Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130322e302f32332d3233203d3e203234353235.roa
File:                     3131342e3139392e3130322e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier:          LMPSXyk2itsdaIFy6eUO8G3Jwb761T5US/jNgjQB2J8=
Subject key identifier:   9D:51:BE:10:52:B8:CF:0E:3F:F5:C2:0B:90:C7:59:37:0F:43:02:1E
Certificate issuer:       /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial:       72020734409284F5C500C49C8FA53FA2BFE71105
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130322e302f32332d3233203d3e203234353235.roa
Signing time:             Tue 21 May 2024 08:02:40 +0000
ROA not before:           Tue 21 May 2024 07:57:40 +0000
ROA not after:            Tue 20 May 2025 08:02:40 +0000
asID:                     24525
IP address blocks:        114.199.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
                          rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:02:07:34:40:92:84:f5:c5:00:c4:9c:8f:a5:3f:a2:bf:e7:11:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Validity
            Not Before: May 21 07:57:40 2024 GMT
            Not After : May 20 08:02:40 2025 GMT
        Subject: CN=9D51BE1052B8CF0E3FF5C20B90C759370F43021E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b4:6a:7b:c1:df:e8:18:f0:d7:88:91:52:e2:
                    a2:71:a0:73:fd:81:d0:75:17:8f:ae:e5:c1:da:1f:
                    18:de:b9:3c:1b:94:0b:76:7c:b5:76:f6:bf:43:d5:
                    48:16:88:88:6f:fd:33:56:24:29:37:41:47:98:9f:
                    41:9d:9a:80:16:44:b8:b5:ec:50:55:c2:ce:17:78:
                    bb:15:fc:1b:d2:84:d9:74:39:66:bb:a3:09:52:75:
                    ba:59:57:58:4e:75:8c:c9:aa:af:ce:e0:02:2f:46:
                    84:ef:d0:e1:88:fb:bb:9d:c1:fd:61:f4:b2:a0:a0:
                    5d:d1:a5:ca:9f:72:3d:87:44:60:f3:dd:f0:a7:d3:
                    c5:17:16:53:3a:d8:23:fd:e6:b5:38:b5:c1:df:ff:
                    6c:05:7f:17:4c:ff:ee:3f:b7:ea:16:2a:f3:ba:60:
                    0d:1a:9a:50:e2:f2:3f:5b:a2:0c:ea:63:0f:30:f4:
                    8d:35:3b:db:59:31:7d:b1:b7:3d:b6:4a:55:e2:ba:
                    20:2f:92:cc:d8:65:07:c6:da:e6:81:32:7b:23:59:
                    29:97:cc:cb:2e:97:5f:61:c2:f6:89:dc:22:9b:87:
                    54:4d:77:32:da:cf:37:71:b6:e9:4f:8a:f2:35:12:
                    83:0a:55:d0:13:2c:94:72:5f:b0:e4:a0:24:0c:6f:
                    84:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:51:BE:10:52:B8:CF:0E:3F:F5:C2:0B:90:C7:59:37:0F:43:02:1E
            X509v3 Authority Key Identifier:
                keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130322e302f32332d3233203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:45:40:23:da:65:ad:21:01:93:de:e4:22:86:76:1d:b2:4b:
         59:6a:87:f5:6d:15:72:87:e2:9a:c1:6a:e9:7f:8f:18:77:00:
         03:44:5a:07:32:62:de:02:44:a4:38:d9:3a:55:6f:b5:ae:04:
         11:09:fd:1d:db:c7:18:bc:db:32:13:95:9f:81:52:28:6b:ca:
         73:8c:6a:a1:5e:c6:91:77:01:86:68:f3:7e:9f:06:15:61:04:
         82:6c:05:c1:6d:26:4c:24:40:e1:ab:7a:0d:7b:08:67:19:73:
         1c:54:83:22:21:8d:22:8f:27:b1:c0:d3:36:9d:18:1a:1a:48:
         d8:de:98:c3:73:33:cf:ee:a2:ba:54:fc:08:4c:73:e4:88:e4:
         9a:6e:72:6c:4f:20:4f:d1:04:d1:dc:45:34:f3:19:39:40:3a:
         81:37:53:6f:59:aa:48:d2:f4:3b:13:c7:53:28:7e:25:15:da:
         21:b4:9d:58:73:51:1c:85:a2:52:2a:0d:8f:15:fd:99:4c:23:
         6f:51:fc:59:3b:96:fa:28:96:93:3c:c2:c8:af:b3:4c:93:41:
         1f:c1:0a:84:28:1f:29:69:76:7a:af:3a:8e:53:23:b2:e7:28:
         c5:c9:02:7d:be:5d:99:bc:d0:1b:ff:8d:35:87:63:2a:66:fd:
         66:e7:f8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:09:44 2024 by rpki-client on console-fra.rpki-client.org