Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e38382e302f32332d3234203d3e203234353337.roa
File:                     3131312e36372e38382e302f32332d3234203d3e203234353337.roa (raw, json)
Hash identifier:          LOzYi7IlYeMp9QOHAGBPza4xIVDFMZkY2F5HPF37I6E=
Subject key identifier:   DA:7F:81:82:BC:DE:7C:09:5E:91:3A:C2:B4:E0:0D:09:6C:BB:21:6E
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       2C15C9440BA3AE081F24A79F886C94A167E0AF9C
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e38382e302f32332d3234203d3e203234353337.roa
Signing time:             Mon 01 Jul 2024 01:04:01 +0000
ROA not before:           Mon 01 Jul 2024 00:59:01 +0000
ROA not after:            Mon 30 Jun 2025 01:04:01 +0000
asID:                     24537
IP address blocks:        111.67.88.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:15:c9:44:0b:a3:ae:08:1f:24:a7:9f:88:6c:94:a1:67:e0:af:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Jul  1 00:59:01 2024 GMT
            Not After : Jun 30 01:04:01 2025 GMT
        Subject: CN=DA7F8182BCDE7C095E913AC2B4E00D096CBB216E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:46:15:f2:ba:b1:2a:8f:1e:66:36:2d:7d:b5:
                    36:96:d5:af:d6:72:d3:80:89:d0:1a:a0:7e:c9:58:
                    c4:ea:30:6d:10:a4:c4:32:18:e4:4f:fc:bd:e0:00:
                    7b:86:c7:9c:d5:4c:88:6e:2b:bc:76:f8:0a:8a:77:
                    1e:63:a6:39:5c:df:2d:f0:fd:f3:71:58:4a:36:01:
                    1c:05:ad:68:66:24:eb:00:4b:b5:1d:f9:b9:c0:e9:
                    3d:d0:10:e0:6b:38:5f:70:8e:c9:ba:14:c7:08:e2:
                    ba:ce:05:59:1f:65:43:64:63:0d:af:6f:20:8c:58:
                    2e:ed:99:f3:98:41:7c:88:25:05:31:32:e6:da:4c:
                    0c:91:fa:51:16:fc:50:4d:35:82:60:f0:98:f5:80:
                    3d:d2:ab:3d:f7:02:ec:31:94:a6:d6:ff:dd:35:05:
                    2a:5d:0a:76:98:7d:56:79:8a:e5:59:8e:f3:7b:8c:
                    2e:be:9c:0d:dd:0b:c7:29:d3:72:f7:48:8e:e6:9f:
                    5a:86:22:78:9b:e8:28:33:ea:30:d9:88:2b:78:75:
                    24:90:f4:46:af:ff:ef:1a:49:96:5d:34:9b:00:14:
                    3d:a2:58:16:8c:c8:e8:34:06:20:11:d2:0f:d1:9e:
                    d9:86:71:1c:3a:72:fb:b3:a9:f4:e1:8a:6e:21:7a:
                    b5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7F:81:82:BC:DE:7C:09:5E:91:3A:C2:B4:E0:0D:09:6C:BB:21:6E
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e38382e302f32332d3234203d3e203234353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:75:7a:84:0b:77:ed:6d:ba:c9:69:c6:e6:65:a5:e4:a5:59:
         19:25:80:26:f4:22:60:5b:40:cd:5e:30:2d:96:a7:56:fc:08:
         76:90:36:99:2c:f0:10:35:0d:19:04:2f:4f:19:58:1c:fd:0e:
         f0:3f:ec:d9:3e:00:f9:d3:02:88:b6:88:47:7f:e4:fe:8e:05:
         7d:a6:b4:1a:00:f0:08:7d:3d:f9:90:37:aa:1b:a5:77:3d:87:
         0f:cf:68:79:d5:86:00:63:8c:7d:2e:fe:8b:93:22:19:73:c7:
         5f:6d:ea:e2:75:8e:44:2b:ad:a2:b9:3e:8d:11:7d:4d:38:50:
         6b:54:b8:e9:2f:57:e2:6e:b1:98:ce:ab:95:bc:fa:3e:0f:70:
         52:56:96:9f:ff:6b:dd:f5:26:e8:a4:86:22:43:90:c6:45:f9:
         63:bc:71:07:29:fe:53:28:52:dc:d4:14:3b:0f:ca:2f:38:3d:
         3e:ef:de:b1:17:33:0d:14:4f:f7:1d:d9:9e:d4:ce:b4:b4:ae:
         33:6b:19:a9:2f:2c:05:29:75:51:33:17:3e:f5:2f:fb:0e:b3:
         81:91:6e:bd:65:88:a6:96:e7:d8:6b:84:65:90:09:1b:ba:32:
         c4:30:c8:c5:fe:3a:71:a6:39:70:24:87:e8:8c:c9:e7:c0:6a:
         03:70:93:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:10 2024 by rpki-client on console-ams.rpki-client.org