Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39322e302f32342d3234203d3e203137363731.roa
File:                     3131342e3139392e39322e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier:          OYsSj3+sQLZCmZwok90FpOqvAQiXQe2kxuSszWAuLrk=
Subject key identifier:   28:B9:BF:BB:0E:30:47:58:39:DD:B1:64:50:3D:D5:A3:8B:19:68:C5
Certificate issuer:       /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial:       79123A04C769416A1EE8551264BAB3F7CE7FE1B6
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39322e302f32342d3234203d3e203137363731.roa
Signing time:             Sat 15 Jun 2024 12:01:52 +0000
ROA not before:           Sat 15 Jun 2024 11:56:52 +0000
ROA not after:            Sat 14 Jun 2025 12:01:52 +0000
asID:                     17671
IP address blocks:        114.199.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
                          rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:12:3a:04:c7:69:41:6a:1e:e8:55:12:64:ba:b3:f7:ce:7f:e1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
        Validity
            Not Before: Jun 15 11:56:52 2024 GMT
            Not After : Jun 14 12:01:52 2025 GMT
        Subject: CN=28B9BFBB0E30475839DDB164503DD5A38B1968C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e7:84:94:d8:bb:66:76:fd:5e:71:a8:ac:69:
                    4a:1f:cf:06:64:f9:48:86:e7:d6:54:f0:2b:1a:d8:
                    d1:87:93:9f:da:bb:fe:35:bb:ca:c9:8d:5c:a2:aa:
                    89:8e:3f:fa:89:2b:eb:9a:c4:c3:b8:ba:f3:69:64:
                    8b:0b:1e:06:b4:81:f7:a1:2c:46:de:01:7a:35:17:
                    29:a6:31:7a:1d:db:d1:86:be:a3:ba:e2:92:7e:c8:
                    fa:4c:58:93:84:8a:1f:8c:2e:22:39:38:df:b7:52:
                    0b:15:3d:8c:7a:8e:5c:34:85:1b:d7:0a:e8:a4:a6:
                    43:5b:95:50:6d:53:3b:58:2a:80:31:a0:82:d9:bc:
                    f6:a2:9d:50:b0:36:07:b9:09:75:b2:ac:7d:da:8b:
                    ee:ba:cc:1f:0d:cc:69:e3:90:f8:02:d3:87:11:18:
                    b7:34:9e:17:28:f7:5c:88:0e:8b:7e:8f:b5:d7:c4:
                    c2:b4:05:4e:9e:a3:70:6b:32:5b:ed:8a:fe:7b:b8:
                    d8:31:e1:50:40:5f:a7:58:3f:60:cf:62:50:c6:f8:
                    c2:e0:5d:d6:07:0d:1a:19:9c:64:93:54:3b:69:6a:
                    54:08:ab:4b:09:21:61:53:e2:7d:5f:81:4a:74:2e:
                    ce:c3:d1:44:82:e4:c6:90:5a:37:ca:bf:e3:5f:ac:
                    88:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B9:BF:BB:0E:30:47:58:39:DD:B1:64:50:3D:D5:A3:8B:19:68:C5
            X509v3 Authority Key Identifier:
                keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39322e302f32342d3234203d3e203137363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:a2:3c:18:87:91:98:2b:bb:4a:c9:a0:a9:b3:80:21:32:87:
         37:0a:38:7d:68:5b:90:fe:af:a5:64:da:bc:bc:cf:24:a7:1f:
         25:5a:ee:87:18:d7:c0:7b:a8:dd:79:fe:f6:b7:44:8b:cb:b8:
         69:91:66:cf:f6:47:0d:c7:8b:ad:2c:4f:2d:9d:82:59:bb:9e:
         f3:6c:77:fa:08:18:3c:5d:99:d2:1f:80:a3:c6:22:f3:a3:cf:
         74:88:ec:ba:29:f3:a7:4f:0c:b1:d1:a2:49:f6:fc:a7:36:ae:
         2c:e5:f0:76:50:5f:e1:c4:6e:46:16:12:7e:ea:fc:e0:9d:d5:
         dd:2d:30:fc:dd:31:f5:54:d6:ba:a6:39:50:e2:b6:be:d9:1d:
         d4:f1:64:b6:88:b0:c7:13:8f:97:e5:c4:34:b2:95:a2:e4:b1:
         96:c3:cb:ff:65:59:f0:86:d4:00:b8:a6:fb:8c:72:d2:63:2b:
         2d:73:04:f9:d2:10:1a:7d:5d:14:24:ac:7d:c4:62:ad:6d:70:
         12:90:0c:fa:8a:0e:74:a7:8f:56:fd:51:19:72:2b:2a:11:a1:
         52:51:16:7b:6c:22:70:f8:21:a8:c9:8b:1d:3a:d0:93:2b:e6:
         bf:5b:c3:6e:06:1b:44:8e:2c:92:a7:67:4c:94:ed:95:07:9c:
         53:47:b5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org