Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131392e322e35312e302f32342d3234203d3e20313439373436.roa
File:                     3131392e322e35312e302f32342d3234203d3e20313439373436.roa (raw, json)
Hash identifier:          geNiVt084FKZi/IBm+BDpI573wwR9JlWoK+/Mfdplrc=
Subject key identifier:   50:5A:32:90:DF:CD:C8:40:BD:E3:6E:AE:A9:02:50:C6:E4:28:EC:08
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       16526CA80C561B900EFCB0C99C1FEFCB93BD780D
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131392e322e35312e302f32342d3234203d3e20313439373436.roa
Signing time:             Sat 20 Jan 2024 17:05:40 +0000
ROA not before:           Sat 20 Jan 2024 17:00:40 +0000
ROA not after:            Sat 18 Jan 2025 17:05:40 +0000
asID:                     149746
IP address blocks:        119.2.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:52:6c:a8:0c:56:1b:90:0e:fc:b0:c9:9c:1f:ef:cb:93:bd:78:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Jan 20 17:00:40 2024 GMT
            Not After : Jan 18 17:05:40 2025 GMT
        Subject: CN=505A3290DFCDC840BDE36EAEA90250C6E428EC08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:b9:fe:d4:18:3b:e0:f2:f3:f7:20:ec:d0:
                    eb:0a:ba:34:cd:f1:b3:d1:d9:0e:81:47:49:2d:55:
                    65:b7:24:48:1e:8b:ff:df:d9:ca:e9:1b:05:90:49:
                    6d:23:80:57:0c:b5:ee:2b:c1:e3:73:8d:b5:f4:60:
                    fb:43:c5:e8:e3:16:bf:b3:85:5e:b8:f0:61:5e:7c:
                    99:c1:71:76:1d:e4:0b:9d:90:bb:04:2f:d7:ae:cd:
                    f2:f5:3c:81:f5:e8:5c:b7:0c:1a:eb:c0:a0:cf:66:
                    66:c0:c6:8f:f4:a4:8d:e1:ea:fa:f5:4d:6c:44:85:
                    b7:d4:14:e9:a7:8f:5f:7f:09:16:37:03:58:01:9c:
                    f2:00:89:d3:90:6b:a4:a8:f6:42:89:28:16:af:f6:
                    37:dd:22:6d:b6:39:86:fd:58:bd:41:91:36:1a:f5:
                    c6:e7:8d:63:81:68:7f:ce:6d:4c:42:2f:26:a7:20:
                    83:6c:93:0a:fd:fe:4a:3a:fe:a1:d8:6f:22:f3:ea:
                    99:2e:10:98:3a:24:c8:42:91:a3:54:f9:b0:d7:9a:
                    48:8e:2c:75:2f:7d:7b:db:ca:d4:2b:a9:37:ac:7f:
                    86:44:62:1b:86:bc:67:4f:a9:36:37:b4:58:04:19:
                    83:58:9f:9a:29:ec:17:cc:5c:a0:8e:a1:b2:72:35:
                    68:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5A:32:90:DF:CD:C8:40:BD:E3:6E:AE:A9:02:50:C6:E4:28:EC:08
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131392e322e35312e302f32342d3234203d3e20313439373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.2.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:75:73:9c:7b:28:3d:42:6e:5f:3a:a6:5e:ad:52:61:dd:09:
         d2:34:f4:18:fa:35:95:55:b4:97:97:4a:30:44:72:60:49:a2:
         eb:c5:d4:20:34:e4:8a:5f:73:0d:33:bd:a9:f5:7d:f4:65:ff:
         da:6b:1b:b6:92:06:c0:6a:f6:e6:f4:50:12:35:38:4d:17:4c:
         18:26:ba:0e:4e:72:1c:1e:1c:31:54:1a:ba:30:01:40:ca:68:
         5b:a9:f8:3f:e3:ad:85:95:72:ea:05:1f:24:53:e7:c6:f1:63:
         6e:7f:3c:83:9e:50:9a:9c:d0:75:1f:a1:32:f1:12:e9:f1:fc:
         ce:64:5d:7a:1f:a5:f4:32:2a:7c:dc:e2:f3:32:d3:a7:62:03:
         4e:0c:58:52:48:83:8a:ea:44:ef:01:1a:80:67:be:b6:7a:78:
         7a:ff:5b:bd:8a:41:b7:aa:9b:45:14:a3:00:d1:da:3d:ef:e5:
         18:ab:98:ce:92:63:c1:bc:3b:08:82:aa:66:87:c3:4a:57:2e:
         49:a4:1b:57:52:70:a1:3b:e7:e8:e5:f9:30:c6:e5:e9:cb:d5:
         76:db:8b:1d:09:34:8e:64:30:ca:70:3c:f0:46:3c:24:c3:7c:
         3a:52:0d:cd:29:ec:06:f0:9d:eb:ec:6f:e5:fd:d4:ed:47:ba:
         51:b5:55:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 05:56:22 2024 by rpki-client on console-ams.rpki-client.org