Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38332e302f32342d3234203d3e203338373533.roa
File:                     3131392e3131302e38332e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          BUTWFvmFFyVDt3K5310vu5lFnQuJMSbB86Rx1Ke7ADo=
Subject key identifier:   58:28:AE:8E:28:B0:39:45:3E:F0:39:87:00:73:B2:B9:7B:60:CD:0C
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       6CBFE0E9233FAABC054795121ACC89EF04F06678
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38332e302f32342d3234203d3e203338373533.roa
Signing time:             Tue 11 Jun 2024 03:00:01 +0000
ROA not before:           Tue 11 Jun 2024 02:55:01 +0000
ROA not after:            Tue 10 Jun 2025 03:00:01 +0000
asID:                     38753
IP address blocks:        119.110.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:bf:e0:e9:23:3f:aa:bc:05:47:95:12:1a:cc:89:ef:04:f0:66:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: Jun 11 02:55:01 2024 GMT
            Not After : Jun 10 03:00:01 2025 GMT
        Subject: CN=5828AE8E28B039453EF039870073B2B97B60CD0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:37:5f:2d:39:dc:76:c1:ea:50:c6:30:d4:2f:
                    ea:5f:a4:93:3f:cc:7d:03:dd:e6:ff:cd:14:d6:67:
                    17:77:dc:2b:99:67:1c:dd:bc:26:f6:ec:c0:66:20:
                    4d:4b:80:27:f3:25:15:3f:41:92:e1:b9:ad:2d:3b:
                    1b:23:5d:53:8a:a5:d3:67:5d:13:b4:88:1c:83:34:
                    b9:3a:61:9e:40:87:08:6c:6a:42:2f:02:42:6c:99:
                    5a:68:0b:14:21:6d:e4:1b:9f:dd:e9:9e:9e:91:ae:
                    e7:22:9b:a5:e2:03:20:bf:82:e3:d2:1b:3a:61:15:
                    e6:88:ed:56:4d:1d:27:5a:63:43:b0:91:09:f5:1e:
                    8b:82:5d:36:9e:2e:6b:f1:17:47:7c:22:73:b7:28:
                    c0:ec:64:4d:7d:c7:bb:01:31:4c:ff:e0:78:33:11:
                    2a:ca:c4:ba:5d:eb:60:71:6f:dc:a7:04:f4:91:30:
                    db:b7:6d:65:a2:be:08:68:39:db:97:33:26:12:96:
                    54:f3:2d:80:19:04:21:ba:9a:c1:50:49:e3:82:bb:
                    69:3c:c6:e5:1c:a0:0f:32:c3:44:4f:a6:57:16:0f:
                    05:ac:85:d2:a3:31:60:bd:e6:cf:d1:e9:fd:12:64:
                    07:3c:fe:40:66:4b:ba:50:e5:1e:eb:ec:7c:9f:3a:
                    0d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:28:AE:8E:28:B0:39:45:3E:F0:39:87:00:73:B2:B9:7B:60:CD:0C
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38332e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:7c:44:ad:26:a4:4f:33:f4:0c:b0:7a:10:cb:7e:06:ef:f2:
         43:d7:1a:8a:b9:21:05:7d:76:24:27:74:a3:ca:2a:e7:f4:60:
         a0:d0:76:08:7a:f3:39:15:f4:96:d9:0d:d0:cc:69:c1:ba:2f:
         97:c6:d5:51:76:e8:d9:24:15:aa:49:e7:54:87:af:d0:44:9c:
         ef:ec:db:ef:a0:c6:59:a2:70:2d:0c:76:62:00:d3:9e:0d:89:
         67:99:b3:a5:57:45:3a:1a:2e:c4:56:b6:3d:b9:33:ae:29:a5:
         9a:26:3f:83:f5:e1:8f:0c:81:76:bd:f9:6e:46:f7:72:ff:43:
         eb:a6:4f:05:d3:ab:f0:21:2b:e1:5f:a6:e3:51:58:92:16:95:
         a3:cb:c1:70:74:a7:bc:0f:b9:a9:59:d2:39:45:ca:79:f4:5c:
         d9:76:6a:c6:8a:94:b6:bb:50:ae:f8:ff:d8:3b:22:3e:71:42:
         29:46:d7:3a:b9:3a:4e:5f:73:a8:52:10:36:be:2a:51:ec:e6:
         d4:29:44:31:77:fe:82:4b:3a:85:33:d6:26:b9:5b:57:a5:fa:
         49:10:4e:25:1d:20:de:9e:24:8c:c5:e7:18:50:7a:ed:71:8b:
         60:6d:79:34:bd:a3:01:3f:de:20:e6:0a:99:cf:a0:84:34:71:
         af:c3:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org