Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131392e322e34382e302f32332d3234203d3e20313439373436.roa
File:                     3131392e322e34382e302f32332d3234203d3e20313439373436.roa (raw, json)
Hash identifier:          U0I//X86Q/rUbfJXDzRnjdrCyC/j03yKMZXu5NlJOfY=
Subject key identifier:   E8:38:25:52:77:CB:82:E5:8D:80:E4:A2:AB:B8:9D:4F:35:20:EF:BB
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       68042A822A6B3C74455F25074C69C59C304CD9BF
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131392e322e34382e302f32332d3234203d3e20313439373436.roa
Signing time:             Sat 20 Jan 2024 17:13:41 +0000
ROA not before:           Sat 20 Jan 2024 17:08:41 +0000
ROA not after:            Sat 18 Jan 2025 17:13:41 +0000
asID:                     149746
IP address blocks:        119.2.48.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 05:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:04:2a:82:2a:6b:3c:74:45:5f:25:07:4c:69:c5:9c:30:4c:d9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Jan 20 17:08:41 2024 GMT
            Not After : Jan 18 17:13:41 2025 GMT
        Subject: CN=E838255277CB82E58D80E4A2ABB89D4F3520EFBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1a:18:d2:6a:04:89:af:94:ef:ab:27:14:ed:
                    f2:cf:ae:f3:64:d0:07:fd:4e:30:23:e7:bb:8c:f6:
                    73:c6:70:f1:ac:e7:6f:c7:c3:b7:0b:1c:e1:3b:b4:
                    31:79:56:75:be:51:b0:50:79:8f:da:cb:e4:80:c0:
                    3a:b1:85:53:da:fa:fa:c5:81:37:01:5a:2e:c4:42:
                    00:95:31:92:c6:c2:84:76:d6:db:47:d6:d0:3d:73:
                    a4:21:b7:01:e6:f1:ab:f6:f5:65:01:24:2c:67:a1:
                    da:6e:d2:2c:08:1d:8b:ee:24:00:80:c0:a7:b1:ed:
                    0a:df:6a:40:8d:82:b2:b0:46:9b:eb:b8:a0:71:7e:
                    7e:0c:5a:4e:69:a3:37:44:85:f8:7d:08:c4:28:9a:
                    2f:ac:e3:c2:cb:a1:ad:f5:57:b9:af:a1:86:51:d7:
                    65:8b:f3:a5:79:3d:9a:1e:34:5a:4e:f6:5c:e8:c6:
                    55:6a:a5:fd:0c:8c:83:2f:b2:72:6a:fa:7e:00:40:
                    74:38:ec:72:12:b6:a8:1b:cf:90:4f:1b:cf:6b:0f:
                    53:a8:03:80:5c:b3:30:44:cc:db:45:db:ce:04:4b:
                    59:56:b2:7b:0a:cd:d7:8e:d2:b5:8d:24:fd:d6:94:
                    00:de:27:20:be:3c:04:5b:c8:a1:3b:c8:75:1e:c7:
                    28:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:38:25:52:77:CB:82:E5:8D:80:E4:A2:AB:B8:9D:4F:35:20:EF:BB
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131392e322e34382e302f32332d3234203d3e20313439373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.2.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:c7:8f:5a:73:8b:f6:73:6c:1c:26:c9:e6:cf:0e:de:4f:6d:
         3e:66:ce:a7:bf:30:54:31:2b:07:75:8b:cc:b3:b6:23:4a:0f:
         de:d0:c9:50:2d:d6:51:cd:75:14:9b:07:1e:bb:f6:4f:a6:03:
         31:b4:16:65:41:e9:0d:5b:75:3f:8c:af:18:55:71:19:7c:7e:
         bd:e3:e2:4e:6f:52:52:1c:a8:90:3d:45:2a:d9:e7:26:f6:ff:
         34:a8:e4:a0:c9:57:1d:78:da:79:53:6f:9d:00:60:7c:71:4a:
         0e:f3:03:c5:aa:16:be:50:fb:31:5f:57:f0:79:05:a1:47:68:
         ef:d3:b0:f9:38:b5:e8:5d:bf:8a:2b:ff:d8:74:c9:1a:4b:f0:
         c8:6e:19:76:83:4c:f0:47:ac:e7:b2:02:23:b5:93:7c:b0:90:
         c8:a9:cc:74:17:34:2c:f4:d0:e9:8c:03:9a:fa:e3:ed:45:74:
         ac:2d:ad:c8:05:5b:de:3f:08:e1:63:92:19:b9:36:52:75:fb:
         f1:24:11:69:81:71:a2:e3:91:6f:10:93:a1:42:60:2d:23:b4:
         5f:25:22:f2:cc:e6:4a:45:68:f1:aa:6f:f9:17:b9:c2:60:89:
         a5:19:f6:75:a8:86:98:26:81:96:c5:05:45:ed:43:a8:1a:fb:
         f0:90:a4:79
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUaAQqgiprPHRFXyUHTGnFnDBM2b8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdE
NTU3Qzk1MzAeFw0yNDAxMjAxNzA4NDFaFw0yNTAxMTgxNzEzNDFaMDMxMTAvBgNV
BAMTKEU4MzgyNTUyNzdDQjgyRTU4RDgwRTRBMkFCQjg5RDRGMzUyMEVGQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFGhjSagSJr5TvqycU7fLPrvNk
0Af9TjAj57uM9nPGcPGs52/Hw7cLHOE7tDF5VnW+UbBQeY/ay+SAwDqxhVPa+vrF
gTcBWi7EQgCVMZLGwoR21ttH1tA9c6QhtwHm8av29WUBJCxnodpu0iwIHYvuJACA
wKex7QrfakCNgrKwRpvruKBxfn4MWk5pozdEhfh9CMQomi+s48LLoa31V7mvoYZR
12WL86V5PZoeNFpO9lzoxlVqpf0MjIMvsnJq+n4AQHQ47HIStqgbz5BPG89rD1Oo
A4BcszBEzNtF284ES1lWsnsKzdeO0rWNJP3WlADeJyC+PARbyKE7yHUexyh7AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU6DglUnfLguWNgOSiq7idTzUg77swHwYDVR0j
BBgwFoAUwAFjiA8jVxR1mSBQchfyp9VXyVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZWE3YTExNS1iOGI4LTQ5MGItODMyMC1jOWU1OWExMDAzZGQvMC9DMDAxNjM4ODBG
MjM1NzE0NzU5OTIwNTA3MjE3RjJBN0Q1NTdDOTUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdENTU3
Qzk1My5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlYTdhMTE1LWI4YjgtNDkwYi04
MzIwLWM5ZTU5YTEwMDNkZC8wLzMxMzEzOTJlMzIyZTM0MzgyZTMwMmYzMjMzMmQz
MjM0MjAzZDNlMjAzMTM0MzkzNzM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF3AjAwDQYJKoZIhvcN
AQELBQADggEBAE7Hj1pzi/ZzbBwmyebPDt5PbT5mzqe/MFQxKwd1i8yztiNKD97Q
yVAt1lHNdRSbBx679k+mAzG0FmVB6Q1bdT+MrxhVcRl8fr3j4k5vUlIcqJA9RSrZ
5yb2/zSo5KDJVx142nlTb50AYHxxSg7zA8WqFr5Q+zFfV/B5BaFHaO/TsPk4tehd
v4or/9h0yRpL8MhuGXaDTPBHrOeyAiO1k3ywkMipzHQXNCz00OmMA5r64+1FdKwt
rcgFW94/COFjkhm5NlJ1+/EkEWmBcaLjkW8Qk6FCYC0jtF8lIvLM5kpFaPGqb/kX
ucJgiaUZ9nWohpgmgZbFBUXtQ6ga+/CQpHk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:40 2024 by rpki-client on console-fra.rpki-client.org