Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233342e302f32332d3234203d3e203435323936.roa
File:                     3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (raw, json)
Hash identifier:          gKKJk7HQuK+ONKXoaPidzNFpfrELPeLEIef5HUItiMs=
Subject key identifier:   C9:0F:BA:28:AD:B0:17:07:11:C7:3A:76:6D:11:85:8A:B8:FB:76:8B
Certificate issuer:       /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Certificate serial:       415E5232CEA4105A85CE6F8E30F6D1BF6E6BEE7B
Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233342e302f32332d3234203d3e203435323936.roa
Signing time:             Mon 27 May 2024 09:00:00 +0000
ROA not before:           Mon 27 May 2024 08:55:00 +0000
ROA not after:            Mon 26 May 2025 09:00:00 +0000
asID:                     45296
IP address blocks:        113.59.234.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
                          rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 16:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5e:52:32:ce:a4:10:5a:85:ce:6f:8e:30:f6:d1:bf:6e:6b:ee:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
        Validity
            Not Before: May 27 08:55:00 2024 GMT
            Not After : May 26 09:00:00 2025 GMT
        Subject: CN=C90FBA28ADB0170711C73A766D11858AB8FB768B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:90:c8:69:90:e3:12:0a:d1:14:73:12:83:39:
                    04:c8:9b:a7:bf:a4:1f:28:84:d9:05:32:10:54:c5:
                    c4:57:aa:75:0d:7a:e9:e3:07:13:1a:b8:74:20:b6:
                    56:cb:21:8e:f6:34:37:33:ae:69:ed:2e:6a:99:fb:
                    8d:b1:cb:98:aa:51:0f:b2:4a:27:56:b6:42:96:81:
                    bb:51:2c:14:99:ca:8e:6f:4d:52:78:e0:fd:ae:ec:
                    1c:e5:34:67:fa:fb:ee:17:09:2c:c9:ac:cc:c3:a8:
                    68:b0:e9:25:b3:48:3c:44:09:0e:ee:0c:df:36:5e:
                    ca:05:3c:80:4b:9f:5d:6a:60:8e:1b:2c:49:d6:41:
                    e8:fd:12:24:ca:38:87:59:2e:3f:05:4d:f9:46:13:
                    55:43:29:e3:4f:bf:d8:ce:14:d0:24:0c:a4:83:10:
                    bc:29:3c:ac:1e:0c:26:29:1d:c4:8f:de:4f:f9:54:
                    7f:24:25:24:c4:e8:db:b9:10:80:2b:57:a2:d5:41:
                    01:92:22:7b:00:b1:d7:de:1f:84:72:4a:0d:88:51:
                    e3:87:4e:1b:f1:2d:30:ab:1f:03:e0:54:85:4a:78:
                    2f:95:1c:fc:9a:0a:17:9e:9d:8e:6e:3b:c8:53:dd:
                    49:7d:e8:ce:b4:4e:2f:e0:0e:70:b9:3f:c0:88:eb:
                    9f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0F:BA:28:AD:B0:17:07:11:C7:3A:76:6D:11:85:8A:B8:FB:76:8B
            X509v3 Authority Key Identifier:
                keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233342e302f32332d3234203d3e203435323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.59.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:c8:05:db:37:d8:26:b1:e4:9b:48:c5:ca:9b:27:61:85:8b:
         b5:da:e7:96:66:ea:ef:60:98:2d:df:3a:97:2b:05:3a:28:fe:
         57:2b:42:24:eb:48:57:84:d7:a0:c0:04:06:31:3e:b8:d4:a1:
         de:2c:1c:3e:91:63:3e:e3:65:0c:8a:68:c7:a4:1f:6d:28:cb:
         08:be:57:20:61:d6:f7:8b:ae:96:d4:f8:db:b6:b8:e7:b9:78:
         bf:5a:e6:f5:18:36:f1:ba:75:02:a6:e4:2a:81:3e:84:f0:74:
         45:41:f2:d0:ab:54:c6:93:b0:24:90:55:05:57:eb:3c:d1:7a:
         97:1f:49:56:4b:9b:0f:44:37:56:90:a3:3f:c0:e4:c3:54:71:
         7c:7e:be:b9:2b:05:b4:c9:cb:a3:e8:08:1b:58:92:bd:a0:1a:
         e7:21:12:21:4d:f5:43:7d:f0:88:13:80:db:54:8b:7f:8b:8c:
         ff:4a:9b:a1:73:b8:77:6e:4b:94:be:81:25:c9:72:42:da:a4:
         c2:62:ce:b0:e0:60:5a:b4:4d:96:a5:2b:ab:db:23:fc:16:e7:
         85:59:14:86:f8:fa:4c:31:cb:05:5e:7e:7e:60:da:54:30:11:
         18:7a:aa:de:97:7d:09:d5:a1:6f:2b:bd:8c:40:bf:ac:c1:ef:
         4d:b2:31:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:11 2024 by rpki-client on console-fra.rpki-client.org