Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e38382e302f32342d3234203d3e203338313635.roa
File:                     3131342e33302e38382e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          /DeSNlQEAUW1kobIRtwfjhrxVyeJgkvxM+gUPJFBktM=
Subject key identifier:   BB:04:97:A8:4C:DC:AE:0D:D3:0E:5D:7B:C2:76:FF:54:3E:6D:A1:AE
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       7DFB42C74145180998A1D5EED4B0FDFEE7DFB252
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e38382e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 26 Feb 2024 01:54:18 +0000
ROA not before:           Mon 26 Feb 2024 01:49:18 +0000
ROA not after:            Mon 24 Feb 2025 01:54:18 +0000
asID:                     38165
IP address blocks:        114.30.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:fb:42:c7:41:45:18:09:98:a1:d5:ee:d4:b0:fd:fe:e7:df:b2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Feb 26 01:49:18 2024 GMT
            Not After : Feb 24 01:54:18 2025 GMT
        Subject: CN=BB0497A84CDCAE0DD30E5D7BC276FF543E6DA1AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:47:9f:e1:77:d6:23:f0:76:18:59:40:95:f8:
                    6c:c7:ff:d8:d5:df:33:80:e5:47:e9:60:ec:0a:e0:
                    f5:66:ba:8b:46:a6:a2:ef:bd:11:4d:f7:db:79:90:
                    0b:dc:7e:a7:b7:81:ad:4c:96:10:c8:77:78:8b:7b:
                    31:92:54:c3:46:98:0a:7d:c4:22:fd:91:92:d9:c7:
                    d2:42:f9:f4:e7:30:2f:e7:d9:32:85:0e:47:f7:c7:
                    13:8d:7f:7f:ac:7d:60:07:e3:38:4b:86:96:c2:92:
                    79:d8:86:4c:44:cf:a1:63:f9:53:28:1c:af:f6:6d:
                    b3:c8:ba:0b:b3:53:da:2a:5a:8f:9c:39:f9:3d:b6:
                    6a:aa:82:dc:63:44:32:af:d1:da:a7:63:c0:43:86:
                    7d:9a:d3:9a:58:68:41:1e:a8:cf:e3:14:ee:85:2d:
                    de:a8:16:f8:ef:7f:d1:c5:fe:ca:92:52:28:71:f8:
                    40:fd:67:a8:8c:52:5d:b0:b6:e1:92:52:2e:3c:92:
                    82:c4:62:7c:2f:73:20:27:28:03:a6:e7:c4:92:88:
                    8d:1b:8a:a1:f7:a9:83:6b:ba:73:9c:e4:a2:86:2b:
                    f4:bb:fe:e9:be:ae:ab:5d:5b:b0:a0:3c:06:9a:95:
                    78:3f:70:13:7c:f9:59:03:0e:fd:bb:f6:35:1d:8c:
                    77:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:04:97:A8:4C:DC:AE:0D:D3:0E:5D:7B:C2:76:FF:54:3E:6D:A1:AE
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e38382e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.30.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:71:30:c0:45:97:61:00:a0:ed:38:ff:bd:65:bd:15:9a:3a:
         37:3e:35:e7:85:52:5c:92:20:f0:8c:ec:01:ff:fc:21:ed:a8:
         fc:93:8e:58:05:a1:5a:c5:d3:ba:04:3c:71:5f:17:96:b0:cf:
         d4:00:a5:42:22:3a:f0:3d:d0:5e:d7:04:58:3f:fc:cd:58:1e:
         a4:2d:6d:95:00:da:b4:07:40:6c:05:f3:4f:07:d0:00:7b:79:
         18:cb:2a:94:2a:5f:9d:b8:30:9d:9e:70:70:24:0f:b8:ee:5c:
         c2:f6:ed:d3:6f:1d:13:7a:cf:60:87:78:16:dd:f6:1c:b2:8e:
         96:92:b4:26:2d:ca:65:c2:2b:3c:ab:a3:ca:0e:61:db:e7:2e:
         36:41:7a:cd:bb:52:07:f8:9c:86:8f:11:43:3c:62:3f:41:e7:
         f7:9a:18:b5:14:7c:92:8c:24:80:36:08:03:e3:56:df:80:0e:
         da:47:9e:8c:e2:30:b6:85:f1:62:a8:36:bf:f6:be:4d:53:c0:
         08:26:be:4d:d7:0e:22:dd:16:0c:5d:ba:a7:40:ff:8f:59:79:
         14:6f:a3:2d:fe:10:12:90:fe:d0:3b:61:6e:83:c9:fb:dd:e2:
         3d:69:fd:2f:3a:7d:ac:7a:4c:3c:46:c9:b7:27:36:fe:c6:b8:
         c2:53:33:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org