Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa
File:                     3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (raw, json)
Hash identifier:          /wi/ULAWa6WjqplHVfbKjvKt0tgAIhy4Y28PJh2tQcU=
Subject key identifier:   06:01:BD:B8:49:B1:14:9D:43:68:73:07:7F:0D:F2:3C:4C:88:31:5F
Certificate issuer:       /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
Certificate serial:       6D68B4A7B71DB0C2495AB326D1781BC86CC2AB13
Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa
Signing time:             Mon 18 Dec 2023 19:00:02 +0000
ROA not before:           Mon 18 Dec 2023 18:55:02 +0000
ROA not after:            Mon 16 Dec 2024 19:00:02 +0000
asID:                     131691
IP address blocks:        116.213.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl
                          rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 07:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:68:b4:a7:b7:1d:b0:c2:49:5a:b3:26:d1:78:1b:c8:6c:c2:ab:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
        Validity
            Not Before: Dec 18 18:55:02 2023 GMT
            Not After : Dec 16 19:00:02 2024 GMT
        Subject: CN=0601BDB849B1149D436873077F0DF23C4C88315F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c7:2e:2c:e1:62:2e:f1:b0:68:77:d6:4b:4c:
                    7e:f5:a5:f2:d5:04:94:a8:d5:a7:ec:07:16:5d:70:
                    21:db:89:9c:c8:e8:d7:c0:b3:76:aa:92:1c:6b:9e:
                    a2:0d:2a:2a:9b:55:68:83:c5:e5:0a:ae:f2:36:97:
                    3f:91:02:33:34:61:6e:2e:51:30:78:eb:e4:09:7e:
                    5a:e3:33:66:d6:11:31:87:d5:75:76:d3:a0:f9:59:
                    4a:18:90:eb:e5:01:1c:ac:93:87:58:d7:58:c7:0f:
                    b3:f8:44:22:c3:81:a0:71:8f:1c:2c:d2:25:0d:32:
                    09:2f:8a:0a:a2:a9:5c:85:1c:9f:f9:e2:c8:4b:20:
                    d2:8a:7f:e3:d2:2c:38:ad:7f:59:53:9e:59:0c:4d:
                    88:fb:1d:ff:50:47:71:48:61:98:a5:d3:a6:be:87:
                    34:35:f2:f6:3e:c5:59:71:38:ca:00:33:43:cd:c1:
                    b9:40:e9:bf:f6:e4:b7:58:5b:6d:b1:81:93:40:fa:
                    ff:fa:59:2a:9d:57:0f:d7:d0:8c:6a:98:79:0e:77:
                    4c:aa:de:d0:37:c6:af:b1:da:4b:78:f8:b2:aa:b4:
                    55:b4:a6:fe:4c:31:f9:b1:56:71:30:f0:27:87:b5:
                    7b:9f:1f:32:7c:67:a4:3b:51:21:30:6c:44:10:ad:
                    f6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:01:BD:B8:49:B1:14:9D:43:68:73:07:7F:0D:F2:3C:4C:88:31:5F
            X509v3 Authority Key Identifier:
                keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.213.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:4a:25:05:05:26:90:df:87:90:82:e7:05:9f:eb:36:bc:ff:
         fb:8c:df:4a:2a:f2:60:fb:4d:fb:aa:41:cb:09:c4:51:34:c6:
         ad:82:81:69:a6:ec:9b:42:f0:56:61:97:07:42:43:d5:e2:30:
         1e:5a:0c:0a:54:82:01:04:73:4a:c5:08:f8:1e:df:fa:56:66:
         7e:b2:cf:73:71:e3:27:fc:94:15:57:1f:98:3e:1c:b6:7e:9c:
         ce:73:8e:b7:f7:9d:60:1c:55:94:19:aa:79:59:83:31:f0:e7:
         a1:9c:a4:0c:61:ec:35:1c:8b:ca:89:11:b9:d3:50:ef:42:4e:
         6d:af:ac:23:94:47:e7:b7:9c:67:15:c0:b3:58:3b:53:31:2f:
         e7:98:c5:dc:08:8a:84:fb:94:f4:09:cb:ea:34:56:29:cd:a3:
         24:6a:e2:f8:ef:6d:b4:72:fc:ea:5b:11:4f:91:fd:49:cc:c6:
         91:42:a3:ce:6a:a0:47:3f:9e:17:99:31:66:2e:f9:1d:3b:f2:
         00:7c:6d:5c:8f:d3:5a:12:5a:6d:02:6e:0f:b0:1f:fc:dd:81:
         70:b0:7f:b3:1c:a8:20:18:d1:f6:18:cc:98:be:5f:be:cd:b5:
         19:84:04:97:cb:2e:40:f6:cc:8f:82:e2:8d:7f:bb:27:d3:ef:
         cd:12:40:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 00:23:00 2024 by rpki-client on console-fra.rpki-client.org