Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3134302e3231332e3139362e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3139362e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          Boha9fOQEi+SE+T8FIYRwsmF7dgkt+qOW7baBvqms9k=
Subject key identifier:   AA:16:1B:63:18:0A:5D:1A:80:15:68:B0:B2:80:68:D5:D9:98:B8:AE
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       6ECF75CF2B4662DBB009DB872B0B5E5EE593E1F7
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3134302e3231332e3139362e302f32342d3234203d3e20313339393934.roa
Signing time:             Sun 27 Aug 2023 05:00:00 +0000
ROA not before:           Sun 27 Aug 2023 04:55:00 +0000
ROA not after:            Sun 25 Aug 2024 05:00:00 +0000
asID:                     139994
IP address blocks:        140.213.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 00:10:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cf:75:cf:2b:46:62:db:b0:09:db:87:2b:0b:5e:5e:e5:93:e1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Aug 27 04:55:00 2023 GMT
            Not After : Aug 25 05:00:00 2024 GMT
        Subject: CN=AA161B63180A5D1A801568B0B28068D5D998B8AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:ed:ae:6b:bf:df:17:a1:36:57:37:45:90:
                    4c:b6:dc:0d:32:fa:8d:7b:3f:49:70:8a:5e:13:bc:
                    57:e7:e8:18:18:45:93:96:6f:9d:53:69:4b:a2:41:
                    b8:3a:bc:a1:26:3a:0c:e0:26:91:6c:bd:cf:7c:db:
                    df:a3:7a:56:f6:f6:96:8b:33:4d:0a:43:a0:cc:9b:
                    9f:f1:2f:8c:d4:92:38:14:0e:88:84:0f:ba:c9:77:
                    e6:4d:2d:e2:1c:5c:b5:b4:4f:1f:5f:67:c0:e2:2c:
                    45:a7:82:3c:26:f9:38:d5:a0:65:64:8b:f8:59:3a:
                    f5:d3:8b:9b:14:2a:cb:11:38:bc:e7:fa:68:1d:4d:
                    b7:23:13:07:f6:d9:1e:73:7c:cc:54:03:89:92:96:
                    de:26:a0:57:02:50:60:3b:74:cc:e8:e5:9e:c2:fa:
                    70:8d:41:d9:9e:97:a8:d7:f2:d8:b7:67:40:a9:da:
                    e7:1d:26:11:a1:fb:fc:ae:71:56:1c:03:37:90:d9:
                    36:6c:db:14:6d:54:af:82:af:56:95:5b:32:31:c3:
                    b9:9b:a7:08:9b:4a:16:35:3e:02:75:90:8c:13:7e:
                    d2:48:3b:db:68:48:1f:a2:8e:d9:5c:48:50:4a:fc:
                    d4:4c:63:67:72:65:7e:bb:d5:c0:e0:3b:35:2e:4f:
                    9a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:16:1B:63:18:0A:5D:1A:80:15:68:B0:B2:80:68:D5:D9:98:B8:AE
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3134302e3231332e3139362e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:a1:8e:28:38:d5:26:96:4c:cb:e5:0d:c1:90:b3:b1:df:a2:
         f2:4c:72:2f:48:af:80:c0:73:50:1e:29:95:40:ef:47:99:70:
         e7:41:2c:01:7c:b7:2c:bb:b2:ad:56:0c:39:07:21:50:6b:54:
         fc:b3:db:ea:6a:aa:c9:97:9f:52:0b:87:16:f1:31:c3:d3:95:
         f4:c9:3d:a7:03:4b:9f:7d:14:26:ac:b1:04:04:8e:22:ea:82:
         da:40:ae:78:1b:d2:17:fa:a8:04:a5:a1:a8:41:d6:8a:33:3a:
         ea:f0:52:50:71:7a:0f:06:26:97:94:a4:7c:17:17:74:a5:84:
         3b:c8:09:35:34:49:eb:6c:36:75:33:d6:3d:88:b8:e7:1f:5e:
         7c:e3:ed:43:7e:88:1f:78:39:97:d8:21:6b:77:8a:22:c6:7b:
         af:0d:a8:16:9f:a8:01:9c:73:35:2f:fb:b9:83:d4:19:9b:9f:
         f5:75:be:5b:26:29:cc:5d:ce:b0:a9:34:ff:60:67:56:7a:56:
         44:22:63:db:e7:fa:c1:64:3b:8b:a7:83:9e:28:6b:c0:be:0a:
         27:d9:5f:12:39:dd:44:09:42:eb:e7:2d:7b:33:23:72:88:e6:
         fc:a7:e0:cc:32:51:dd:3b:82:e6:03:42:b5:f3:ad:69:07:e7:
         fb:60:79:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 16:09:55 2024 by rpki-client on console-fra.rpki-client.org