Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136382e302f32342d3234203d3e203233363731.roa
File:                     3131312e39322e3136382e302f32342d3234203d3e203233363731.roa (raw, json)
Hash identifier:          krDcm5GE80v2usnmzaKYs3Hv4EuaFe2oFMJyYH9PfRw=
Subject key identifier:   EE:20:84:F1:A1:7C:7A:5C:88:DB:5F:1C:EF:49:49:92:1C:25:53:A5
Certificate issuer:       /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Certificate serial:       757A774ECFDB6001B96E357DD74A484B530E6591
Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136382e302f32342d3234203d3e203233363731.roa
Signing time:             Wed 25 Oct 2023 04:01:26 +0000
ROA not before:           Wed 25 Oct 2023 03:56:26 +0000
ROA not after:            Wed 23 Oct 2024 04:01:26 +0000
asID:                     23671
IP address blocks:        111.92.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl
                          rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7a:77:4e:cf:db:60:01:b9:6e:35:7d:d7:4a:48:4b:53:0e:65:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
        Validity
            Not Before: Oct 25 03:56:26 2023 GMT
            Not After : Oct 23 04:01:26 2024 GMT
        Subject: CN=EE2084F1A17C7A5C88DB5F1CEF4949921C2553A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f7:a4:67:6b:fb:79:3d:46:e7:91:d6:90:5f:
                    ee:71:c6:31:b2:fa:5e:01:37:cf:b0:9b:10:37:f8:
                    fd:b2:64:36:05:7d:0a:7e:6c:81:12:10:c1:5e:60:
                    06:c8:52:be:1f:62:ed:30:91:7a:92:b9:dd:b9:5c:
                    bc:3e:65:c2:4a:79:c6:1c:6f:20:19:0f:ff:21:fd:
                    d8:84:64:86:08:f9:fd:d1:bd:99:21:9c:52:87:fc:
                    3e:09:f1:8d:33:aa:2a:66:79:ff:af:70:98:44:4d:
                    19:cb:25:d6:a5:ba:8c:68:2f:3e:cf:73:5a:f6:7a:
                    89:d5:09:bd:fb:97:21:04:d3:88:01:36:a5:32:48:
                    8b:28:fc:e3:06:cb:96:28:d6:32:bf:47:7e:d0:60:
                    4d:ec:26:ef:a1:5b:14:00:96:a5:e3:af:f3:55:ce:
                    29:31:ad:1a:10:4c:40:e1:72:04:0f:c3:cd:f4:7c:
                    a9:6b:65:98:4b:4d:44:f5:3c:26:e4:07:2c:9d:5e:
                    ab:f2:c2:ff:95:26:18:1a:82:08:2d:90:e9:d0:54:
                    39:e8:db:11:20:02:67:01:f8:cc:26:d8:b2:f6:81:
                    fd:f8:4a:ac:4d:27:ee:6d:c2:3e:39:ed:42:6d:1c:
                    a9:24:6c:ca:0b:ef:5e:c8:f7:3f:ee:45:9e:d9:1e:
                    06:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:20:84:F1:A1:7C:7A:5C:88:DB:5F:1C:EF:49:49:92:1C:25:53:A5
            X509v3 Authority Key Identifier:
                keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136382e302f32342d3234203d3e203233363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:c0:8e:75:b7:53:68:60:8d:19:af:b6:ba:73:a1:fd:8f:a4:
         c2:83:3e:f2:11:7b:1a:23:d5:a8:b3:83:0a:8b:44:38:e7:ca:
         ea:3f:69:69:59:dc:63:01:11:c4:c0:3c:8f:c6:ca:bb:d4:e7:
         c7:7d:4f:a1:17:2f:92:5c:43:26:c1:2b:16:77:e1:fc:20:cc:
         f4:21:06:3c:88:1c:d8:53:45:03:ec:f6:9a:d4:6e:38:08:5e:
         0b:c1:1b:37:e8:bf:ff:a4:ca:70:5c:77:98:96:e7:a3:09:9d:
         d8:c2:df:da:9d:53:7a:c5:55:c3:ea:b7:5f:07:fa:94:db:6b:
         fc:fd:fd:c1:af:ed:f3:3d:ae:af:ea:02:43:06:90:c3:e0:0c:
         7b:81:30:a3:f5:da:92:23:f1:c2:7c:e8:c9:e5:00:c7:83:fd:
         16:cb:83:ac:d8:89:92:41:b0:0d:75:87:3e:b8:4a:aa:76:b0:
         6b:b1:5c:55:fd:aa:39:3b:d5:41:ea:6c:a6:cf:0f:11:9a:a7:
         9c:3f:7c:06:7f:4f:15:02:e8:1c:06:7e:fe:10:46:19:26:b3:
         0f:08:ec:9b:1a:71:b6:b1:02:a3:8c:c9:00:d8:10:a4:86:48:
         c2:db:a5:82:54:c9:74:82:1d:4c:0c:4c:59:97:c4:6c:fd:f3:
         47:8a:cb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:17 2024 by rpki-client on console-ams.rpki-client.org