Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136352e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3136352e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          RReeuZwXw69uQkJ+1QdgXf1Ks5JReAIRnRw6Spojevw=
Subject key identifier:   90:CE:D1:2F:AD:19:34:5D:33:EB:A1:4B:F1:7E:81:2D:F3:78:0B:24
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       44C2BBA4AA27E57DE762094FAEB1BA55AFC03515
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136352e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:04:24 +0000
ROA not before:           Fri 24 Nov 2023 02:59:24 +0000
ROA not after:            Fri 22 Nov 2024 03:04:24 +0000
asID:                     18059
IP address blocks:        116.90.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c2:bb:a4:aa:27:e5:7d:e7:62:09:4f:ae:b1:ba:55:af:c0:35:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 02:59:24 2023 GMT
            Not After : Nov 22 03:04:24 2024 GMT
        Subject: CN=90CED12FAD19345D33EBA14BF17E812DF3780B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:6b:e1:2d:79:d9:2b:55:2b:12:44:5a:d8:
                    6a:49:22:21:5b:ad:bc:ef:6c:bc:26:cc:3a:9f:b8:
                    32:d2:3e:07:89:b2:0e:19:a6:08:9f:54:56:cd:aa:
                    06:5d:ca:3e:00:30:1d:c6:f6:32:57:d2:d6:14:9d:
                    6a:f7:4f:c2:a7:26:a7:3f:d8:05:e1:5f:eb:55:c7:
                    1a:cd:d0:e2:ab:7d:b2:96:de:9a:cd:28:18:bf:fc:
                    67:0e:91:c8:eb:1b:52:5e:31:e8:0f:ba:79:72:39:
                    1b:29:71:8c:9c:ee:a9:f6:4a:ef:dd:29:25:5e:14:
                    0e:a3:8e:d4:3d:d5:1f:be:f5:a9:d4:33:34:69:55:
                    1e:11:da:f8:d2:95:d5:5f:e1:c2:4d:0f:5d:82:f3:
                    f5:7f:03:7f:b7:15:0f:54:c9:5b:ff:e2:5d:25:f6:
                    e5:56:b4:bd:f5:67:45:18:df:f7:9a:c3:a7:eb:96:
                    3c:2f:1a:da:c4:52:ff:9c:cc:4f:cc:dc:f5:70:63:
                    6b:eb:0a:ea:28:41:c3:30:b6:90:25:df:c1:1c:bf:
                    93:ab:b4:c3:1c:3e:0e:fa:cb:38:fa:bc:ea:ab:d1:
                    0e:7e:2f:3a:88:4b:bb:33:a3:f6:64:cf:c1:98:97:
                    f6:65:e5:bb:da:72:d9:7e:58:f0:f8:91:b7:68:7c:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CE:D1:2F:AD:19:34:5D:33:EB:A1:4B:F1:7E:81:2D:F3:78:0B:24
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136352e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:a9:82:5f:e7:1b:5a:d2:6a:ca:f9:b0:64:80:13:df:5e:c7:
         53:5c:4a:5d:70:97:f6:19:10:7b:79:a3:8f:11:80:4a:cb:cc:
         c8:bf:76:a0:6e:5e:02:9c:fa:22:02:68:47:29:17:e1:ba:0f:
         0a:92:63:20:6e:af:c4:de:23:77:52:b8:05:55:97:d0:c2:4c:
         ed:1a:69:9e:5f:cb:2a:77:17:04:50:e0:e4:9f:fd:d6:62:ff:
         76:0d:3a:ed:d2:bd:2c:24:67:3a:35:9b:ad:ce:85:b5:55:e5:
         a1:0f:e3:4b:89:51:ef:fa:d3:82:16:96:ee:37:f2:f9:95:d4:
         95:41:12:21:ec:08:03:63:11:a0:73:91:b5:7b:ae:4e:a2:8e:
         92:f8:e6:37:ff:e6:ec:45:e4:76:84:64:92:8c:de:65:3b:14:
         b9:7f:13:8e:2c:e1:0f:68:a7:d8:ac:27:f3:c2:b7:a0:dd:92:
         78:74:29:37:ec:47:a6:52:2a:b4:eb:5b:16:ab:58:9a:50:65:
         38:c5:92:58:b9:74:ce:e8:05:43:42:af:34:a1:39:29:ce:24:
         e7:17:56:a4:80:6c:b8:8a:3f:e7:af:82:31:55:7d:a4:a2:5f:
         b6:9f:d9:bd:88:03:a3:5e:90:4b:4a:04:41:0d:50:2a:0c:9b:
         4b:64:6d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:54 2024 by rpki-client on console-fra.rpki-client.org