Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136392e302f32342d3234203d3e203536323436.roa
File:                     3131362e36382e3136392e302f32342d3234203d3e203536323436.roa (raw, json)
Hash identifier:          wDw9gcGI1FgUjeZkhCjepzk8IMi5fTNwwrAA7htMJ+A=
Subject key identifier:   CF:37:69:06:C2:35:45:45:5A:C1:7E:B4:09:40:8D:B4:17:37:72:33
Certificate issuer:       /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
Certificate serial:       265FC03E368FBD626D2B2F5BE08C27ABF0CEC774
Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136392e302f32342d3234203d3e203536323436.roa
Signing time:             Mon 31 Jul 2023 00:03:56 +0000
ROA not before:           Sun 30 Jul 2023 23:58:56 +0000
ROA not after:            Mon 29 Jul 2024 00:03:56 +0000
asID:                     56246
IP address blocks:        116.68.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl
                          rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Mar 2024 18:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5f:c0:3e:36:8f:bd:62:6d:2b:2f:5b:e0:8c:27:ab:f0:ce:c7:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
        Validity
            Not Before: Jul 30 23:58:56 2023 GMT
            Not After : Jul 29 00:03:56 2024 GMT
        Subject: CN=CF376906C23545455AC17EB409408DB417377233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:96:2a:76:8e:b2:e0:1c:ea:15:6b:50:76:05:
                    f2:a2:74:45:86:7e:ad:4a:05:a2:89:26:23:57:15:
                    19:c2:6d:ea:70:19:10:ba:7d:4f:0b:c0:71:5e:91:
                    97:05:3c:93:1b:ff:06:09:78:bc:bb:ad:fb:a9:4d:
                    d3:1a:46:67:d0:db:94:d8:ac:6d:3e:06:99:63:75:
                    e5:d1:dd:19:b5:ae:e5:aa:5b:68:9c:43:c9:65:d9:
                    54:6b:52:10:b3:14:bd:d2:e8:ec:9e:d3:7a:45:20:
                    a5:9d:c3:f9:2b:65:65:dd:b4:52:e1:64:e6:3f:79:
                    1a:7e:6e:70:13:8a:f7:7f:da:13:28:ca:f4:7e:39:
                    3e:27:a1:4a:8c:e4:bb:0e:05:e7:23:83:05:c6:de:
                    33:0b:09:9a:3c:e6:89:d4:51:78:63:ea:18:d8:00:
                    b3:d4:97:e1:bd:f6:d6:29:7b:14:7e:de:d1:08:7b:
                    c5:51:0c:57:6f:7c:85:9d:57:b6:c1:d1:fa:b9:89:
                    d6:95:b2:04:75:59:41:66:ec:c2:4a:6b:c5:e9:57:
                    65:12:90:95:87:32:9d:51:e8:74:55:3a:1b:0f:f4:
                    88:d7:43:67:30:14:25:dc:63:7f:b1:0e:e0:92:73:
                    f4:5d:92:04:77:a2:01:ac:8c:3a:f9:b0:b6:c2:df:
                    c5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:37:69:06:C2:35:45:45:5A:C1:7E:B4:09:40:8D:B4:17:37:72:33
            X509v3 Authority Key Identifier:
                keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136392e302f32342d3234203d3e203536323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:13:e3:25:ef:58:64:a4:9f:56:16:f9:73:bf:43:e6:7c:a6:
         c0:6d:cb:28:18:0b:12:f9:09:f7:a4:57:e5:15:60:36:9d:48:
         58:9f:9e:ff:49:3c:89:86:ce:b0:48:b9:aa:40:e7:f6:7a:a7:
         da:6e:27:46:3e:f1:2e:ec:bf:be:0a:be:7d:57:57:d6:78:39:
         d9:c2:d6:63:55:46:47:0d:11:a5:4c:ce:ca:22:a7:ce:7e:77:
         04:cb:2b:e8:1d:ed:ff:7c:a2:28:b9:83:4d:ce:f2:96:a4:40:
         a1:cc:65:e1:01:dd:0b:5b:97:2d:6f:50:79:a2:e3:0b:77:ff:
         15:9a:ec:1d:53:1b:49:6b:27:fb:da:99:0b:66:87:2f:c1:d3:
         05:24:eb:41:2f:cd:7d:75:64:f4:38:b8:67:63:e7:06:09:db:
         ea:1c:45:3e:2d:2b:2e:60:cd:75:2c:8c:aa:62:d8:99:e6:48:
         b6:74:47:a6:20:1d:c9:dc:9d:68:e1:f5:5e:8d:7b:a6:77:48:
         eb:e7:e6:37:6b:0b:f4:df:67:4b:8c:1e:09:02:cf:5e:4a:d3:
         b4:92:9b:cc:8d:1e:67:6e:3c:5f:92:ac:1d:1d:e7:d0:fd:eb:
         1c:20:f4:b8:87:fb:5e:54:e1:8a:15:3d:f4:91:04:63:27:d0:
         0d:35:af:39
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJl/APjaPvWJtKy9b4Iwnq/DOx3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF
NEQ1RkRFNjAeFw0yMzA3MzAyMzU4NTZaFw0yNDA3MjkwMDAzNTZaMDMxMTAvBgNV
BAMTKENGMzc2OTA2QzIzNTQ1NDU1QUMxN0VCNDA5NDA4REI0MTczNzcyMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCllip2jrLgHOoVa1B2BfKidEWG
fq1KBaKJJiNXFRnCbepwGRC6fU8LwHFekZcFPJMb/wYJeLy7rfupTdMaRmfQ25TY
rG0+BpljdeXR3Rm1ruWqW2icQ8ll2VRrUhCzFL3S6Oye03pFIKWdw/krZWXdtFLh
ZOY/eRp+bnATivd/2hMoyvR+OT4noUqM5LsOBecjgwXG3jMLCZo85onUUXhj6hjY
ALPUl+G99tYpexR+3tEIe8VRDFdvfIWdV7bB0fq5idaVsgR1WUFm7MJKa8XpV2US
kJWHMp1R6HRVOhsP9IjXQ2cwFCXcY3+xDuCSc/RdkgR3ogGsjDr5sLbC38VPAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUzzdpBsI1RUVawX60CUCNtBc3cjMwHwYDVR0j
BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx
NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1
RkRFNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05
NGE2LTc5M2JkYmRhMzc3Ny8wLzMxMzEzNjJlMzYzODJlMzEzNjM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHREqTANBgkqhkiG
9w0BAQsFAAOCAQEAJhPjJe9YZKSfVhb5c79D5nymwG3LKBgLEvkJ96RX5RVgNp1I
WJ+e/0k8iYbOsEi5qkDn9nqn2m4nRj7xLuy/vgq+fVdX1ng52cLWY1VGRw0RpUzO
yiKnzn53BMsr6B3t/3yiKLmDTc7ylqRAocxl4QHdC1uXLW9QeaLjC3f/FZrsHVMb
SWsn+9qZC2aHL8HTBSTrQS/NfXVk9Di4Z2PnBgnb6hxFPi0rLmDNdSyMqmLYmeZI
tnRHpiAdydydaOH1Xo17pndI6+fmN2sL9N9nS4weCQLPXkrTtJKbzI0eZ248X5Ks
HR3n0P3rHCD0uIf7XlThihU99JEEYyfQDTWvOQ==
-----END CERTIFICATE-----
Generated at Wed Mar 27 15:54:32 2024 by rpki-client on console-fra.rpki-client.org