Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37332e302f32342d3234203d3e203536323333.roa
File:                     3131312e36372e37332e302f32342d3234203d3e203536323333.roa (raw, json)
Hash identifier:          ndzf/dY/nmXxj2I9KPRlglxDyJBwxAj+OgRvw2hK3Yo=
Subject key identifier:   34:EB:9E:99:33:59:0E:75:B3:4C:3B:11:4E:95:99:80:24:3C:1B:E3
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       461A2A181C5EC5A5A2C1EED319F8C00D4A666DDF
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37332e302f32342d3234203d3e203536323333.roa
Signing time:             Mon 08 Jul 2024 12:00:01 +0000
ROA not before:           Mon 08 Jul 2024 11:55:01 +0000
ROA not after:            Mon 07 Jul 2025 12:00:01 +0000
asID:                     56233
IP address blocks:        111.67.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1a:2a:18:1c:5e:c5:a5:a2:c1:ee:d3:19:f8:c0:0d:4a:66:6d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Jul  8 11:55:01 2024 GMT
            Not After : Jul  7 12:00:01 2025 GMT
        Subject: CN=34EB9E9933590E75B34C3B114E959980243C1BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:27:b6:44:5f:72:c4:a3:ee:b4:a0:33:f7:45:
                    14:6e:ce:ca:c2:7b:7d:2b:ba:57:90:79:67:15:91:
                    81:ef:b0:ae:ae:78:43:68:aa:4e:69:6e:09:d1:44:
                    40:f5:5c:27:a1:b1:8e:42:ce:84:56:80:71:b7:0d:
                    53:f1:67:c6:2a:ea:f1:dc:22:2e:51:36:92:91:ab:
                    cb:9c:95:93:dc:35:01:e2:c6:67:6c:16:54:fe:8f:
                    99:b9:8b:c5:9f:87:71:43:48:18:02:c4:72:82:a2:
                    25:78:87:f9:36:ad:a2:25:57:9e:5b:8d:a1:18:6e:
                    39:ad:76:5b:b5:68:99:9e:91:41:54:ce:6e:df:86:
                    77:93:a3:9f:37:b9:28:06:e5:1c:bd:0b:22:72:6d:
                    05:98:f9:80:7e:f7:f7:d1:30:f8:12:1a:af:eb:c5:
                    32:69:8e:a5:ab:09:ec:7d:12:69:d2:31:77:84:bc:
                    6b:b8:13:d5:bc:63:ad:15:72:d7:34:7e:cc:b3:ad:
                    e8:a9:fe:2b:3f:1e:a8:44:8f:96:2d:2c:0a:d5:06:
                    96:3d:51:a4:37:0c:cf:7f:2c:4a:c6:50:c1:c7:d7:
                    e4:09:ca:97:bf:d8:13:56:9c:a9:49:e8:22:7b:b4:
                    f8:a0:7a:f6:05:db:2e:7b:dc:07:52:7c:7c:6e:a5:
                    ff:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EB:9E:99:33:59:0E:75:B3:4C:3B:11:4E:95:99:80:24:3C:1B:E3
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37332e302f32342d3234203d3e203536323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:d4:67:2b:b2:ef:f7:6f:1e:62:5b:62:a4:cf:ac:07:a1:7b:
         36:a4:88:52:5e:bd:ac:c3:cd:37:11:55:7f:fa:57:a1:07:a3:
         00:5f:8a:6f:97:60:3e:8f:3e:ed:7d:f9:d1:e8:9b:42:20:ee:
         6a:93:30:21:7e:aa:90:86:89:67:50:95:a1:55:01:c0:35:ef:
         89:5e:1c:54:bd:60:5e:4a:66:50:39:33:fc:58:bd:54:19:31:
         0d:07:9e:e0:03:66:6b:58:e1:8d:23:5b:dc:22:66:f5:ec:c4:
         24:68:6e:0e:53:7d:96:e9:4d:cd:a2:ed:24:63:6c:ee:80:44:
         bb:44:57:d7:9b:23:67:02:23:9a:74:58:c2:49:3b:8c:b5:c3:
         9d:8e:1d:d2:97:12:03:c9:f2:87:ef:83:7b:64:17:45:5b:71:
         82:f7:1b:42:72:a4:02:18:d2:64:87:03:dc:a4:54:56:b9:a8:
         d5:c7:44:66:a2:59:bf:c9:ae:cf:d3:a0:56:df:d7:0c:c6:a0:
         f5:e2:b2:45:d0:44:b0:05:70:4f:67:4b:a2:32:52:59:41:db:
         89:98:31:9c:77:88:a7:7e:81:e6:06:51:88:32:4c:c5:58:27:
         25:8f:0a:6e:8a:8c:72:e1:3e:7e:80:2b:17:9f:b2:cc:42:a2:
         c9:d6:5c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:17:42 2024 by rpki-client on console-fra.rpki-client.org