Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32332d3233203d3e203234353235.roa
File:                     3131342e3139392e39362e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier:          V/KQbOytcX3c/LxHltJWPGSmP8eWgCVwm4tttKnVw1M=
Subject key identifier:   E5:30:E4:6D:32:57:91:44:C5:7E:AE:27:5E:11:A6:49:77:40:02:CC
Certificate issuer:       /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial:       17D1817A8CFA06A7E9D86CBC3F0CCC97E9072F07
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32332d3233203d3e203234353235.roa
Signing time:             Tue 21 May 2024 08:02:40 +0000
ROA not before:           Tue 21 May 2024 07:57:40 +0000
ROA not after:            Tue 20 May 2025 08:02:40 +0000
asID:                     24525
IP address blocks:        114.199.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
                          rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d1:81:7a:8c:fa:06:a7:e9:d8:6c:bc:3f:0c:cc:97:e9:07:2f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Validity
            Not Before: May 21 07:57:40 2024 GMT
            Not After : May 20 08:02:40 2025 GMT
        Subject: CN=E530E46D32579144C57EAE275E11A649774002CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5d:8e:00:12:9b:10:65:03:6e:f4:9f:62:43:
                    24:72:48:ea:dd:a3:e3:2e:33:fd:4e:ff:20:8d:ca:
                    58:0a:8b:1f:c4:cf:30:18:71:3a:67:53:a2:0f:3f:
                    56:fb:95:6f:13:35:15:54:f2:31:c2:ad:3d:08:d5:
                    03:6e:d4:61:d2:56:2d:f1:12:df:f8:6a:ba:c4:2e:
                    77:6c:cf:6c:46:31:de:e5:21:a4:ea:14:4c:04:f8:
                    90:2c:3b:1e:ee:85:03:1f:7f:e9:45:60:f0:98:59:
                    0e:af:97:7c:e4:6d:5d:0f:6e:b2:88:46:a9:8a:41:
                    55:59:5f:2e:00:f9:75:a9:a3:36:57:4f:52:02:24:
                    37:bb:2e:11:35:41:48:ca:a5:2e:16:ed:66:d7:45:
                    f4:34:9e:2c:85:37:17:76:20:8c:43:aa:20:92:1a:
                    7e:f1:5b:d8:d3:41:82:c3:a2:95:02:9e:4e:7d:ca:
                    8b:ca:be:f4:ea:56:55:90:c5:f2:f6:5e:17:ae:7e:
                    05:e7:c0:f6:e2:98:13:1a:11:cf:15:88:4f:1d:31:
                    28:30:61:cd:df:57:4f:4d:b9:ca:f1:b4:34:8a:e9:
                    3f:18:26:a5:07:c2:d9:79:38:c9:73:01:f5:40:58:
                    83:a3:72:76:3c:6b:36:9c:5e:76:4a:fc:14:aa:02:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:30:E4:6D:32:57:91:44:C5:7E:AE:27:5E:11:A6:49:77:40:02:CC
            X509v3 Authority Key Identifier:
                keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32332d3233203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:4a:62:3e:41:f2:60:ca:9d:22:22:27:b0:db:71:00:fa:97:
         3b:73:ef:5f:64:05:7a:83:f5:b0:47:a1:b3:3f:aa:20:48:80:
         a5:01:d9:1b:24:12:a3:3f:4c:5e:ec:46:07:72:96:f1:35:65:
         8d:29:6e:51:4a:1c:60:ac:be:75:a2:92:eb:3a:81:16:8c:5d:
         94:3a:80:0f:c0:7c:09:c5:82:5d:eb:29:bc:eb:4e:1a:31:71:
         49:51:fd:27:f7:ae:d6:89:e8:a4:6f:55:11:73:ba:37:ca:9b:
         0c:18:99:33:78:43:c3:8b:0a:73:6b:6a:6f:7b:b0:4c:15:3e:
         af:b0:8a:9f:4c:e6:ea:4d:d0:24:eb:7c:34:f4:9c:b4:dd:90:
         b6:34:24:45:0e:84:ee:fa:68:8c:8d:fd:70:d4:05:0e:57:3d:
         87:1f:3f:09:05:b7:4d:e4:7f:82:62:11:62:23:bc:53:5a:e9:
         2a:25:b4:1b:e1:44:b9:7c:00:5b:84:d5:06:e1:ce:50:bc:fc:
         98:c1:89:ff:11:5d:31:3d:f8:aa:0f:f6:5b:2c:ba:ac:d9:0a:
         9c:49:37:16:f1:45:97:d6:50:1f:e0:a9:53:57:20:6b:81:9d:
         c3:d5:bd:5e:30:bf:9e:a9:5f:c9:f0:8a:fb:07:2a:7e:47:f3:
         b8:f5:fa:34
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUF9GBeoz6Bqfp2Gy8PwzMl+kHLwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0
NkE4MzcwMjAeFw0yNDA1MjEwNzU3NDBaFw0yNTA1MjAwODAyNDBaMDMxMTAvBgNV
BAMTKEU1MzBFNDZEMzI1NzkxNDRDNTdFQUUyNzVFMTFBNjQ5Nzc0MDAyQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZXY4AEpsQZQNu9J9iQyRySOrd
o+MuM/1O/yCNylgKix/EzzAYcTpnU6IPP1b7lW8TNRVU8jHCrT0I1QNu1GHSVi3x
Et/4arrELndsz2xGMd7lIaTqFEwE+JAsOx7uhQMff+lFYPCYWQ6vl3zkbV0PbrKI
RqmKQVVZXy4A+XWpozZXT1ICJDe7LhE1QUjKpS4W7WbXRfQ0niyFNxd2IIxDqiCS
Gn7xW9jTQYLDopUCnk59yovKvvTqVlWQxfL2XheufgXnwPbimBMaEc8ViE8dMSgw
Yc3fV09NucrxtDSK6T8YJqUHwtl5OMlzAfVAWIOjcnY8azacXnZK/BSqAqRDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU5TDkbTJXkUTFfq4nXhGmSXdAAswwHwYDVR0j
BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1
NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4
MzcwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05
ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzOTM2MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzIzNDM1MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXLHYDANBgkqhkiG
9w0BAQsFAAOCAQEAP0piPkHyYMqdIiInsNtxAPqXO3PvX2QFeoP1sEehsz+qIEiA
pQHZGyQSoz9MXuxGB3KW8TVljSluUUocYKy+daKS6zqBFoxdlDqAD8B8CcWCXesp
vOtOGjFxSVH9J/eu1onopG9VEXO6N8qbDBiZM3hDw4sKc2tqb3uwTBU+r7CKn0zm
6k3QJOt8NPSctN2QtjQkRQ6E7vpojI39cNQFDlc9hx8/CQW3TeR/gmIRYiO8U1rp
KiW0G+FEuXwAW4TVBuHOULz8mMGJ/xFdMT34qg/2Wyy6rNkKnEk3FvFFl9ZQH+Cp
U1cga4Gdw9W9XjC/nqlfyfCK+wcqfkfzuPX6NA==
-----END CERTIFICATE-----
Generated at Sat Jun 1 09:09:44 2024 by rpki-client on console-fra.rpki-client.org