Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131382e302f32342d3234203d3e203234353235.roa
File:                     3131342e3139392e3131382e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier:          ACpEMiKJHKlbN8ZPn0dHwC7ua8ukB/opEOqvk+GX2VA=
Subject key identifier:   4D:54:B1:48:43:12:C8:76:5F:39:61:76:5A:12:2E:E9:1D:96:11:8F
Certificate issuer:       /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial:       22DAB72BED65B7D867B61F4EABB1038188B89D05
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131382e302f32342d3234203d3e203234353235.roa
Signing time:             Sat 01 Jun 2024 08:01:01 +0000
ROA not before:           Sat 01 Jun 2024 07:56:01 +0000
ROA not after:            Sat 31 May 2025 08:01:01 +0000
asID:                     24525
IP address blocks:        114.199.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
                          rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:da:b7:2b:ed:65:b7:d8:67:b6:1f:4e:ab:b1:03:81:88:b8:9d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Validity
            Not Before: Jun  1 07:56:01 2024 GMT
            Not After : May 31 08:01:01 2025 GMT
        Subject: CN=4D54B1484312C8765F3961765A122EE91D96118F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:04:e4:cd:1b:bb:19:64:02:7e:27:06:57:22:
                    ea:ca:eb:45:cd:29:de:05:2f:c1:e9:ca:b7:62:1f:
                    4c:10:2b:67:61:0b:77:32:04:17:a4:58:fc:16:c4:
                    57:d6:f7:96:d5:98:98:aa:35:3e:cf:74:a8:f8:37:
                    e1:02:d0:e1:64:b5:25:71:0a:33:d9:b4:84:93:62:
                    20:79:71:50:c7:3f:ed:89:e7:3e:e8:cf:df:2d:f2:
                    18:56:5c:b3:47:98:0c:c3:3f:27:6e:57:68:6d:de:
                    0b:92:96:33:14:ae:4a:0b:fb:91:1e:3b:61:47:81:
                    4e:c1:9d:13:a6:96:3d:0e:b2:ae:b2:73:2b:8b:eb:
                    89:b6:71:71:39:a8:36:e0:24:a6:64:fc:8a:23:7e:
                    0b:8d:42:f7:e3:33:28:58:ab:c2:85:58:c1:25:5a:
                    e6:1e:b7:38:bd:c5:06:35:a4:5e:af:a6:b0:96:88:
                    6c:a1:4a:7c:0a:45:10:37:d8:2a:42:93:35:79:20:
                    ba:d1:65:a0:a2:f6:b7:72:ef:af:9e:6e:e2:4b:9e:
                    cf:6f:c9:96:1a:70:31:58:35:b6:3f:a3:68:70:73:
                    69:94:b2:87:5e:00:1b:69:78:68:26:c8:b3:85:72:
                    1b:0a:98:22:ee:9c:9d:db:56:c3:5e:c7:a2:fc:cc:
                    a1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:54:B1:48:43:12:C8:76:5F:39:61:76:5A:12:2E:E9:1D:96:11:8F
            X509v3 Authority Key Identifier:
                keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131382e302f32342d3234203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:24:93:ff:8d:40:c9:1b:a3:09:9d:91:1d:3e:38:8f:8f:50:
         8b:72:ff:a2:c4:6f:4c:95:7e:08:de:af:55:f0:4b:4f:20:f5:
         58:5c:5a:d4:f4:82:d6:62:89:f0:99:fb:2c:bb:48:22:9b:96:
         04:34:2f:75:e9:d2:ce:f7:8b:43:71:2f:c9:26:b1:9b:33:4d:
         92:4a:2d:8f:77:0a:e8:48:87:4d:e7:f1:74:7a:82:e7:03:e9:
         ab:51:c1:22:4d:81:00:7c:0b:a5:b8:cb:4b:ba:5f:af:69:b6:
         88:13:26:1a:70:0b:e9:3b:48:58:2a:3d:77:a9:d6:be:d2:ac:
         fb:43:8a:1f:50:ae:1f:16:f5:78:c6:73:e8:23:5f:ae:7c:16:
         11:41:20:a0:48:2f:9b:a4:0b:7e:af:3e:99:92:82:e3:1f:31:
         71:31:64:4e:5f:30:f1:ef:8d:86:46:79:c3:16:be:95:39:20:
         38:b0:8d:7d:ef:81:b1:68:6f:9c:72:3c:d8:6e:0d:c1:e5:98:
         85:cc:9e:db:3a:67:d4:67:02:11:a6:77:e7:df:37:74:65:c6:
         a8:41:d6:c5:ad:f2:52:d7:97:05:01:8b:c5:5f:0c:07:ad:7e:
         95:d1:5d:1a:e7:e3:0d:3e:87:77:41:fd:eb:fc:09:d7:87:cd:
         11:ba:8f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:45 2024 by rpki-client on console-fra.rpki-client.org