Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39332e302f32342d3234203d3e203338313635.roa
File:                     3131342e33302e39332e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          C/i5sg1GsZw3O2Mcf7ZQcYjIkCXCgAj66xYAVapSWTw=
Subject key identifier:   7F:A8:BB:83:CA:6A:DC:23:BC:C1:C6:3A:8D:0D:BF:30:60:C9:38:84
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       302EF50F44BD7FA93F45D6C7F8479B1D07D61C60
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39332e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 26 Feb 2024 01:55:46 +0000
ROA not before:           Mon 26 Feb 2024 01:50:46 +0000
ROA not after:            Mon 24 Feb 2025 01:55:46 +0000
asID:                     38165
IP address blocks:        114.30.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2e:f5:0f:44:bd:7f:a9:3f:45:d6:c7:f8:47:9b:1d:07:d6:1c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Feb 26 01:50:46 2024 GMT
            Not After : Feb 24 01:55:46 2025 GMT
        Subject: CN=7FA8BB83CA6ADC23BCC1C63A8D0DBF3060C93884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dc:d8:70:c5:eb:43:d3:ba:f8:be:1a:f5:b9:
                    8e:f3:a2:7c:89:b5:39:cb:ee:d6:54:fd:6f:8c:4d:
                    6d:05:c2:de:ac:da:72:8c:fe:03:0d:93:c3:1c:80:
                    9f:20:d8:06:a6:b0:a6:be:21:1b:c5:0e:7d:ed:3b:
                    66:18:51:03:f7:53:10:16:c4:b2:b0:0c:ce:f3:f4:
                    3d:d3:70:97:c8:93:f4:cf:65:61:ca:64:ec:2c:7e:
                    42:3a:52:9c:e8:8e:72:f5:92:09:af:6f:9c:02:33:
                    e6:74:7a:a8:01:84:d0:3a:46:d4:c9:e1:c7:6f:5b:
                    82:57:d5:32:b8:b8:d7:36:fc:f1:93:ea:ff:a8:0e:
                    3d:bf:05:9c:32:45:28:4d:a6:aa:2c:c5:13:f7:49:
                    09:be:62:7a:9e:1b:01:d5:27:55:ea:1c:ca:31:19:
                    11:8f:08:34:ff:c2:61:2e:b2:36:9b:d1:fd:ff:c9:
                    49:7f:0b:96:f8:08:6e:89:48:21:78:3f:e4:f9:8f:
                    e2:a2:85:6d:14:e5:b6:11:5d:a2:4b:75:12:2c:00:
                    87:e8:d9:93:af:c9:53:a2:cf:04:07:8a:9f:71:a9:
                    f2:aa:9d:64:8a:06:af:e3:d1:a8:8c:09:f1:df:43:
                    ed:c9:a5:ef:54:55:b7:a0:40:b2:6f:59:8b:f5:b4:
                    aa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A8:BB:83:CA:6A:DC:23:BC:C1:C6:3A:8D:0D:BF:30:60:C9:38:84
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39332e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.30.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:36:0f:04:21:8e:f3:ea:5f:f8:b6:27:f8:31:9c:9d:e4:51:
         a5:85:03:7d:39:eb:47:d0:b6:14:a0:28:77:80:fe:46:a9:1f:
         f4:91:8f:30:91:ee:6f:4a:02:b2:26:c5:86:4e:1a:b2:f0:21:
         2a:52:a7:e1:77:62:8c:64:84:7c:28:c1:de:a0:d2:c8:e9:76:
         f3:45:6a:fd:00:e1:9c:2c:c3:e9:1f:3d:be:ed:54:16:d1:a0:
         7c:37:aa:97:76:ab:31:7f:dc:ef:89:f1:70:3b:24:18:f5:2b:
         b8:08:8c:53:e5:01:af:8f:a7:97:f7:1c:bd:d0:00:ef:21:5f:
         35:2d:62:fe:a2:7b:8e:f5:c7:1d:30:b9:61:bd:c7:72:78:71:
         60:3f:9d:d5:51:18:d0:25:36:e1:7e:56:a0:86:3f:ca:a2:a0:
         d1:77:df:18:bb:7c:50:7b:e4:7c:3b:87:72:f4:c6:6a:4c:88:
         18:4b:70:5c:eb:6e:b2:08:28:68:f4:52:31:e8:0e:2b:7b:54:
         81:d2:73:ef:00:df:cb:83:43:db:a5:6b:69:3c:2c:35:a9:14:
         a9:3d:49:71:3e:89:10:db:a9:2e:35:35:91:28:7f:d0:12:29:
         b8:9c:40:cf:77:25:cf:dd:7b:96:f0:3f:8d:4a:71:22:75:95:
         95:b6:23:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org