Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131312e36382e32342e302f32312d3234203d3e203535363636.roa
File:                     3131312e36382e32342e302f32312d3234203d3e203535363636.roa (raw, json)
Hash identifier:          W2kwNZUhU3QlhgJ8gVxa7LDWGnR6hQupxPwOUevE0SM=
Subject key identifier:   1E:10:71:44:C8:81:C3:13:DF:02:B3:27:5E:E8:16:3F:FE:14:35:73
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       3E825A3BC99BCEF74D14AC4B09E2400413AA1BD3
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131312e36382e32342e302f32312d3234203d3e203535363636.roa
Signing time:             Mon 31 Jul 2023 00:14:34 +0000
ROA not before:           Mon 31 Jul 2023 00:09:34 +0000
ROA not after:            Mon 29 Jul 2024 00:14:34 +0000
asID:                     55666
IP address blocks:        111.68.24.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:82:5a:3b:c9:9b:ce:f7:4d:14:ac:4b:09:e2:40:04:13:aa:1b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Jul 31 00:09:34 2023 GMT
            Not After : Jul 29 00:14:34 2024 GMT
        Subject: CN=1E107144C881C313DF02B3275EE8163FFE143573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4f:41:db:e8:fc:24:95:db:f9:7b:98:4d:5e:
                    a1:c1:f6:fc:cc:69:27:03:70:8b:e9:a5:c6:9d:b1:
                    cc:bc:3e:88:55:45:45:29:d6:f2:e3:55:17:1c:44:
                    eb:18:3c:f2:22:6e:c3:60:b4:87:48:a3:c9:34:d4:
                    b8:7f:74:ae:ca:bb:71:fd:04:29:51:ff:b8:dd:c9:
                    9e:22:51:58:12:00:67:47:18:8c:9e:6d:f6:a5:bf:
                    e2:8a:74:12:40:92:37:a2:72:ec:68:71:ab:58:dc:
                    bd:d4:79:b3:15:14:5d:f6:15:eb:b9:f3:9c:52:a5:
                    98:37:2e:1e:b9:37:ef:94:dc:72:8c:f9:08:b6:8f:
                    9e:a1:28:d8:4c:35:c1:ef:92:f8:76:03:1d:55:cc:
                    be:45:54:88:a6:3e:1b:25:6a:ce:03:19:5a:6c:b1:
                    79:b7:49:fe:c1:e1:69:76:77:a3:68:c0:0c:e6:ac:
                    f6:85:f8:3d:71:46:30:dd:1b:25:99:8e:b8:39:c1:
                    b8:fa:7d:29:68:01:9c:36:54:d4:fc:01:7c:32:9d:
                    2a:9f:67:25:2a:a4:ac:29:ec:eb:9d:e7:7c:cf:d7:
                    56:72:15:36:79:58:12:dc:72:08:89:ba:38:9d:10:
                    56:7f:68:1e:e6:9b:00:fe:b6:73:58:88:9a:bf:c0:
                    4f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:10:71:44:C8:81:C3:13:DF:02:B3:27:5E:E8:16:3F:FE:14:35:73
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131312e36382e32342e302f32312d3234203d3e203535363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.68.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:79:4b:6a:68:4f:a0:42:1b:8b:c5:47:db:63:6b:d0:23:96:
         29:a3:8c:6e:d6:49:f9:3c:4c:1e:7f:cc:56:3f:f0:0a:f5:f7:
         92:d7:d0:7e:07:cc:11:d6:a1:d1:90:00:f3:71:81:55:3b:65:
         0f:1b:e2:3a:6a:45:4d:14:3d:ad:56:4a:62:9f:cb:8b:55:7a:
         d2:44:4c:d9:45:0b:3e:49:59:ac:7d:e3:7e:2d:ec:4e:c0:9e:
         9d:03:3f:91:99:fb:ac:0f:61:26:5a:95:69:1d:68:a4:f3:7a:
         7b:8a:7c:74:a9:a1:35:8e:19:35:2f:26:35:0c:19:b2:96:db:
         09:72:a4:2a:07:13:bb:66:c1:9c:67:59:90:77:3c:a7:18:ef:
         bf:87:64:9b:7b:a6:93:bd:29:08:5c:37:8c:46:95:8a:1f:46:
         1b:5a:38:a0:0b:2d:d0:f0:10:be:97:41:09:36:35:19:35:f7:
         c7:2b:6e:13:32:9f:97:10:1e:27:58:12:75:1a:73:d2:1c:b2:
         81:d6:73:7d:f2:1a:8d:8e:f9:91:02:f7:32:bb:8b:7f:71:01:
         08:8b:ba:29:fa:b5:4d:d0:1e:15:a9:0e:2d:09:c8:4d:16:eb:
         d4:d1:4c:42:05:a3:02:3e:11:c7:50:59:7e:ec:75:43:17:5f:
         4e:23:19:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:35:14 2024 by rpki-client on console-ams.rpki-client.org