Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39342e302f32342d3234203d3e203338313635.roa
File:                     3131342e33302e39342e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          BQ2fa3tRJqarlHgYruw+A6R9wXvh6pTHkcR6lilGkLA=
Subject key identifier:   B4:E2:20:EF:03:7B:E2:FC:CC:04:88:35:83:22:D0:B8:A9:CC:79:20
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       2C5656A6BB3611D48406B1160405459D131D1A0B
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39342e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 26 Feb 2024 01:56:32 +0000
ROA not before:           Mon 26 Feb 2024 01:51:32 +0000
ROA not after:            Mon 24 Feb 2025 01:56:32 +0000
asID:                     38165
IP address blocks:        114.30.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:56:56:a6:bb:36:11:d4:84:06:b1:16:04:05:45:9d:13:1d:1a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Feb 26 01:51:32 2024 GMT
            Not After : Feb 24 01:56:32 2025 GMT
        Subject: CN=B4E220EF037BE2FCCC0488358322D0B8A9CC7920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0a:86:29:d5:48:65:d8:16:20:f9:57:5f:93:
                    a4:8c:50:d8:f4:0f:fc:c1:84:1f:9c:e6:71:2c:1c:
                    d2:27:e9:1a:71:d7:2f:d4:2c:a9:c6:42:4a:98:82:
                    60:f6:04:a4:cc:ca:3c:fd:4e:21:45:25:e8:e5:3f:
                    2e:9c:4a:5d:cf:88:21:b7:d2:1f:7c:36:02:3f:35:
                    eb:27:c8:d7:92:64:27:50:f6:b6:07:9d:35:d4:5d:
                    0e:34:06:3d:27:69:b2:b6:f5:19:24:d2:0a:58:18:
                    e5:34:c7:a6:c9:3e:a8:f4:99:cc:b5:7c:48:f9:2b:
                    b4:32:c8:bc:89:a5:e5:d2:35:95:95:e6:cd:af:ad:
                    c7:b8:28:d8:c0:c8:b0:24:1f:07:2f:37:c1:75:b7:
                    17:90:45:86:f8:79:56:5a:ab:cd:71:f5:2a:66:b0:
                    e9:c2:b6:16:be:7c:68:9b:70:7c:45:24:c7:d4:7a:
                    91:95:c0:61:a7:1a:fa:5f:5c:57:ba:d1:d2:4e:f3:
                    53:16:c7:ac:25:02:9a:58:8e:32:17:a3:c4:55:76:
                    5d:de:89:75:9e:f3:2e:7a:56:fa:1f:80:81:61:c4:
                    5d:98:54:42:34:92:d2:5d:30:b0:a1:a1:d2:9d:43:
                    17:02:9e:f7:21:8f:59:5b:c1:d9:4f:32:07:db:41:
                    bb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E2:20:EF:03:7B:E2:FC:CC:04:88:35:83:22:D0:B8:A9:CC:79:20
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39342e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.30.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:53:7c:67:87:d9:8e:45:8a:29:44:21:5a:46:12:3b:fd:7d:
         dc:07:a6:63:4f:06:c2:99:61:ca:70:95:d0:5f:55:87:3d:31:
         7d:ab:2a:af:8e:c9:b2:49:43:23:c6:2c:2b:24:5f:65:2a:e6:
         c0:04:a8:80:1d:47:9b:64:52:56:4c:1f:f2:9c:2a:ae:89:92:
         4d:0d:8d:de:91:70:92:ea:4c:ed:eb:5d:d6:76:24:90:e7:d7:
         d6:20:b3:2e:e6:60:bc:17:7f:ca:15:ed:e7:64:f2:30:08:e3:
         c5:53:e0:cb:6e:71:25:8d:ea:42:5d:9f:b4:18:ca:24:0e:92:
         2e:3b:a3:54:3a:f5:e1:b2:3c:d4:3a:ec:b2:28:18:9c:5c:6e:
         dc:80:14:3e:16:2f:3c:e8:34:d1:18:41:aa:47:0d:40:8e:dc:
         2d:01:f7:c8:bc:97:56:a0:7a:4a:1b:a6:61:22:7f:7e:76:c0:
         4c:bb:23:d4:8c:41:5f:4e:66:ed:ef:63:f6:b1:78:0f:4c:d8:
         44:24:6e:5c:30:78:49:c8:90:1f:35:6b:65:35:8b:40:e5:b4:
         de:77:2b:af:a7:22:04:58:ee:b9:b5:49:14:c7:5a:a7:f3:5a:
         bf:de:1d:5c:8e:6c:d2:11:55:68:6f:ea:5a:78:45:fb:19:45:
         2b:dc:a6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org