Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38322e302f32332d3233203d3e203338373533.roa
File:                     3131392e3131302e38322e302f32332d3233203d3e203338373533.roa (raw, json)
Hash identifier:          KPIbdWalDnCtJ4caGROoue1NqmM3xKlKsn279511Q3s=
Subject key identifier:   85:AF:68:43:D4:7A:49:D2:88:39:91:E4:42:D5:62:8B:10:15:E1:11
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       3A5CDF52F75351B64907412D3FBBF0E1C1115BAB
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38322e302f32332d3233203d3e203338373533.roa
Signing time:             Tue 02 Jul 2024 08:03:17 +0000
ROA not before:           Tue 02 Jul 2024 07:58:17 +0000
ROA not after:            Tue 01 Jul 2025 08:03:17 +0000
asID:                     38753
IP address blocks:        119.110.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:5c:df:52:f7:53:51:b6:49:07:41:2d:3f:bb:f0:e1:c1:11:5b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: Jul  2 07:58:17 2024 GMT
            Not After : Jul  1 08:03:17 2025 GMT
        Subject: CN=85AF6843D47A49D2883991E442D5628B1015E111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:96:cf:cb:97:f0:14:f0:54:6e:51:08:e3:8d:
                    d0:88:e3:99:f0:ad:45:35:b1:eb:a8:3d:19:e5:89:
                    70:ad:3c:fe:14:91:e1:cf:55:2c:fb:17:d0:e2:70:
                    89:64:d4:48:94:a3:ff:74:52:93:fc:f9:a4:3e:8e:
                    26:0a:44:fc:5b:bc:a0:5d:91:6c:c1:f5:f8:11:1a:
                    0a:8a:4e:75:e7:63:6b:fc:c6:61:22:63:04:15:cd:
                    e8:29:05:d4:57:bb:74:54:65:a0:fe:7a:51:c2:b2:
                    11:b4:b3:01:5f:8b:d2:31:4e:2b:3f:f8:de:da:6d:
                    4c:36:6c:2a:e0:d6:47:14:8e:f5:d5:91:58:02:bc:
                    34:3b:4a:8c:37:43:49:46:fb:0d:27:a5:75:c4:c0:
                    ee:e4:2c:e3:8c:fc:70:99:17:2d:d1:61:43:c3:69:
                    d0:5e:ad:34:9d:c0:7a:d1:0a:8c:1e:ed:8e:aa:91:
                    c9:af:57:ce:5c:ee:4b:45:2a:b9:df:28:2f:a1:a6:
                    9d:a3:87:7a:37:b1:df:4e:47:19:30:af:04:a2:8f:
                    1f:cf:a2:04:17:b9:b4:c6:09:da:39:55:bb:98:1f:
                    a0:8d:b6:08:0a:29:1e:8a:ca:e9:99:1c:ba:61:02:
                    2d:6a:51:2e:4e:0b:1a:ed:53:72:fa:62:26:2c:6a:
                    b3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AF:68:43:D4:7A:49:D2:88:39:91:E4:42:D5:62:8B:10:15:E1:11
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38322e302f32332d3233203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:e8:c4:a6:d2:d5:05:ac:05:9a:08:a0:e2:84:44:71:67:7a:
         47:6e:06:ec:c5:c8:f9:10:91:2e:a7:1a:de:32:ff:59:93:d0:
         79:58:4a:7e:c4:1e:01:49:19:de:d2:29:73:76:b2:49:65:90:
         c5:0e:4c:7a:27:61:6b:07:b7:8b:89:ca:2b:9c:4d:7a:09:4c:
         90:4b:80:83:47:b4:ab:23:dc:cc:6d:9b:0a:e3:d7:87:73:bb:
         b9:0d:6f:77:ed:6d:30:73:77:28:47:8d:1a:ab:2d:37:d1:ad:
         64:66:7b:17:05:dd:a1:8d:6b:cb:93:31:ed:a2:8b:07:97:d6:
         fe:e0:53:15:ba:09:6d:86:ef:c2:55:3f:44:81:88:b4:d3:5f:
         50:a4:7f:be:a9:c3:62:06:7a:b3:b6:6d:80:b5:6a:b7:b5:0e:
         30:68:5d:8f:4e:f3:c3:c6:2b:fd:b8:b9:bb:43:d3:9e:83:eb:
         20:b3:f6:25:5f:cd:e2:7e:aa:7a:bb:30:6c:82:67:59:29:44:
         93:84:b3:f0:cd:e8:6c:9a:6a:f1:a7:11:52:b7:63:31:2f:d2:
         b0:d6:9f:e2:c1:34:52:7b:39:aa:01:4d:91:bf:b8:e4:5a:ed:
         1d:68:c4:b2:22:5f:5e:b6:e2:84:82:48:a3:70:5b:6d:de:f9:
         09:02:4f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org