Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137342e302f32342d3234203d3e203233363731.roa
File:                     3131312e39322e3137342e302f32342d3234203d3e203233363731.roa (raw, json)
Hash identifier:          4cpEHL/u8vBq+XBu56d79/eBMOewnc0o+zZffq8T9Fk=
Subject key identifier:   1B:B5:16:AA:52:97:EA:8F:27:26:38:87:2E:D6:8B:33:5A:53:91:BC
Certificate issuer:       /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Certificate serial:       4C3591566FE62295C5ADAF1E330D64D1B0FA6D8B
Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137342e302f32342d3234203d3e203233363731.roa
Signing time:             Tue 28 May 2024 02:13:04 +0000
ROA not before:           Tue 28 May 2024 02:08:04 +0000
ROA not after:            Tue 27 May 2025 02:13:04 +0000
asID:                     23671
IP address blocks:        111.92.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl
                          rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:35:91:56:6f:e6:22:95:c5:ad:af:1e:33:0d:64:d1:b0:fa:6d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
        Validity
            Not Before: May 28 02:08:04 2024 GMT
            Not After : May 27 02:13:04 2025 GMT
        Subject: CN=1BB516AA5297EA8F272638872ED68B335A5391BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:3c:69:5a:05:90:cf:37:6f:c7:43:ae:82:
                    f8:60:e6:1a:ed:7b:22:a3:27:b3:8d:05:2c:e4:98:
                    b8:ac:2e:3f:a9:d7:66:a9:87:6e:5a:b8:76:64:38:
                    7c:47:6a:5f:e0:ce:c0:75:51:43:d0:c7:fd:8d:6c:
                    5e:e7:40:d4:da:93:f2:fa:ee:52:c2:22:26:d1:c9:
                    fd:b9:3e:10:b4:13:6d:16:a0:3b:c1:e4:f1:05:83:
                    72:47:5b:c5:8f:be:96:bf:93:66:3e:be:35:b6:84:
                    29:c9:69:80:9e:81:bf:98:1d:64:9c:ac:aa:b9:28:
                    18:6c:ff:c1:5b:ad:0d:34:66:2f:be:83:58:ec:69:
                    27:bb:31:59:eb:bf:85:7e:a0:45:c7:39:ce:ca:c9:
                    6b:42:11:6c:fc:fd:01:ee:10:8f:ae:79:69:76:30:
                    86:d7:e8:d6:b2:1c:27:a6:78:c3:62:ae:0c:e5:70:
                    93:04:15:10:b8:a7:43:02:2d:5a:c7:52:07:d7:4f:
                    65:e3:ab:3c:a0:4c:4e:5b:fe:f4:9d:bc:81:2a:b2:
                    f8:df:b2:db:e0:e7:d4:58:d4:76:3f:4c:75:6f:c2:
                    58:fb:16:c3:36:a8:0a:4f:10:7e:e4:e2:32:de:b6:
                    08:c4:aa:06:87:cb:31:fd:2c:43:a2:66:c8:86:cf:
                    a4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B5:16:AA:52:97:EA:8F:27:26:38:87:2E:D6:8B:33:5A:53:91:BC
            X509v3 Authority Key Identifier:
                keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137342e302f32342d3234203d3e203233363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:ff:81:4b:c5:15:9c:fe:c5:85:86:3a:95:bf:ab:fc:e2:12:
         d0:14:6b:9c:1f:67:8e:c0:c5:bf:1b:2e:79:e7:b4:e9:c1:fa:
         2c:b3:8d:f3:e2:8b:ad:cb:8c:7a:a6:f9:0a:6d:54:5c:0a:1c:
         12:f9:11:35:b4:e2:71:97:63:fa:7e:16:54:90:2a:38:06:70:
         68:4e:98:34:93:5d:3e:e8:5b:da:c0:6a:04:0b:98:52:a4:36:
         fa:30:ad:31:3d:2c:a6:69:43:8b:5d:57:80:48:3e:64:27:3d:
         68:df:06:0e:51:60:60:5a:64:bd:e3:87:83:83:be:cc:3a:f8:
         7f:44:61:5c:56:2b:27:22:08:1b:9a:95:00:47:77:79:48:1b:
         d0:5a:45:cd:f9:f4:5f:94:1d:42:a0:56:00:7e:ee:e3:e1:26:
         d2:a7:01:5e:c7:95:0b:07:b3:22:cd:41:3b:42:a2:0f:e4:c3:
         8e:20:5d:15:1e:e6:fd:65:bd:a0:66:11:10:83:58:07:fc:5f:
         60:b1:05:9d:59:25:59:52:71:c5:e9:01:9c:f7:0f:9f:27:53:
         36:44:04:ca:2c:d0:c5:b8:49:0e:fe:03:3e:7d:c4:18:56:dd:
         5e:c6:64:56:0d:66:75:21:6a:b6:af:9c:be:4e:b2:7a:e4:13:
         4b:90:ab:13
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTDWRVm/mIpXFra8eMw1k0bD6bYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEy
MTg4ODY2RjAeFw0yNDA1MjgwMjA4MDRaFw0yNTA1MjcwMjEzMDRaMDMxMTAvBgNV
BAMTKDFCQjUxNkFBNTI5N0VBOEYyNzI2Mzg4NzJFRDY4QjMzNUE1MzkxQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDWTxpWgWQzzdvx0Ougvhg5hrt
eyKjJ7ONBSzkmLisLj+p12aph25auHZkOHxHal/gzsB1UUPQx/2NbF7nQNTak/L6
7lLCIibRyf25PhC0E20WoDvB5PEFg3JHW8WPvpa/k2Y+vjW2hCnJaYCegb+YHWSc
rKq5KBhs/8FbrQ00Zi++g1jsaSe7MVnrv4V+oEXHOc7KyWtCEWz8/QHuEI+ueWl2
MIbX6NayHCemeMNirgzlcJMEFRC4p0MCLVrHUgfXT2XjqzygTE5b/vSdvIEqsvjf
stvg59RY1HY/THVvwlj7FsM2qApPEH7k4jLetgjEqgaHyzH9LEOiZsiGz6RhAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUG7UWqlKX6o8nJjiHLtaLM1pTkbwwHwYDVR0j
BBgwFoAUR2YdxCorzFvO7nOsirpxsSGIhm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZDliYTk1My04NDg5LTQ1MGUtYmJkZi03NjQ1NzFmYmFjZTcvMC80NzY2MURDNDJB
MkJDQzVCQ0VFRTczQUM4QUJBNzFCMTIxODg4NjZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEyMTg4
ODY2Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkOWJhOTUzLTg0ODktNDUwZS1i
YmRmLTc2NDU3MWZiYWNlNy8wLzMxMzEzMTJlMzkzMjJlMzEzNzM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG9crjANBgkqhkiG
9w0BAQsFAAOCAQEAbP+BS8UVnP7FhYY6lb+r/OIS0BRrnB9njsDFvxsueee06cH6
LLON8+KLrcuMeqb5Cm1UXAocEvkRNbTicZdj+n4WVJAqOAZwaE6YNJNdPuhb2sBq
BAuYUqQ2+jCtMT0spmlDi11XgEg+ZCc9aN8GDlFgYFpkveOHg4O+zDr4f0RhXFYr
JyIIG5qVAEd3eUgb0FpFzfn0X5QdQqBWAH7u4+Em0qcBXseVCwezIs1BO0KiD+TD
jiBdFR7m/WW9oGYREINYB/xfYLEFnVklWVJxxekBnPcPnydTNkQEyizQxbhJDv4D
Pn3EGFbdXsZkVg1mdSFqtq+cvk6yeuQTS5CrEw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org