Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31322e302f32342d3234203d3e203338343936.roa
File:                     3131372e3130332e31322e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          mDy6hC1U6WmBDKri9/UUp28n7RxhG+FOJuKv2QP4Fd0=
Subject key identifier:   44:33:70:BE:23:D2:34:34:FB:A2:52:20:CD:C6:DD:34:F5:72:5C:E2
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       570061922F05FEAE40AA1F98E66D6D5C1CB02386
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31322e302f32342d3234203d3e203338343936.roa
Signing time:             Wed 17 Apr 2024 05:02:01 +0000
ROA not before:           Wed 17 Apr 2024 04:57:01 +0000
ROA not after:            Wed 16 Apr 2025 05:02:01 +0000
asID:                     38496
IP address blocks:        117.103.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:00:61:92:2f:05:fe:ae:40:aa:1f:98:e6:6d:6d:5c:1c:b0:23:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Apr 17 04:57:01 2024 GMT
            Not After : Apr 16 05:02:01 2025 GMT
        Subject: CN=443370BE23D23434FBA25220CDC6DD34F5725CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:59:f6:1c:9b:5b:c7:14:f6:ba:27:89:87:
                    cc:1d:41:18:bd:ee:2c:33:80:94:be:66:97:76:a2:
                    5d:ed:2c:0e:23:f5:f6:4c:d3:76:dc:59:fd:c2:46:
                    30:f8:33:b8:32:cf:e4:e4:32:5c:ef:28:42:7b:dd:
                    cf:63:74:e1:4e:7b:f4:3f:8a:67:2a:19:c8:2d:fb:
                    2b:d4:fc:55:79:ff:9b:60:3a:7e:32:4c:e8:15:d4:
                    6a:1e:ef:9c:6b:32:7c:e4:36:66:98:6a:0e:5b:58:
                    8a:31:1d:37:3c:03:fd:55:e3:24:b1:7b:3b:88:55:
                    10:70:06:f4:6d:d7:17:90:f5:75:b5:60:da:7f:0f:
                    58:5e:05:31:76:82:40:25:bf:c9:07:24:d8:ff:e7:
                    d1:d1:12:06:6d:0b:64:25:fa:fd:b9:22:5b:f1:e1:
                    ae:9d:e1:1f:11:9d:8f:7b:c8:0b:d6:b0:22:3f:1e:
                    92:56:87:94:f6:8f:86:97:db:c0:81:a5:9a:34:ad:
                    f9:e9:4e:d9:3e:73:ab:8d:ef:60:74:0e:fa:78:a0:
                    f4:09:70:3d:43:57:4a:34:92:4a:d6:36:64:24:fc:
                    ae:a1:4f:77:2f:31:df:2a:a0:ce:10:79:90:db:b4:
                    d4:80:00:72:53:53:13:95:ad:4c:f3:59:ee:57:f5:
                    74:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:33:70:BE:23:D2:34:34:FB:A2:52:20:CD:C6:DD:34:F5:72:5C:E2
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31322e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.103.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:a8:c9:f9:0e:20:1d:db:3f:c1:fa:23:1a:6d:1a:0c:00:2c:
         86:54:4f:ff:b2:fd:27:92:84:35:30:14:de:f7:47:4a:b7:b1:
         cf:d7:25:24:e6:43:7f:0d:aa:f8:d6:d5:fc:ae:85:32:cf:96:
         e4:11:af:02:e3:46:04:f8:00:15:2e:2b:94:83:54:4e:b9:da:
         62:1a:08:5e:90:c6:a3:2f:de:82:9f:6b:9f:c1:a6:80:c5:8c:
         93:6b:53:26:b9:18:c7:ce:9c:68:18:1b:5d:36:7c:c8:0a:a9:
         dc:03:1e:01:3e:f7:8c:8f:95:6f:5e:7a:46:df:30:4c:01:1b:
         bb:d1:ad:8a:68:ba:67:88:02:a1:a6:e8:94:4b:96:46:39:74:
         11:e7:e7:be:e1:3b:2c:2e:d1:3c:cc:56:37:49:17:8c:83:e5:
         3b:07:65:8d:e4:d3:43:00:81:36:d5:c9:61:ed:69:e3:eb:41:
         11:fc:0e:35:2e:fc:46:a5:76:f3:1c:62:7f:79:b8:c7:9f:ec:
         79:50:28:5f:20:9b:8b:51:ef:81:27:24:db:27:f7:9d:89:44:
         90:b6:1b:a8:a3:b9:8f:eb:fc:37:79:70:97:04:ae:29:eb:30:
         82:a7:fd:54:e2:87:bc:3e:cf:5e:05:28:e8:5a:d5:92:aa:3c:
         aa:04:02:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org