Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233322e302f32322d3234203d3e203435323936.roa
File:                     3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (raw, json)
Hash identifier:          lmRHQTQMth9Im7teGxzZWHcQYn3Rz37A7dJ29JV7fzs=
Subject key identifier:   3B:32:B1:8E:9D:23:07:C7:61:F2:42:8D:E3:99:97:CC:85:2D:2E:90
Certificate issuer:       /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Certificate serial:       5FAE0E9628B4A72328AD25E83C50AEA481E327A8
Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233322e302f32322d3234203d3e203435323936.roa
Signing time:             Tue 31 Oct 2023 07:56:31 +0000
ROA not before:           Tue 31 Oct 2023 07:51:31 +0000
ROA not after:            Tue 29 Oct 2024 07:56:31 +0000
asID:                     45296
IP address blocks:        113.59.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
                          rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ae:0e:96:28:b4:a7:23:28:ad:25:e8:3c:50:ae:a4:81:e3:27:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
        Validity
            Not Before: Oct 31 07:51:31 2023 GMT
            Not After : Oct 29 07:56:31 2024 GMT
        Subject: CN=3B32B18E9D2307C761F2428DE39997CC852D2E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:f1:17:e7:24:86:7a:4a:96:ff:36:26:7e:
                    52:25:e4:fd:f6:da:58:7f:cd:e6:c3:b1:0e:f7:55:
                    91:db:ae:7d:a0:f0:9b:de:32:40:40:36:82:69:10:
                    45:33:c2:11:99:23:95:e4:b3:0e:5c:f5:33:a0:29:
                    1d:64:6f:77:d8:42:28:c0:58:f3:45:f6:4d:36:58:
                    fd:c9:73:62:39:74:86:92:78:fd:03:3b:a2:ff:ce:
                    3f:ea:f1:18:14:7c:db:5b:2c:32:7f:36:ed:fd:c5:
                    2a:f6:6e:aa:97:aa:ad:e9:bc:59:18:16:94:71:bf:
                    e1:4e:56:f7:2c:da:d0:15:9f:d7:7d:f0:ef:15:4e:
                    36:ee:af:53:12:a6:3e:e6:3a:ee:53:86:2c:27:ed:
                    01:be:af:b3:5e:37:d5:5e:62:c0:ad:2e:b1:1a:41:
                    5d:58:d2:c8:b7:8b:8f:12:a3:7f:87:78:5a:0c:18:
                    8e:e8:c6:59:2b:e2:d5:f7:59:70:56:23:cd:b3:91:
                    d7:19:33:b1:99:f1:f7:4f:e4:9e:cf:25:9c:07:e2:
                    5c:0a:05:03:44:58:57:fc:3c:a9:72:66:9c:79:0e:
                    b1:b0:61:8e:46:84:cc:ac:67:b9:64:e5:2c:23:db:
                    de:f3:7b:99:a7:a6:e3:ba:24:2c:5d:1a:05:23:72:
                    2c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:32:B1:8E:9D:23:07:C7:61:F2:42:8D:E3:99:97:CC:85:2D:2E:90
            X509v3 Authority Key Identifier:
                keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233322e302f32322d3234203d3e203435323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.59.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:c7:35:20:46:e2:0e:40:52:ee:28:30:e7:aa:a9:10:69:52:
         45:a2:fc:c7:2b:fd:4c:68:77:00:22:bc:02:21:80:6c:f1:e7:
         20:c9:6e:db:e1:04:e8:b7:3e:30:34:6d:4f:cf:ae:d1:3a:6c:
         34:77:fa:eb:0b:f8:5f:e1:be:15:24:dc:43:b3:32:72:71:bc:
         40:70:af:4d:16:9b:31:31:33:cf:77:c5:92:a9:27:8e:29:ef:
         7c:a6:d5:dc:7a:5d:30:0d:4b:ea:b9:0b:22:f0:c9:01:86:d9:
         75:d2:82:68:64:79:70:40:96:e8:a2:c4:75:1a:37:a0:d6:0e:
         61:44:3c:31:b2:99:d3:af:e6:7c:1a:54:a4:6a:ce:e0:e9:7c:
         56:ae:41:3f:1d:d7:ea:84:25:b4:e7:32:87:44:53:cf:b5:3b:
         d0:ed:19:71:df:c2:d9:e2:06:28:0c:02:df:fb:71:0a:4f:3a:
         97:ce:7a:1c:e2:06:7f:d5:7b:94:1d:79:73:b3:e0:dc:eb:bc:
         28:63:bd:24:ca:4c:07:eb:1b:f3:9e:85:77:11:04:a0:20:a8:
         05:fd:51:e7:8f:54:67:90:28:b1:55:b4:64:6b:7f:f0:2c:15:
         4a:ef:b4:d2:df:7e:95:60:e4:fe:6f:cd:d1:e3:a3:84:b0:79:
         04:46:a7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:55:20 2024 by rpki-client on console-ams.rpki-client.org