Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136302e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3136302e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          Q9+hOSqhri1rTtNprhG2HSLSeoqAzV0T9P0S5F4Eo/s=
Subject key identifier:   6D:F6:27:1E:27:B6:F4:02:A8:E3:69:C3:BD:5F:17:42:D7:FD:19:E5
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       22A077FE07C66CC3CD3435B523588F23E367F771
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136302e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:03:07 +0000
ROA not before:           Fri 24 Nov 2023 02:58:07 +0000
ROA not after:            Fri 22 Nov 2024 03:03:07 +0000
asID:                     18059
IP address blocks:        116.90.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a0:77:fe:07:c6:6c:c3:cd:34:35:b5:23:58:8f:23:e3:67:f7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 02:58:07 2023 GMT
            Not After : Nov 22 03:03:07 2024 GMT
        Subject: CN=6DF6271E27B6F402A8E369C3BD5F1742D7FD19E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:20:dd:95:f9:ec:1e:9d:8e:27:59:e2:88:12:
                    3b:ee:c4:40:70:0a:c4:ce:dc:fb:ae:c9:a6:bf:9e:
                    48:d7:a2:14:1f:ff:a6:6b:9a:4b:ab:85:ed:7b:a3:
                    c6:4e:f0:ea:d6:32:35:0f:c0:a0:e9:a4:68:a4:a6:
                    37:56:66:75:66:29:04:ff:a2:77:14:36:b0:fa:b9:
                    7e:95:c0:52:36:45:11:5d:2e:1a:ff:d7:b1:dd:a7:
                    5a:ae:f7:0b:f9:de:76:a0:7a:bb:67:a3:77:4c:52:
                    f8:e9:e8:ed:bb:1a:3f:3f:f3:02:e6:9c:e2:44:6d:
                    3c:a2:06:ed:32:09:d6:e7:7b:c0:8a:36:07:41:18:
                    eb:e6:5f:fa:ef:e2:0b:da:27:0d:f0:82:95:8a:bd:
                    22:a7:bd:4d:1a:64:3c:5f:d7:47:90:7c:f2:20:12:
                    73:43:91:32:e0:76:09:e4:a6:cb:c5:7c:72:64:1a:
                    8e:c8:97:d3:8c:b6:38:37:a7:e5:8d:aa:d3:a1:a7:
                    a5:e2:be:1b:b1:26:3a:43:e7:a2:18:ad:aa:36:c8:
                    15:a7:f7:db:4a:f7:26:35:d6:ac:19:98:6b:46:3c:
                    7a:10:d1:04:3b:dd:8e:ee:06:82:83:63:9f:03:2f:
                    54:17:6d:59:56:b0:53:ed:98:36:5f:3b:bc:ad:80:
                    b0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F6:27:1E:27:B6:F4:02:A8:E3:69:C3:BD:5F:17:42:D7:FD:19:E5
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136302e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:3d:c0:da:2a:33:a7:c9:3b:4d:3f:24:eb:15:37:dd:f4:54:
         61:fd:e1:cc:1e:de:0f:4e:68:72:79:ea:28:b6:03:c8:ec:f0:
         ab:97:54:74:85:ce:be:77:2d:04:2d:c9:4f:e4:5c:97:bf:f9:
         ee:db:01:5d:fa:37:77:6b:87:75:8f:fb:ed:2e:3c:92:0b:f4:
         1a:f8:3a:82:92:48:30:24:2c:6f:1e:bd:15:5b:fb:48:82:d2:
         82:cf:75:c6:40:4a:41:a4:e2:f7:09:b5:72:da:11:c7:07:de:
         ce:f7:a1:55:79:d9:65:c0:96:00:aa:ec:7f:48:96:42:0e:da:
         44:bc:e2:98:d0:8f:aa:38:86:bd:13:64:26:7a:8c:34:2b:d7:
         e1:ac:ec:79:8d:23:4e:57:ce:ae:92:c2:40:d6:5b:f5:0f:04:
         37:74:ee:e0:7b:95:5c:70:90:cd:4e:cf:95:cf:0e:01:7a:e7:
         1a:2e:0f:35:6f:21:54:c0:68:ae:73:0e:e7:24:5b:82:c8:39:
         0c:f4:c1:62:36:12:2a:d3:48:b4:c8:60:a2:7a:85:14:a7:9f:
         b8:df:de:e6:c7:93:bc:72:ca:10:b7:67:36:e3:b6:9c:08:e2:
         4e:96:a5:51:88:9b:67:0f:e9:d3:04:c5:04:5a:d0:b3:c6:ce:
         06:dc:62:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:54 2024 by rpki-client on console-fra.rpki-client.org