Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa
File:                     3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (raw, json)
Hash identifier:          s8fg30WIA14JUIcMS3F2iWvbH1sPMTJyCo51fPayB6w=
Subject key identifier:   62:6B:C5:C5:87:4D:F7:9E:81:7D:62:29:E2:12:6F:C3:54:4F:D5:99
Certificate issuer:       /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D
Certificate serial:       4F4B8191848917B93E573282B2C244C176DCC9BB
Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa
Signing time:             Mon 28 Oct 2024 11:00:02 +0000
ROA not before:           Mon 28 Oct 2024 10:55:02 +0000
ROA not after:            Mon 27 Oct 2025 11:00:02 +0000
asID:                     138120
IP address blocks:        175.111.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl
                          rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4b:81:91:84:89:17:b9:3e:57:32:82:b2:c2:44:c1:76:dc:c9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D
        Validity
            Not Before: Oct 28 10:55:02 2024 GMT
            Not After : Oct 27 11:00:02 2025 GMT
        Subject: CN=626BC5C5874DF79E817D6229E2126FC3544FD599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:ec:79:28:69:63:ca:7e:a9:d9:a8:e1:b0:
                    c8:f8:c9:49:81:7c:1d:6d:c6:a8:58:09:24:7f:3f:
                    96:2c:fc:cc:b0:b7:30:06:39:02:5c:d2:9a:35:f8:
                    86:8b:0b:c4:20:c7:a6:3d:67:c4:5b:bf:2c:76:d5:
                    cf:ea:5a:b6:b9:37:e7:17:6e:f6:42:f0:ab:9a:3a:
                    cc:f8:17:10:40:6c:9b:1e:92:de:9c:78:ab:a5:c8:
                    c2:1a:1a:93:a1:e9:89:23:b1:85:9d:5b:1c:95:2d:
                    4c:8e:17:7e:a3:9a:81:3e:9e:ae:0e:23:d3:79:c5:
                    29:03:bd:06:c7:6f:02:f6:38:a0:b5:d5:cb:24:b9:
                    a6:27:a2:46:16:87:0c:6c:ca:79:ac:c0:a7:4a:1a:
                    29:57:a8:56:0f:13:72:c3:50:a6:1e:de:9c:be:77:
                    95:f3:d6:60:de:8b:28:a4:b7:84:f9:e4:6e:f5:c2:
                    51:ec:bb:fd:3c:d4:23:6e:ad:ad:5b:74:b2:11:d4:
                    a5:b4:1f:0b:19:a9:70:72:f5:e2:fd:54:0c:5b:1f:
                    cc:d7:28:12:16:09:aa:a7:83:ac:58:5a:90:7f:d8:
                    ce:3f:0d:fb:f9:85:10:c6:d5:29:36:a6:15:2e:15:
                    46:a0:f5:05:37:f8:9e:a4:40:46:67:e4:d3:48:1b:
                    00:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6B:C5:C5:87:4D:F7:9E:81:7D:62:29:E2:12:6F:C3:54:4F:D5:99
            X509v3 Authority Key Identifier:
                keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:d0:95:f4:30:04:61:03:5c:0e:17:72:44:ca:62:05:65:0c:
         63:86:a3:22:54:f7:13:cd:c6:a2:69:7e:cd:de:9e:26:1c:6e:
         2a:2b:a9:a9:db:a9:ca:ea:aa:3d:bc:38:b9:de:92:a2:f4:80:
         c2:1c:f7:92:ba:d9:96:13:78:66:df:ab:8f:60:17:52:ef:14:
         15:e3:42:e0:7e:c9:aa:6f:6a:81:04:e3:49:0d:5f:f6:01:18:
         d0:8b:8a:2c:ec:24:a3:bb:ca:61:b7:5f:bb:e7:9a:ce:23:fe:
         a4:08:1f:0a:a1:a2:9e:0f:52:4e:f8:31:cf:5e:34:fe:93:7f:
         3a:29:8b:bc:c9:ba:1d:36:fd:9a:59:e8:cb:d4:d5:e7:36:77:
         33:b8:0e:92:80:dc:00:54:81:7e:fc:39:ba:c2:33:de:29:34:
         9d:ab:9f:94:0c:de:82:a1:61:3f:f5:1b:a6:28:51:46:ea:fa:
         4e:6c:d0:53:c2:a2:fe:2c:ba:28:ae:91:cf:13:85:4b:de:ce:
         bb:75:77:15:41:3c:e8:29:5a:18:3c:55:92:d0:75:ee:fa:31:
         d6:57:c9:1a:b2:1a:c2:59:ac:80:65:9f:8a:dc:24:de:0b:52:
         71:57:ed:02:7a:ef:33:cf:ed:e3:65:6f:7a:e2:a2:f6:cb:d1:
         ac:ee:9f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:13:45 2024 by rpki-client on console-fra.rpki-client.org