1:4d:dc:0e:16:71:d0:11:b4:3b:f8:5e:70:e9:
                    68:0f:f7:cc:1d:98:09:b3:9c:54:d8:41:8d:4d:99:
                    27:8a:cc:cd:8b:bd:a1:9b:78:d7:84:03:6d:36:b2:
                    96:62:09:2b:79:e1:0f:25:fb:70:fd:86:58:b8:32:
                    9b:f2:ce:52:02:2c:d9:e6:7e:5c:b3:f3:ae:5d:71:
                    b1:33:5c:cf:94:5c:4b:88:03:80:c4:ba:20:4f:88:
                    ef:37:4d:b6:54:56:d3:ff:60:91:1f:0b:07:d5:4e:
                    d6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E2:67:96:59:8A:F2:36:4B:09:FC:31:98:C3:78:78:C9:5D:F0:B6
            X509v3 Authority Key Identifier:
                keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38312e302f32342d3234203d3e203137363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:df:2d:b6:08:35:4d:d6:ac:3c:70:3f:b6:a5:f9:5d:8a:cb:
         ff:bf:50:af:81:7e:ec:29:06:d3:19:30:4d:5b:c2:1e:32:33:
         4a:55:90:8c:30:87:3e:89:9b:60:8e:04:a9:27:9d:40:fc:1f:
         8d:e8:21:d8:86:03:4d:f0:c7:0b:56:4a:21:08:2c:24:36:db:
         07:98:11:89:b3:2a:a6:0c:c6:cd:0d:33:51:c6:28:b1:bc:8b:
         83:89:fa:5c:42:cf:a5:0b:6b:8c:ea:e7:5b:d4:e8:8b:3e:8d:
         8c:c6:2e:96:87:ff:e2:06:e4:9c:13:36:a1:31:da:bf:0c:80:
         a2:54:7d:d3:09:5b:53:e1:12:03:52:61:00:5c:22:b7:8e:1b:
         1c:5c:1b:71:16:4d:d2:4b:20:09:78:76:db:ff:4b:f7:ec:af:
         dc:37:0f:18:c4:bc:ca:8a:cf:8e:c5:3d:cf:64:54:1b:fa:72:
         cd:36:25:6c:9d:8d:ec:ce:9d:ba:6b:3e:b6:02:74:a6:60:05:
         3b:82:ca:66:e6:2a:6a:0b:21:87:f6:17:dc:2f:72:ff:e2:5a:
         aa:d8:f8:d1:31:43:ed:b2:b3:e5:ac:f3:83:a5:19:a3:25:30:
         ea:21:be:e1:9f:2c:29:80:20:71:e5:b2:21:3a:a0:a7:c3:73:
         9e:6c:8d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org