Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e34382e302f32302d3234203d3e2039373835.roa
File:                     3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (raw, json)
Hash identifier:          fA1rTAXPks6jSArUjCL0qne5dDgcLPYEGfcG0TF+2UE=
Subject key identifier:   FB:99:11:70:3F:03:72:18:17:31:EB:9B:CB:2E:40:B6:A7:61:0F:78
Certificate issuer:       /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
Certificate serial:       5BEBF504D5471403FE5D0E5A30A329A665B4B77E
Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e34382e302f32302d3234203d3e2039373835.roa
Signing time:             Mon 31 Jul 2023 00:13:34 +0000
ROA not before:           Mon 31 Jul 2023 00:08:34 +0000
ROA not after:            Mon 29 Jul 2024 00:13:34 +0000
asID:                     9785
IP address blocks:        116.213.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl
                          rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 10:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:eb:f5:04:d5:47:14:03:fe:5d:0e:5a:30:a3:29:a6:65:b4:b7:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
        Validity
            Not Before: Jul 31 00:08:34 2023 GMT
            Not After : Jul 29 00:13:34 2024 GMT
        Subject: CN=FB9911703F0372181731EB9BCB2E40B6A7610F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:78:4d:50:15:2e:41:8a:95:27:78:8d:24:a6:
                    a3:c4:72:70:c6:46:f3:61:34:e3:7d:07:8a:b7:d7:
                    e6:87:09:05:77:a8:c6:a5:0d:9f:a0:a4:33:a5:b3:
                    6a:47:e4:71:d1:8a:52:ea:77:4a:97:e8:31:84:51:
                    38:70:85:37:a1:b0:97:7b:29:6e:70:19:86:ec:47:
                    6f:85:4c:cb:ca:df:fa:e0:c6:7b:5c:d7:e6:41:74:
                    06:d1:eb:6b:83:2e:e2:a8:99:52:ef:f4:12:49:5d:
                    8a:dd:f4:09:f4:65:5d:34:5d:07:37:7c:84:58:7d:
                    46:58:69:f8:c1:d0:50:82:fe:1c:02:b3:b5:1f:0d:
                    1a:a6:63:2e:7f:f8:5a:cd:52:2d:62:0a:a5:47:79:
                    c8:d9:3c:dc:d7:26:ac:c2:49:1e:fe:62:2e:ec:d4:
                    60:14:cc:00:92:0a:a6:eb:a9:3a:d3:2f:2a:08:bd:
                    a6:76:18:d4:71:e7:60:03:0e:59:94:48:d9:14:36:
                    fe:7a:1a:6a:5e:e0:a5:97:b7:9a:df:77:9d:e9:39:
                    f0:aa:67:8f:3a:37:1f:e3:37:49:50:56:02:93:17:
                    94:3e:1a:a0:da:8b:09:67:0a:53:57:f4:d0:bf:ee:
                    64:11:9f:4d:6b:5c:e3:d7:df:fc:bf:50:f9:12:29:
                    ae:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:99:11:70:3F:03:72:18:17:31:EB:9B:CB:2E:40:B6:A7:61:0F:78
            X509v3 Authority Key Identifier:
                keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e34382e302f32302d3234203d3e2039373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.213.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:a7:a2:95:21:bd:bc:08:ef:68:7e:6f:77:b3:e3:3c:9e:8a:
         25:67:e7:95:67:16:ef:bd:e7:41:f6:34:cc:e6:14:e8:f6:ce:
         71:b7:d7:d8:9e:b3:82:ee:00:94:3a:6b:3c:fa:6e:ee:4a:c4:
         cd:19:ae:38:df:ad:76:df:47:a4:12:6e:29:c7:93:51:6c:39:
         d8:b3:0c:e5:4f:30:36:b1:84:23:89:cc:98:e8:81:d1:f8:55:
         cc:b0:0d:ba:c0:dc:f0:11:2e:e7:dc:65:d7:84:e5:9f:e2:08:
         01:ff:1d:3c:ca:a0:53:e4:60:18:0d:83:23:a9:cc:92:d2:35:
         07:e4:80:7d:69:1f:5b:72:a5:b0:8a:5c:1e:e4:92:23:ee:12:
         a0:57:3c:bc:d5:58:5c:19:94:75:6c:35:5d:f7:00:40:c3:a2:
         7d:a0:3a:98:92:ec:f5:d8:2a:b7:fb:41:e1:3a:57:92:09:cd:
         ea:2a:46:c0:aa:04:fe:c2:fb:0e:b7:d1:8f:84:6e:e4:bb:0c:
         e7:ad:b7:2e:c1:1d:dc:c6:d9:ab:71:e3:40:bd:87:4d:53:01:
         fa:a1:d2:06:26:34:10:3e:8f:33:4d:53:30:b8:4a:91:52:0f:
         e3:6a:1e:ab:4c:33:d6:c1:6e:c8:01:3f:e1:3f:ac:93:36:79:
         51:d3:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 08:43:08 2024 by rpki-client on console-ams.rpki-client.org