Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136322e302f32342d3234203d3e203338353036.roa
File:                     3131312e39322e3136322e302f32342d3234203d3e203338353036.roa (raw, json)
Hash identifier:          /6+jvg8KiTmrNLO4t1shH85dllFWeXwB6Znb1zuownA=
Subject key identifier:   F7:BD:BE:98:F9:44:74:D4:C5:60:6B:4B:C8:83:7B:C0:52:0B:C0:C7
Certificate issuer:       /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Certificate serial:       414171C41800219FA21F2B45F3476C3F31FB7C81
Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136322e302f32342d3234203d3e203338353036.roa
Signing time:             Thu 31 Oct 2024 13:00:00 +0000
ROA not before:           Thu 31 Oct 2024 12:55:00 +0000
ROA not after:            Thu 30 Oct 2025 13:00:00 +0000
asID:                     38506
IP address blocks:        111.92.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl
                          rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:41:71:c4:18:00:21:9f:a2:1f:2b:45:f3:47:6c:3f:31:fb:7c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
        Validity
            Not Before: Oct 31 12:55:00 2024 GMT
            Not After : Oct 30 13:00:00 2025 GMT
        Subject: CN=F7BDBE98F94474D4C5606B4BC8837BC0520BC0C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:21:a8:e2:76:38:ba:33:50:2e:c3:45:f4:29:
                    2b:a2:6d:7e:5a:4d:4e:fe:48:85:47:34:69:00:74:
                    86:02:5e:8c:58:5e:13:5d:ff:eb:79:66:5c:53:89:
                    e3:23:3e:ca:9c:d5:04:1d:ff:e3:f1:2d:d1:9e:55:
                    ed:55:6b:40:dc:6e:8e:6f:ba:ef:51:4b:83:78:0e:
                    f9:07:bc:f8:fa:cd:70:c6:fb:3f:66:89:31:95:48:
                    05:4e:5e:87:54:4d:1c:36:df:42:35:ef:b5:58:af:
                    f7:70:06:cf:21:9d:b9:20:d3:c3:b5:0c:63:b2:1a:
                    85:45:7d:b8:e1:e2:27:ea:2a:28:53:57:8e:73:c3:
                    9f:89:85:8d:4c:41:95:fe:81:f2:35:b6:3b:90:97:
                    3a:1d:df:70:f3:aa:38:31:3a:16:21:cf:bc:81:75:
                    a4:cf:5a:28:3b:f8:50:d1:02:69:42:e8:f1:90:82:
                    cd:f3:26:34:ff:46:90:a2:49:66:ba:ed:74:56:c7:
                    89:01:44:7c:4d:0d:4e:10:28:9f:51:95:33:b1:60:
                    83:9f:71:e9:a4:00:8c:02:65:1d:e3:e5:86:a1:e7:
                    25:6c:e3:1e:41:9d:ec:a8:3f:34:36:04:5f:6e:d6:
                    cd:bd:fe:e8:12:4e:93:7d:c8:8a:ce:07:42:eb:ed:
                    ad:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BD:BE:98:F9:44:74:D4:C5:60:6B:4B:C8:83:7B:C0:52:0B:C0:C7
            X509v3 Authority Key Identifier:
                keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136322e302f32342d3234203d3e203338353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:4a:46:47:fe:a8:d8:65:ad:16:52:6e:0c:fb:b3:40:63:6d:
         87:cc:c2:9b:c7:c3:f7:3e:9b:9e:d4:34:53:ee:9c:9c:a0:b2:
         c4:b9:0d:e4:14:02:8a:07:65:f2:c7:53:b2:f9:4d:e1:c4:83:
         2c:1b:70:7e:aa:b7:a6:97:ef:bb:1c:62:7b:6b:eb:4b:e9:c2:
         87:03:5e:42:c3:33:46:8c:35:00:c3:55:94:50:9d:0f:f1:91:
         1b:b9:33:4d:8e:ef:f4:f3:e8:6c:16:66:65:fb:59:39:59:b2:
         86:97:0f:11:63:2d:74:82:a2:24:80:38:d4:19:2b:30:ee:48:
         4f:d8:d8:2f:1a:10:a5:81:b4:c6:cc:7c:65:36:03:c5:e4:e3:
         8a:38:74:41:69:15:77:19:c4:f1:03:2e:02:12:a3:93:91:d8:
         51:e0:18:3d:28:e7:81:a3:a8:28:35:99:ed:f6:99:cf:33:b0:
         23:81:dd:f9:95:d2:29:5f:3f:3e:da:98:f4:ba:35:ed:55:e0:
         f0:74:62:41:ea:5c:f3:48:fd:d4:c9:1a:66:c7:4b:d6:77:2a:
         43:23:13:c8:75:bc:48:fd:aa:b4:a0:07:78:da:32:38:cb:af:
         2d:e7:51:42:05:1b:bf:c1:9e:1d:a7:9b:13:60:fd:20:05:98:
         62:f0:2a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org