Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa
File:                     3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (raw, json)
Hash identifier:          qGPJ+XMPsIDxszHxtVxQgv1keGrpyfKPesLoUAaiQWU=
Subject key identifier:   6D:FE:17:8B:5A:F9:77:20:6B:11:F7:56:D1:39:F1:D3:5F:62:75:5B
Certificate issuer:       /CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
Certificate serial:       0896109306B8754FA9A1E870EEEB4FE922EB8FC1
Authority key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa
Signing time:             Mon 01 Jul 2024 01:04:55 +0000
ROA not before:           Mon 01 Jul 2024 00:59:55 +0000
ROA not after:            Mon 30 Jun 2025 01:04:55 +0000
asID:                     45295
IP address blocks:        113.212.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl
                          rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:96:10:93:06:b8:75:4f:a9:a1:e8:70:ee:eb:4f:e9:22:eb:8f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
        Validity
            Not Before: Jul  1 00:59:55 2024 GMT
            Not After : Jun 30 01:04:55 2025 GMT
        Subject: CN=6DFE178B5AF977206B11F756D139F1D35F62755B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a2:9f:d0:9c:5d:e0:e7:88:d6:67:98:af:c7:
                    e7:7e:33:0f:f3:a2:84:44:5e:e9:65:b1:66:63:08:
                    96:d7:24:5f:f2:fa:25:38:e0:c6:89:10:31:ab:95:
                    f2:1e:b5:20:3d:58:35:a6:48:a5:f8:ae:d5:4c:7b:
                    97:ca:6f:7a:1e:47:e5:2d:dc:45:f3:76:e5:69:53:
                    e6:b6:0f:9d:95:c4:5c:9e:88:14:90:b3:c0:82:0a:
                    12:f3:b2:83:ef:9e:7f:ef:67:c1:d8:b3:a8:05:7f:
                    5e:7f:dd:a2:d3:6f:2f:9e:5d:f1:b3:36:7b:63:8a:
                    3a:83:03:ff:64:04:17:05:22:95:7c:13:13:c5:82:
                    46:b6:40:9a:36:a4:4c:66:37:4c:91:ff:f4:4c:d7:
                    1d:80:d7:4d:da:2d:55:26:57:3b:71:b8:1e:97:0e:
                    9c:3e:f4:16:2a:6b:5f:f1:01:a5:72:6e:29:eb:39:
                    56:be:bd:74:82:c5:7f:56:34:8d:ea:11:38:82:85:
                    2a:b8:2c:74:09:73:cf:c6:ef:dc:58:14:f7:30:00:
                    d6:a8:77:40:68:40:76:15:34:79:5b:15:f0:36:d0:
                    cb:53:8a:b2:4f:09:fb:68:4d:09:0f:84:96:7d:8e:
                    30:c3:29:d2:ea:03:bb:92:95:05:78:86:cf:f6:6e:
                    50:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FE:17:8B:5A:F9:77:20:6B:11:F7:56:D1:39:F1:D3:5F:62:75:5B
            X509v3 Authority Key Identifier:
                keyid:F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.212.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:73:8c:d4:b3:19:23:f7:92:f7:81:0a:23:f3:f7:99:9e:97:
         66:fd:40:f4:31:84:cd:3f:e3:b0:42:a7:1d:8c:6d:a0:f4:2a:
         18:d8:74:bd:2c:6a:be:d0:e0:7f:61:0e:a1:49:8a:06:a1:3a:
         a5:bd:7c:92:b6:7c:cc:d3:90:22:37:91:0e:8d:68:3f:19:e3:
         be:8e:69:fb:d3:a1:54:72:8d:1d:57:ba:ec:cc:8c:5e:6d:75:
         1c:89:54:4d:7c:2f:cd:06:44:e7:13:97:84:c0:d3:04:f4:db:
         66:ad:4d:a9:85:94:e6:09:c7:ac:7b:bf:ef:03:ea:ca:3d:d3:
         f3:6c:be:dc:30:9e:0d:c8:ec:cb:56:9a:cf:58:45:bc:11:8b:
         7e:b3:b2:c7:4c:c3:ed:c8:13:7a:8b:d3:89:85:79:c6:bf:e1:
         83:c8:1e:90:1a:f5:3c:f4:39:25:94:b4:f7:cf:9f:89:11:77:
         4f:97:ac:8e:dd:04:9a:50:6e:ed:43:a3:99:fa:a2:f0:4d:dd:
         24:71:60:16:a6:de:68:d7:f2:bc:52:9d:77:93:a4:7f:f8:e5:
         fb:6f:01:69:f3:40:c5:39:ac:bc:9c:a7:b4:24:ee:b7:a2:22:
         dc:e1:93:85:6f:74:7a:6a:f4:ec:27:e8:7b:f9:78:04:9c:fb:
         13:3b:2e:98
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUCJYQkwa4dU+poehw7utP6SLrj8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVC
RkE5NzczMzAeFw0yNDA3MDEwMDU5NTVaFw0yNTA2MzAwMTA0NTVaMDMxMTAvBgNV
BAMTKDZERkUxNzhCNUFGOTc3MjA2QjExRjc1NkQxMzlGMUQzNUY2Mjc1NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOop/QnF3g54jWZ5ivx+d+Mw/z
ooREXullsWZjCJbXJF/y+iU44MaJEDGrlfIetSA9WDWmSKX4rtVMe5fKb3oeR+Ut
3EXzduVpU+a2D52VxFyeiBSQs8CCChLzsoPvnn/vZ8HYs6gFf15/3aLTby+eXfGz
NntjijqDA/9kBBcFIpV8ExPFgka2QJo2pExmN0yR//RM1x2A103aLVUmVztxuB6X
Dpw+9BYqa1/xAaVybinrOVa+vXSCxX9WNI3qETiChSq4LHQJc8/G79xYFPcwANao
d0BoQHYVNHlbFfA20MtTirJPCftoTQkPhJZ9jjDDKdLqA7uSlQV4hs/2blCVAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUbf4Xi1r5dyBrEfdW0Tnx019idVswHwYDVR0j
BBgwFoAU8w8U9K62Yw/04nCwcpNYrr+pdzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NGY0OGE4OS05MGM1LTRmNWEtODAxNS0zNmYxMTk2YTcxYzgvMC9GMzBGMTRGNEFF
QjY2MzBGRjRFMjcwQjA3MjkzNThBRUJGQTk3NzMzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVCRkE5
NzczMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0ZjQ4YTg5LTkwYzUtNGY1YS04
MDE1LTM2ZjExOTZhNzFjOC8wLzMxMzEzMzJlMzIzMTMyMmUzMTM2MzAyZTMwMmYz
MjMxMmQzMjM0MjAzZDNlMjAzNDM1MzIzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDcdSgMA0GCSqG
SIb3DQEBCwUAA4IBAQBKc4zUsxkj95L3gQoj8/eZnpdm/UD0MYTNP+OwQqcdjG2g
9CoY2HS9LGq+0OB/YQ6hSYoGoTqlvXyStnzM05AiN5EOjWg/GeO+jmn706FUco0d
V7rszIxebXUciVRNfC/NBkTnE5eEwNME9NtmrU2phZTmCcese7/vA+rKPdPzbL7c
MJ4NyOzLVprPWEW8EYt+s7LHTMPtyBN6i9OJhXnGv+GDyB6QGvU89DkllLT3z5+J
EXdPl6yO3QSaUG7tQ6OZ+qLwTd0kcWAWpt5o1/K8Up13k6R/+OX7bwFp80DFOay8
nKe0JO63oiLc4ZOFb3R6avTsJ+h7+XgEnPsTOy6Y
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:57 2024 by rpki-client on console-fra.rpki-client.org