Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38322e302f32342d3234203d3e203338373533.roa
File:                     3131392e3131302e38322e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          X8x4OLfl/JNoDRgWFMf/da2Tq8hohIaqReaFRHUYnoI=
Subject key identifier:   9D:A7:70:0B:E8:97:FE:76:D3:78:DA:FD:DF:BC:10:55:5C:0D:FD:94
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       75BE83A0EDE8B71BF88644C6D60E666C187575D8
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38322e302f32342d3234203d3e203338373533.roa
Signing time:             Tue 18 Jun 2024 03:00:01 +0000
ROA not before:           Tue 18 Jun 2024 02:55:01 +0000
ROA not after:            Tue 17 Jun 2025 03:00:01 +0000
asID:                     38753
IP address blocks:        119.110.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:be:83:a0:ed:e8:b7:1b:f8:86:44:c6:d6:0e:66:6c:18:75:75:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: Jun 18 02:55:01 2024 GMT
            Not After : Jun 17 03:00:01 2025 GMT
        Subject: CN=9DA7700BE897FE76D378DAFDDFBC10555C0DFD94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:c2:42:ce:79:ce:72:bd:a7:01:de:ad:65:
                    43:fb:7e:d2:d4:28:c7:f0:61:d2:f8:84:49:16:03:
                    b2:fc:48:1d:81:26:fe:b6:bd:c6:05:36:cb:6e:38:
                    ff:1c:87:b9:d9:7d:c5:a8:2f:7a:90:cb:c3:ee:cd:
                    0f:3b:45:bd:dc:90:7c:08:45:e9:b3:91:48:7e:11:
                    a7:5c:24:ff:ed:3f:fb:ab:05:7f:aa:2a:86:49:95:
                    16:16:3c:24:c9:53:d1:08:c4:d5:d4:38:5a:b5:2a:
                    13:ac:92:61:69:67:a9:9f:7a:d2:7a:b8:98:5f:cd:
                    ba:b2:64:93:e6:60:d9:83:7c:c0:48:e7:7a:ab:a2:
                    70:e4:49:5e:4a:39:be:9f:28:2e:76:dc:ec:dd:d8:
                    cf:f8:58:f7:78:a2:0d:b2:36:c9:d1:5c:ab:7a:7d:
                    5b:3c:62:a9:99:de:6b:29:50:27:fb:1d:aa:9a:8b:
                    e5:4c:9f:f3:5e:cb:61:6b:ca:88:63:1c:e1:1c:0a:
                    ef:1f:bf:24:e6:b0:09:33:c7:b8:c9:be:5b:81:07:
                    0e:67:5e:2c:4d:4f:56:ea:e7:ff:97:6d:cd:ef:61:
                    e3:c8:8d:c1:cc:a0:f5:fa:a1:18:bb:ee:48:48:b6:
                    6a:88:60:4e:6f:da:2d:03:65:dc:03:a8:7c:fb:4e:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A7:70:0B:E8:97:FE:76:D3:78:DA:FD:DF:BC:10:55:5C:0D:FD:94
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38322e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:c4:15:76:e5:bc:2e:76:77:91:06:76:83:b7:66:52:c9:0f:
         78:3e:39:b2:e6:9d:b7:dd:b1:75:7b:f0:a0:70:50:e3:4a:b0:
         e8:6b:40:77:bd:b2:d0:fc:82:d7:8c:5b:af:04:44:cc:b0:a1:
         97:c5:95:67:2e:f6:ab:14:20:42:e7:b0:28:3d:fe:6e:6c:6d:
         ea:97:b4:a0:ff:36:55:12:a2:79:2a:98:81:b5:3b:b9:61:ba:
         c1:7d:45:8e:99:5f:ff:9d:eb:8d:7d:82:02:17:4e:6d:a3:b3:
         8e:56:70:f8:be:31:15:55:29:15:3b:da:62:5a:8e:05:99:61:
         d8:30:b4:c0:85:06:1f:20:0d:35:4f:d4:62:f0:42:8b:b7:4c:
         65:c9:f6:b7:26:1c:9b:eb:6d:9d:67:53:df:42:bf:96:aa:8c:
         4a:61:ef:63:c3:2b:1e:03:21:e5:fc:35:e5:31:c8:27:d0:b0:
         a3:2d:2f:20:fa:5c:7b:94:af:bc:13:58:03:59:a5:a4:a0:f0:
         3a:59:6a:e5:5b:a6:16:4b:47:0e:31:60:23:54:7b:fc:04:98:
         ff:54:88:c9:d9:cc:56:db:e6:9f:43:57:8c:ad:96:22:d3:7f:
         37:88:02:55:05:98:56:c5:4d:43:14:a0:8e:48:b3:bb:2a:1f:
         f9:28:64:ec
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUdb6DoO3otxv4hkTG1g5mbBh1ddgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2
OERGNkUxNDAeFw0yNDA2MTgwMjU1MDFaFw0yNTA2MTcwMzAwMDFaMDMxMTAvBgNV
BAMTKDlEQTc3MDBCRTg5N0ZFNzZEMzc4REFGRERGQkMxMDU1NUMwREZEOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvpsJCznnOcr2nAd6tZUP7ftLU
KMfwYdL4hEkWA7L8SB2BJv62vcYFNstuOP8ch7nZfcWoL3qQy8PuzQ87Rb3ckHwI
RemzkUh+EadcJP/tP/urBX+qKoZJlRYWPCTJU9EIxNXUOFq1KhOskmFpZ6mfetJ6
uJhfzbqyZJPmYNmDfMBI53qronDkSV5KOb6fKC523Ozd2M/4WPd4og2yNsnRXKt6
fVs8YqmZ3mspUCf7Haqai+VMn/Ney2FryohjHOEcCu8fvyTmsAkzx7jJvluBBw5n
XixNT1bq5/+Xbc3vYePIjcHMoPX6oRi77khItmqIYE5v2i0DZdwDqHz7Tux3AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUnadwC+iX/nbTeNr937wQVVwN/ZQwHwYDVR0j
BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz
NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG
NkUxNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i
NmMyLTQyYWI4YjQ3NjI0OS8wLzMxMzEzOTJlMzEzMTMwMmUzODMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM3MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHduUjANBgkqhkiG
9w0BAQsFAAOCAQEAE8QVduW8LnZ3kQZ2g7dmUskPeD45suadt92xdXvwoHBQ40qw
6GtAd72y0PyC14xbrwREzLChl8WVZy72qxQgQuewKD3+bmxt6pe0oP82VRKieSqY
gbU7uWG6wX1Fjplf/53rjX2CAhdObaOzjlZw+L4xFVUpFTvaYlqOBZlh2DC0wIUG
HyANNU/UYvBCi7dMZcn2tyYcm+ttnWdT30K/lqqMSmHvY8MrHgMh5fw15THIJ9Cw
oy0vIPpce5SvvBNYA1mlpKDwOllq5VumFktHDjFgI1R7/ASY/1SIydnMVtvmn0NX
jK2WItN/N4gCVQWYVsVNQxSgjkizuyof+Shk7A==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org