Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136342e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3136342e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          h8G1sFAhSXS6x3luevm5PS+FaL5BWjilpyz6dcJ02mo=
Subject key identifier:   D6:02:F1:0B:D9:94:98:38:DC:00:73:DC:A7:53:9F:7B:43:1B:7E:6F
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       D729AD3840D55A8ECCDAA14FBF3F0E6BE08FA5
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136342e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:04:13 +0000
ROA not before:           Fri 24 Nov 2023 02:59:13 +0000
ROA not after:            Fri 22 Nov 2024 03:04:13 +0000
asID:                     18059
IP address blocks:        116.90.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d7:29:ad:38:40:d5:5a:8e:cc:da:a1:4f:bf:3f:0e:6b:e0:8f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 02:59:13 2023 GMT
            Not After : Nov 22 03:04:13 2024 GMT
        Subject: CN=D602F10BD9949838DC0073DCA7539F7B431B7E6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9b:5c:72:8d:7f:cd:12:f0:9f:a6:6b:55:cd:
                    e9:28:28:e4:9d:c5:d1:bd:76:6c:9c:9d:7b:ef:36:
                    77:fe:71:22:1e:f9:a8:fd:b1:3b:4a:e4:ce:6a:9e:
                    11:4c:3d:8b:fa:d7:09:4e:c8:cb:30:33:a8:73:a3:
                    a4:8b:ac:30:7e:5d:44:2c:13:32:13:54:cf:88:e5:
                    e2:6a:45:e0:1c:0c:1a:a4:4a:04:6e:c4:a0:b5:7f:
                    dc:ab:ae:fb:00:e1:ba:ce:d0:4b:b0:24:e0:ff:97:
                    d3:80:fb:50:13:6d:1d:5e:96:47:a9:ab:a1:4d:03:
                    3a:ef:fa:98:98:0f:89:c9:71:25:97:fa:b5:0f:cf:
                    72:bb:4c:9a:52:a6:42:71:bd:f5:49:e8:54:40:f4:
                    38:b7:86:2c:ab:7d:20:17:02:a5:55:ed:8d:6f:c8:
                    c7:0f:48:d0:67:45:4d:27:17:36:46:1b:b1:05:ee:
                    dd:ce:78:c6:cb:19:e3:79:05:ee:78:2b:14:d7:87:
                    2a:10:6d:30:8f:d3:e2:a5:15:34:22:f9:5b:4a:f2:
                    df:5c:93:dd:98:9b:08:17:f8:81:af:f4:28:53:09:
                    5c:4c:a9:44:df:b8:34:46:ab:dc:1b:a2:7f:8e:c3:
                    b5:47:8a:8a:6d:95:b1:a4:10:41:33:8c:16:dc:73:
                    27:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:02:F1:0B:D9:94:98:38:DC:00:73:DC:A7:53:9F:7B:43:1B:7E:6F
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136342e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:10:ba:36:55:91:4b:14:cc:45:da:75:47:3c:d7:d7:c7:20:
         c7:29:e4:98:59:0d:5c:da:d8:7b:9e:76:b7:8e:47:16:3b:f6:
         eb:25:ac:58:7a:f0:73:86:8d:8a:e9:15:c7:49:34:a6:31:05:
         f5:28:f0:0b:9a:87:ae:6b:49:81:63:9d:89:4a:cc:a0:4a:2b:
         d9:10:1c:56:34:55:64:fc:7e:de:65:04:72:d5:e7:61:94:13:
         33:bd:40:75:59:4b:5c:80:db:75:0f:c7:b7:9b:08:da:7f:6e:
         d9:17:6c:89:4a:5e:95:e9:75:58:8f:c5:4b:8f:63:cc:13:0f:
         97:d8:fe:ba:76:9d:de:50:8d:7b:9a:08:a1:98:f9:f3:0e:f4:
         49:3a:1a:e1:de:12:90:61:1a:d4:8c:8c:73:5b:df:26:59:dd:
         ce:0d:04:51:47:1f:dd:52:03:79:50:36:3a:47:e2:71:32:09:
         35:b0:8a:e4:1b:ed:3c:e1:3c:87:f7:d8:79:32:20:37:03:10:
         56:e8:0d:dc:9f:9b:57:ac:92:58:28:2f:6a:c0:1c:39:5b:89:
         f2:fe:d7:9d:fa:13:fb:33:ef:b2:1e:c9:5a:6b:bd:92:ca:2e:
         ea:6b:4d:3e:64:2d:62:59:22:62:dc:53:4c:3f:53:57:88:5f:
         f4:4d:97:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:54 2024 by rpki-client on console-fra.rpki-client.org