Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131312e36382e32342e302f32312d3234203d3e203535363636.roa
File:                     3131312e36382e32342e302f32312d3234203d3e203535363636.roa (raw, json)
Hash identifier:          /N+GbbnL1idqgDjtW6KvcgPSGuY52hOxy4FItcWTp7M=
Subject key identifier:   11:D1:96:6D:A3:37:1B:8C:F7:74:F2:D0:87:44:82:D1:02:E8:89:9A
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       4A14F8DB7240DF98974D995BB809029884CFB0B3
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131312e36382e32342e302f32312d3234203d3e203535363636.roa
Signing time:             Mon 01 Jul 2024 01:06:11 +0000
ROA not before:           Mon 01 Jul 2024 01:01:11 +0000
ROA not after:            Mon 30 Jun 2025 01:06:11 +0000
asID:                     55666
IP address blocks:        111.68.24.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 05:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:14:f8:db:72:40:df:98:97:4d:99:5b:b8:09:02:98:84:cf:b0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Jul  1 01:01:11 2024 GMT
            Not After : Jun 30 01:06:11 2025 GMT
        Subject: CN=11D1966DA3371B8CF774F2D0874482D102E8899A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d3:c0:4e:09:1f:e5:fd:a8:2d:29:68:39:14:
                    60:2d:a8:a7:09:e1:6b:b7:47:e4:4c:fe:fc:08:68:
                    67:40:f8:d9:9b:57:33:f9:9a:2e:75:f5:7f:7a:1c:
                    bd:21:75:e7:fa:b5:ed:a7:d5:e8:63:19:38:ee:38:
                    4b:b5:6f:22:95:19:7f:18:5f:09:a5:23:99:e9:e5:
                    1e:4f:e2:e0:4f:3c:2d:9f:8f:4e:88:a0:c2:a0:9f:
                    ec:b8:a4:da:cb:47:ae:58:1c:bb:01:55:67:fd:b7:
                    13:6a:d9:73:22:d3:ba:86:4e:12:58:73:4e:e6:17:
                    c6:09:43:a4:eb:4d:c5:76:75:07:80:de:ab:cb:46:
                    6c:d4:4a:3b:14:cb:e1:53:a6:6c:57:31:d5:d8:cd:
                    04:ae:8c:02:7f:6c:79:ee:9b:9b:1e:6a:df:f1:9f:
                    7d:7c:68:12:68:a8:78:ac:45:38:ea:ef:85:88:16:
                    e4:e3:8c:4d:04:ea:87:c7:c7:0e:ab:34:ed:0f:4e:
                    c3:5f:59:a2:99:d9:3b:5f:64:47:ac:f5:81:47:4d:
                    2b:b1:ed:50:ed:22:90:d7:ee:2c:85:39:36:98:d9:
                    19:b5:85:91:b5:9d:25:39:9b:cf:f6:69:1c:f5:72:
                    b6:c6:23:01:02:b1:65:c0:55:c8:4b:62:ae:c7:97:
                    5b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D1:96:6D:A3:37:1B:8C:F7:74:F2:D0:87:44:82:D1:02:E8:89:9A
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131312e36382e32342e302f32312d3234203d3e203535363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.68.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:18:c2:f9:91:1e:cb:22:9f:fe:56:ab:ef:1f:3f:81:73:35:
         51:c6:43:a7:91:9a:c3:6a:69:27:bb:93:e0:19:39:09:81:f9:
         0f:e7:77:12:b5:48:60:fc:d0:56:25:3e:a5:7d:a3:89:35:f0:
         63:32:14:a1:e5:71:a5:cb:d5:89:c1:2b:e7:04:d5:a2:52:20:
         bd:18:46:18:b6:49:96:fb:bc:28:1f:a3:27:63:03:f2:2a:0c:
         ab:33:09:a0:69:53:0b:5e:e1:12:a4:61:a1:da:09:8c:88:b5:
         1c:72:e3:f2:8f:5b:de:13:9a:99:2e:0c:1a:1d:0b:40:55:fa:
         59:a2:a9:17:9a:51:be:3e:98:cd:05:65:fe:ef:a1:79:5b:eb:
         50:68:8f:ee:98:a0:1e:a0:ca:47:b3:7c:04:fd:2b:d7:95:53:
         3a:48:79:0d:81:df:f9:82:a0:65:cb:6c:fa:b0:7f:f3:e8:14:
         7a:34:2f:44:76:d5:fa:41:24:0e:e8:29:8d:92:e7:1b:34:0b:
         5c:c0:0c:78:98:eb:45:46:94:4d:82:07:76:2b:57:52:4c:b6:
         78:54:fe:fb:af:63:ae:bd:d6:93:7a:16:5b:be:40:ab:21:bb:
         3d:be:eb:79:45:27:04:67:81:40:e7:2b:39:57:03:c9:dd:61:
         ab:4e:34:eb
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUShT423JA35iXTZlbuAkCmITPsLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdE
NTU3Qzk1MzAeFw0yNDA3MDEwMTAxMTFaFw0yNTA2MzAwMTA2MTFaMDMxMTAvBgNV
BAMTKDExRDE5NjZEQTMzNzFCOENGNzc0RjJEMDg3NDQ4MkQxMDJFODg5OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT08BOCR/l/agtKWg5FGAtqKcJ
4Wu3R+RM/vwIaGdA+NmbVzP5mi519X96HL0hdef6te2n1ehjGTjuOEu1byKVGX8Y
XwmlI5np5R5P4uBPPC2fj06IoMKgn+y4pNrLR65YHLsBVWf9txNq2XMi07qGThJY
c07mF8YJQ6TrTcV2dQeA3qvLRmzUSjsUy+FTpmxXMdXYzQSujAJ/bHnum5seat/x
n318aBJoqHisRTjq74WIFuTjjE0E6ofHxw6rNO0PTsNfWaKZ2TtfZEes9YFHTSux
7VDtIpDX7iyFOTaY2Rm1hZG1nSU5m8/2aRz1crbGIwECsWXAVchLYq7Hl1ujAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUEdGWbaM3G4z3dPLQh0SC0QLoiZowHwYDVR0j
BBgwFoAUwAFjiA8jVxR1mSBQchfyp9VXyVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZWE3YTExNS1iOGI4LTQ5MGItODMyMC1jOWU1OWExMDAzZGQvMC9DMDAxNjM4ODBG
MjM1NzE0NzU5OTIwNTA3MjE3RjJBN0Q1NTdDOTUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdENTU3
Qzk1My5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlYTdhMTE1LWI4YjgtNDkwYi04
MzIwLWM5ZTU5YTEwMDNkZC8wLzMxMzEzMTJlMzYzODJlMzIzNDJlMzAyZjMyMzEy
ZDMyMzQyMDNkM2UyMDM1MzUzNjM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANvRBgwDQYJKoZIhvcN
AQELBQADggEBAJMYwvmRHssin/5Wq+8fP4FzNVHGQ6eRmsNqaSe7k+AZOQmB+Q/n
dxK1SGD80FYlPqV9o4k18GMyFKHlcaXL1YnBK+cE1aJSIL0YRhi2SZb7vCgfoydj
A/IqDKszCaBpUwte4RKkYaHaCYyItRxy4/KPW94TmpkuDBodC0BV+lmiqReaUb4+
mM0FZf7voXlb61Boj+6YoB6gykezfAT9K9eVUzpIeQ2B3/mCoGXLbPqwf/PoFHo0
L0R21fpBJA7oKY2S5xs0C1zADHiY60VGlE2CB3YrV1JMtnhU/vuvY6691pN6Flu+
QKshuz2+63lFJwRngUDnKzlXA8ndYatONOs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:40 2024 by rpki-client on console-fra.rpki-client.org