Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131342e302f32332d3233203d3e203234353235.roa
File:                     3131342e3139392e3131342e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier:          O2PT5LV0anT+oAmCs6sBCS2cbV5bYb/lKftBe2tUMhE=
Subject key identifier:   85:BA:BD:73:50:62:E8:DA:2F:3B:6F:E9:B0:D7:45:20:86:37:41:D0
Certificate issuer:       /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial:       1707F482925ABB76484602198743224B36DEEC77
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131342e302f32332d3233203d3e203234353235.roa
Signing time:             Tue 21 May 2024 08:02:40 +0000
ROA not before:           Tue 21 May 2024 07:57:40 +0000
ROA not after:            Tue 20 May 2025 08:02:40 +0000
asID:                     24525
IP address blocks:        114.199.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
                          rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 13:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:07:f4:82:92:5a:bb:76:48:46:02:19:87:43:22:4b:36:de:ec:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Validity
            Not Before: May 21 07:57:40 2024 GMT
            Not After : May 20 08:02:40 2025 GMT
        Subject: CN=85BABD735062E8DA2F3B6FE9B0D74520863741D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:14:aa:e3:86:36:70:ce:74:63:fb:60:c3:
                    dd:e5:5c:0c:46:85:69:91:24:59:95:cc:8d:2f:02:
                    f3:25:04:91:9a:ce:22:70:14:67:f1:09:4b:80:e6:
                    db:a8:2c:17:6b:58:fb:24:c3:2a:d1:75:2c:1a:60:
                    bd:3e:5d:d5:cb:ac:7b:71:fa:7b:b8:37:0e:3a:56:
                    8f:5a:d3:dc:60:91:a9:5f:1f:14:4b:4a:3f:96:67:
                    dd:8c:7e:0e:30:37:bd:7d:e1:a5:e1:39:b2:5a:bb:
                    a1:46:8d:e4:66:04:2e:3f:cf:1b:47:1e:1a:c1:53:
                    f4:89:f5:2d:7c:50:50:7d:02:cc:34:b1:87:c1:7e:
                    74:d0:cf:a9:c8:01:86:b2:48:d3:72:a0:ec:6c:7b:
                    03:61:29:e9:60:b7:aa:48:17:00:c4:a6:f1:c6:48:
                    d7:fc:fa:b4:f1:a8:ab:b0:ef:da:60:22:95:af:0e:
                    28:0a:fc:c4:d0:df:f9:e9:d4:90:00:f3:df:8b:00:
                    13:11:c8:dd:90:6a:d2:cb:d6:26:ce:21:30:79:99:
                    52:f7:98:90:d3:68:a3:c2:a3:3f:d5:78:88:e8:24:
                    55:15:2a:8b:b3:59:78:33:20:cf:03:28:e8:d0:0e:
                    b1:39:93:93:19:7c:b0:9c:2f:94:d6:26:66:dc:01:
                    0f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BA:BD:73:50:62:E8:DA:2F:3B:6F:E9:B0:D7:45:20:86:37:41:D0
            X509v3 Authority Key Identifier:
                keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131342e302f32332d3233203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:d3:90:69:c9:11:9a:a0:d1:68:c8:d8:17:8f:ed:7d:ad:b0:
         74:45:27:8e:35:46:af:17:b0:e7:66:ab:27:88:7e:41:52:86:
         44:aa:7c:04:93:04:6a:7a:f8:1a:b2:bb:16:da:e5:c5:4a:88:
         af:5e:16:6a:12:dd:a2:e8:48:b2:d4:2e:42:ef:99:b3:60:94:
         11:1f:4b:3e:43:c7:da:99:6c:34:70:a0:f6:9c:ad:c0:fd:93:
         12:b0:db:3c:e0:4c:95:e7:c3:be:18:2d:2e:bb:3a:8d:46:cf:
         d2:a6:91:19:1c:c4:32:7a:d0:f4:6e:05:17:c1:5b:68:dc:78:
         11:0a:35:1a:36:ad:b4:ee:5b:23:65:00:a1:91:2d:5d:b4:93:
         b9:15:15:d9:7b:bb:f3:49:84:c2:70:c4:d7:1b:88:d7:88:49:
         4f:fe:37:01:af:3e:68:e6:7d:e0:c6:12:ff:ac:03:0a:77:7d:
         2b:52:d0:d5:a8:44:28:75:2a:5f:7e:a7:03:48:55:b1:1b:39:
         f1:fc:62:2f:47:a5:94:34:42:21:09:65:11:7c:90:d9:a6:c0:
         2e:d7:2e:05:43:89:6e:20:16:d7:48:53:b3:d8:89:b8:7b:f7:
         36:4b:69:74:3e:a3:9d:6f:54:0e:61:e3:3b:ce:72:77:59:41:
         44:ae:0a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 09:35:51 2024 by rpki-client on console-fra.rpki-client.org