Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234332e302f32342d3234203d3e203338343936.roa
File:                     3131342e33312e3234332e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          ohzwwz0f6t9kYjTyleSmqg95hqfn3G2p3XcHFZnjS0Y=
Subject key identifier:   5F:26:40:F4:BE:52:4F:1F:4B:1F:B2:FC:66:CA:0B:9D:45:F6:04:E0
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       65E6A5567C62C189D9D215B4962E607F0A2B65F8
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234332e302f32342d3234203d3e203338343936.roa
Signing time:             Tue 02 Apr 2024 05:03:16 +0000
ROA not before:           Tue 02 Apr 2024 04:58:16 +0000
ROA not after:            Tue 01 Apr 2025 05:03:16 +0000
asID:                     38496
IP address blocks:        114.31.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e6:a5:56:7c:62:c1:89:d9:d2:15:b4:96:2e:60:7f:0a:2b:65:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Apr  2 04:58:16 2024 GMT
            Not After : Apr  1 05:03:16 2025 GMT
        Subject: CN=5F2640F4BE524F1F4B1FB2FC66CA0B9D45F604E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:ef:0e:8d:59:18:d7:6d:0c:5e:79:c6:38:
                    49:cf:33:ce:8d:94:d6:49:71:24:c7:42:40:fa:2c:
                    b0:76:ea:12:9e:1b:ba:16:3f:6e:87:56:5b:ab:48:
                    e2:d1:b2:6d:04:81:1d:9d:04:1d:f5:d4:02:39:ad:
                    5d:19:9e:32:1c:0d:e7:79:a6:6f:38:9a:9a:01:ef:
                    5f:69:60:f5:bd:d8:98:a1:33:75:96:16:e3:f8:0b:
                    e0:9e:1b:ff:2b:bf:78:7e:36:ab:e8:18:33:92:5e:
                    2f:ef:9a:99:85:bf:b2:e2:e0:e2:23:5a:40:a3:01:
                    c0:eb:c8:b6:48:d3:0b:2d:00:c7:7c:95:b1:0d:09:
                    b0:f4:8f:4f:34:4b:86:d5:01:bf:53:9f:2e:1b:3b:
                    29:15:ff:06:e7:b5:da:e0:3e:34:23:c5:af:e1:e8:
                    83:50:62:c7:6b:f3:94:2e:ae:31:9c:c1:27:e9:f5:
                    23:50:e2:e6:0e:0b:2f:8d:d1:30:ec:57:d1:9f:43:
                    3b:6b:26:3f:3e:df:67:62:49:c0:97:8e:e9:38:78:
                    0f:99:eb:5f:e1:72:8f:3e:9e:6c:9d:0f:15:70:5b:
                    ca:c9:25:04:84:9a:89:6a:10:b8:d4:37:6b:0b:58:
                    d2:aa:eb:f8:1d:1f:fd:a6:cc:72:99:3e:12:b3:23:
                    b9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:26:40:F4:BE:52:4F:1F:4B:1F:B2:FC:66:CA:0B:9D:45:F6:04:E0
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234332e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.31.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e7:b4:b0:87:8c:ab:94:cf:37:a3:b5:ba:6e:c9:ee:7f:1f:
         e9:42:00:60:dc:c5:d2:ff:d2:30:a4:29:91:90:28:a8:bb:e5:
         84:e6:65:1f:2c:c5:22:e1:04:87:04:a2:d5:8f:1f:f0:b2:9a:
         95:b9:f9:75:d8:c6:db:41:76:6e:83:87:7b:98:ad:ac:3c:90:
         68:78:eb:f7:95:31:2c:8e:15:eb:3d:7e:3b:32:15:07:3d:8e:
         31:9e:21:4f:4b:51:7c:c2:22:a7:c1:40:b6:39:86:19:11:61:
         eb:9f:7f:ea:89:49:5f:b9:f0:64:a5:bd:ea:98:a5:9e:fc:56:
         30:0f:82:c5:2e:93:9d:c2:6e:ab:f8:24:e1:f4:64:d7:8b:cf:
         fa:f5:50:10:1b:d3:ab:43:97:d2:00:34:de:9e:bb:7f:f3:ff:
         9e:50:ac:6e:6a:08:c1:f9:2b:c2:20:c0:38:29:3c:7a:b6:5d:
         83:e5:30:6b:c9:5b:cd:44:7e:f5:53:d5:f0:aa:83:e0:f1:7a:
         53:9b:db:ee:cc:47:be:de:67:40:df:fd:ef:f5:cd:81:0f:35:
         e2:80:03:75:86:b7:8c:19:6b:bf:44:c3:39:89:77:c3:1b:50:
         cb:14:3f:86:a0:cb:33:ab:eb:1c:6a:14:ca:85:6e:d7:2d:20:
         01:73:42:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org