Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234312e302f32342d3234203d3e203338343936.roa
File:                     3131342e33312e3234312e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          XqE8xfu2hX9Q9RSk2CKWorNS0Ss9P6LFJhMSs9JiGmY=
Subject key identifier:   EA:31:4D:3B:1B:88:D6:98:4C:98:16:B3:D6:65:B5:97:BA:11:49:01
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       16D67D91BB20E71F20EECAC2A5CDA32FD0EC268C
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234312e302f32342d3234203d3e203338343936.roa
Signing time:             Tue 02 Apr 2024 05:03:16 +0000
ROA not before:           Tue 02 Apr 2024 04:58:16 +0000
ROA not after:            Tue 01 Apr 2025 05:03:16 +0000
asID:                     38496
IP address blocks:        114.31.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d6:7d:91:bb:20:e7:1f:20:ee:ca:c2:a5:cd:a3:2f:d0:ec:26:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Apr  2 04:58:16 2024 GMT
            Not After : Apr  1 05:03:16 2025 GMT
        Subject: CN=EA314D3B1B88D6984C9816B3D665B597BA114901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f4:e0:cb:70:db:ae:cc:90:bd:ce:70:87:7c:
                    94:86:ed:ee:f6:58:ad:1b:27:eb:33:d6:39:8f:db:
                    02:de:c8:13:a8:ce:e3:71:db:73:41:ce:2c:56:8f:
                    34:31:fe:47:93:9a:30:4c:0f:b3:ec:37:c3:ab:84:
                    4b:99:5d:0a:21:bc:09:a6:c8:4f:46:9f:e6:1c:8f:
                    a3:78:8d:fd:c3:83:d9:09:31:5b:0c:88:b9:d3:01:
                    2a:c0:86:48:ad:c5:63:76:11:33:41:8b:91:e5:dd:
                    71:8e:e1:28:90:93:f5:9e:d6:e7:ca:b6:5a:7b:07:
                    ff:d6:38:a1:6c:4d:d2:81:b1:39:32:92:9f:17:43:
                    c8:44:7b:ce:0f:99:2a:3d:ef:2a:47:9f:1f:a4:7a:
                    31:56:22:ee:82:1b:a8:b1:33:4f:74:50:5b:16:e4:
                    f2:22:a6:62:78:9c:1a:8f:6a:7f:31:84:78:cc:8a:
                    a4:39:e6:8e:b3:31:04:b8:6c:d7:b0:72:2b:51:17:
                    3d:33:08:39:d3:2b:55:b1:19:d4:5f:3c:53:47:38:
                    b3:a2:8f:3c:74:d8:bf:65:1c:81:0a:7b:01:41:34:
                    0d:99:93:3e:74:15:3d:ab:82:be:c6:83:17:d0:00:
                    f5:c8:4b:4e:15:4c:21:61:bd:37:e7:12:47:0e:74:
                    62:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:31:4D:3B:1B:88:D6:98:4C:98:16:B3:D6:65:B5:97:BA:11:49:01
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234312e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.31.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:7c:d2:a3:a8:e4:29:ba:bc:ed:8f:17:bf:78:ec:81:26:a4:
         52:4b:e8:5f:a7:e8:c9:25:36:10:dc:4b:1f:1f:5c:55:71:f1:
         a7:9a:21:d1:65:28:e3:4f:26:9e:a2:a0:43:b7:ed:b7:61:9a:
         dc:a7:6b:92:48:eb:0f:49:16:e3:d7:2e:82:3b:35:cc:ba:af:
         8b:0e:cc:5d:02:28:7c:38:18:33:94:ea:85:74:a1:65:aa:4d:
         7d:1b:52:f3:00:6f:2f:1f:b1:d6:d6:c5:dc:f7:4b:2b:66:4d:
         6a:aa:31:12:84:e4:94:34:f3:7c:26:f9:7c:3c:d1:4b:fc:ad:
         7d:80:64:68:6d:2d:2d:8d:41:6c:e5:f4:f0:1c:b1:df:3f:70:
         25:12:e7:fc:22:82:91:6d:ae:17:e3:80:13:05:57:2e:c6:51:
         f5:d5:7b:92:70:be:9c:90:a3:e1:8b:a1:85:ed:e6:1c:ee:f8:
         1a:19:e3:cf:e4:fb:0b:f7:9e:34:5a:28:3a:9a:c6:24:07:25:
         fd:e1:90:6e:6c:3e:02:ab:5e:34:49:b7:f8:b0:20:05:1e:f7:
         f3:22:45:bf:1d:cd:c7:3f:9b:6c:f3:8f:83:ac:96:f4:85:e4:
         39:b9:8b:23:1e:d5:5a:73:bc:fa:82:05:7d:6e:dd:3b:a6:f6:
         68:1c:dd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:29 2024 by rpki-client on console-fra.rpki-client.org