Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233332e302f32342d3234203d3e203435323936.roa
File:                     3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (raw, json)
Hash identifier:          0p8J1uUqepwRyvnKGYdZJZ+VKIbHRsXq/69mcxzrCBY=
Subject key identifier:   02:3A:C6:99:2F:F0:CC:DF:E2:40:C0:1F:1D:4A:4D:54:21:DC:3D:3C
Certificate issuer:       /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Certificate serial:       6CA2175D97FA9021AFF0399C1B7072007FD7190C
Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233332e302f32342d3234203d3e203435323936.roa
Signing time:             Mon 27 May 2024 09:00:00 +0000
ROA not before:           Mon 27 May 2024 08:55:00 +0000
ROA not after:            Mon 26 May 2025 09:00:00 +0000
asID:                     45296
IP address blocks:        113.59.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
                          rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 16:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a2:17:5d:97:fa:90:21:af:f0:39:9c:1b:70:72:00:7f:d7:19:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
        Validity
            Not Before: May 27 08:55:00 2024 GMT
            Not After : May 26 09:00:00 2025 GMT
        Subject: CN=023AC6992FF0CCDFE240C01F1D4A4D5421DC3D3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0e:51:7a:75:b1:72:1b:5b:85:01:21:c4:0f:
                    11:87:4d:52:6f:67:ea:91:9a:90:8d:34:e2:6e:51:
                    23:b4:ce:eb:da:1b:22:b0:ca:1b:9b:a1:75:1f:d2:
                    2d:ad:5b:09:80:06:40:9a:4b:56:cf:02:6a:3d:b7:
                    a4:01:4a:e0:ab:0c:3e:b9:b8:5c:d5:bf:42:97:3c:
                    13:75:79:56:e0:fd:49:74:be:ba:4a:f7:cc:9c:30:
                    74:e7:d2:74:8d:39:e3:ff:bb:04:a6:20:ee:02:b5:
                    fc:a3:62:3d:b1:a9:9f:2d:8e:db:5b:16:04:1a:18:
                    a1:c0:b7:99:9c:6f:f4:73:68:90:c0:6b:36:6a:8b:
                    67:f0:36:6d:28:7d:a6:60:9f:33:60:2b:d8:de:91:
                    07:01:60:99:ed:76:ec:55:a3:2c:d2:0c:3b:8f:2d:
                    f9:28:a3:7c:74:71:e6:44:ad:01:11:e0:dd:f3:a5:
                    bf:53:ea:ec:8f:e9:13:bb:ce:fc:78:a8:23:26:5c:
                    ac:2a:9e:5d:79:55:c4:37:f0:4e:7a:3c:8d:d4:33:
                    36:17:2a:7b:8e:bb:ed:4a:0c:01:94:d2:d0:f2:66:
                    73:fd:65:c9:3d:69:21:dd:ab:d5:58:30:ea:15:94:
                    c6:66:11:e8:40:b8:a2:07:47:f4:ae:f3:8d:04:3e:
                    51:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3A:C6:99:2F:F0:CC:DF:E2:40:C0:1F:1D:4A:4D:54:21:DC:3D:3C
            X509v3 Authority Key Identifier:
                keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233332e302f32342d3234203d3e203435323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.59.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:44:e8:04:37:b8:4d:8d:0c:0a:31:e5:f2:4d:15:f2:bb:c2:
         d8:b9:2c:18:ac:e2:71:0d:9a:bd:8a:8c:de:f0:ec:44:3c:95:
         61:9e:e1:6e:c6:2c:f0:71:74:3a:49:ed:df:fb:24:ee:42:98:
         c7:c8:ec:00:a4:17:c8:a6:5f:fd:91:fb:2d:3c:a0:ea:33:43:
         c2:82:e3:51:f4:bb:f0:04:3a:06:f6:86:60:76:6c:a2:c0:08:
         eb:a7:1c:ec:84:1e:49:81:3a:bf:4c:02:20:44:5b:ce:3c:f1:
         13:b2:da:ff:45:24:98:8c:00:90:53:49:d1:fb:16:ed:98:9d:
         7c:9f:5e:bf:de:4c:9e:5f:83:e9:90:ba:df:c4:96:09:12:ef:
         36:35:35:2d:8d:a8:e4:25:4d:81:88:ed:20:dc:87:f0:aa:25:
         4d:83:ff:9f:c6:96:2b:af:f5:ac:c5:01:0a:a1:1e:e7:19:79:
         b8:e6:48:98:6d:9f:85:6e:d0:97:8e:f1:70:b2:0c:be:bc:1c:
         ca:9e:39:6f:b4:a1:18:ed:03:70:d3:02:71:5e:e1:a5:19:42:
         2e:e1:35:8b:ee:79:0c:1f:99:17:ea:97:ea:af:36:b7:57:42:
         af:59:a2:97:d3:6a:ac:e2:1a:40:85:cc:25:1c:3b:b5:53:62:
         39:62:d5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:37 2024 by rpki-client on console-ams.rpki-client.org