Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136352e302f32342d3234203d3e203233363731.roa
File:                     3131312e39322e3136352e302f32342d3234203d3e203233363731.roa (raw, json)
Hash identifier:          kuv046nUjqbuM7NiCLKoEIAk09n5Jh+5qubyj9YzyFE=
Subject key identifier:   4A:D6:9C:F2:32:6B:9C:2E:86:B9:9F:7C:68:4B:81:93:D5:FB:D5:E3
Certificate issuer:       /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Certificate serial:       6D6E5295B7EBFB077B40A8C492F18E245E8E85A9
Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136352e302f32342d3234203d3e203233363731.roa
Signing time:             Thu 26 Sep 2024 09:00:00 +0000
ROA not before:           Thu 26 Sep 2024 08:55:00 +0000
ROA not after:            Thu 25 Sep 2025 09:00:00 +0000
asID:                     23671
IP address blocks:        111.92.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl
                          rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:6e:52:95:b7:eb:fb:07:7b:40:a8:c4:92:f1:8e:24:5e:8e:85:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
        Validity
            Not Before: Sep 26 08:55:00 2024 GMT
            Not After : Sep 25 09:00:00 2025 GMT
        Subject: CN=4AD69CF2326B9C2E86B99F7C684B8193D5FBD5E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:38:db:5d:f3:90:30:fa:81:6a:76:4d:3d:1b:
                    70:4f:6f:94:37:c6:9b:14:8a:3b:85:b5:35:6b:85:
                    c7:72:aa:ee:88:ed:70:ae:24:c5:ea:17:8d:62:4a:
                    04:8b:e0:0a:d7:b6:16:ba:af:22:0e:d8:3c:82:e6:
                    e4:76:68:14:a9:50:43:09:ac:ae:19:49:37:59:94:
                    54:9b:9f:b8:44:ae:d3:f2:35:a4:da:e4:a6:5f:60:
                    7a:23:c4:c7:ea:14:a4:6a:34:79:9f:0d:c0:80:86:
                    2e:e5:9c:0a:b4:1b:fb:dc:6f:3f:c4:99:c0:2b:d7:
                    aa:f5:e5:2c:c9:99:a0:d6:7f:e7:55:e3:f5:f1:78:
                    22:f7:9f:6e:19:a0:44:8b:6f:b3:d7:38:0c:0f:ba:
                    72:f9:e0:5c:2a:e9:69:cf:ba:a3:b2:80:2e:a8:f6:
                    23:2f:6e:3e:d4:24:a8:6d:19:9e:1e:14:7b:09:ab:
                    14:7d:e9:d4:0b:3a:ae:33:1d:75:8d:72:24:c3:d5:
                    c9:c6:06:68:33:b6:b2:cc:84:19:fe:71:c8:9d:37:
                    3d:f1:d7:09:94:70:db:19:46:7d:bf:1a:7a:c2:a1:
                    22:81:ed:aa:41:85:4b:c3:4b:54:d6:35:12:c5:26:
                    ea:ad:35:10:59:18:d2:63:0c:81:a1:e6:93:82:5b:
                    54:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D6:9C:F2:32:6B:9C:2E:86:B9:9F:7C:68:4B:81:93:D5:FB:D5:E3
            X509v3 Authority Key Identifier:
                keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136352e302f32342d3234203d3e203233363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:08:a8:b9:d5:c1:a8:d1:5a:5e:be:14:e6:00:41:17:33:f1:
         4b:03:8e:87:b3:dc:85:e1:f9:f6:30:8f:6f:5b:b1:27:b2:23:
         12:de:72:f6:70:5d:a0:0f:50:46:ce:e7:c5:78:f7:e1:b7:3c:
         90:d5:40:b2:50:2b:14:9d:9a:9b:cf:a4:ba:60:dc:36:43:9b:
         2b:00:37:1b:4f:53:37:9c:a3:73:e3:36:a8:7c:89:04:5a:36:
         97:d3:13:51:ad:0c:2b:24:39:48:64:11:55:21:db:ac:fe:c1:
         dd:95:6b:87:e9:d4:84:80:6d:2f:06:98:8a:9c:35:4b:1a:cb:
         4a:15:de:88:97:32:1b:43:3e:d1:b3:98:24:2a:22:9a:c4:8d:
         80:01:39:7e:33:fc:b1:a9:09:09:86:ec:5e:45:fc:9a:9b:8b:
         a1:b6:30:92:0b:ac:3c:86:2f:1e:0f:be:14:a2:1a:63:28:13:
         04:ab:61:80:e0:f2:c0:90:e4:36:23:40:85:2c:1f:25:4d:ba:
         42:1c:9d:f8:fa:1d:b2:84:05:b5:0d:f6:5e:5e:62:5a:9c:b1:
         0d:20:49:79:d1:d9:a3:8e:b2:75:bc:c3:b6:6b:68:cc:a1:dd:
         70:0e:9d:7f:11:db:5e:33:a4:d0:5a:2d:0f:87:cd:0b:ec:0e:
         a1:e4:40:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:21 2024 by rpki-client on console-fra.rpki-client.org