Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137302e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3137302e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          6Q4+Vq5yBqkaARBaLx0VPsuJef8Glq4UQD/eacuwvxE=
Subject key identifier:   36:E8:21:A0:64:A6:4A:A6:01:5F:61:55:56:37:EC:D8:74:14:0C:BC
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       044B01614F90969E422002AFC63B6E32D5EA4A5A
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137302e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:05:16 +0000
ROA not before:           Fri 24 Nov 2023 03:00:16 +0000
ROA not after:            Fri 22 Nov 2024 03:05:16 +0000
asID:                     18059
IP address blocks:        116.90.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4b:01:61:4f:90:96:9e:42:20:02:af:c6:3b:6e:32:d5:ea:4a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 03:00:16 2023 GMT
            Not After : Nov 22 03:05:16 2024 GMT
        Subject: CN=36E821A064A64AA6015F61555637ECD874140CBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:ee:5e:c9:95:c1:21:3e:46:87:37:5a:9e:
                    ee:5a:0a:94:e8:7f:30:13:4c:cd:85:ce:c3:92:e3:
                    89:f1:7b:b9:97:80:8f:ba:49:7d:ef:5f:80:66:d5:
                    c3:d3:9f:6d:cd:c4:8e:a7:7e:63:38:2a:6e:e8:e8:
                    4c:df:cf:0f:26:86:de:24:12:11:94:cf:8a:c9:31:
                    df:31:37:fe:a4:1d:fd:0d:a8:bf:11:e8:7b:04:d9:
                    0c:be:04:af:96:97:38:14:5d:8a:3b:27:75:65:71:
                    6e:73:6f:aa:7c:88:74:57:1b:69:46:99:8e:7e:32:
                    ce:3d:4d:6f:ee:11:8a:21:5a:04:9f:bb:de:f2:a6:
                    51:50:43:42:3c:95:68:39:07:1a:69:d9:63:40:2a:
                    45:78:fd:13:c1:f0:c7:cd:3a:03:5c:1e:55:26:b4:
                    8e:bc:4e:3c:b8:87:02:86:b3:45:4b:b3:1f:c0:07:
                    9d:2f:90:33:53:5b:21:c6:42:db:87:f6:a2:f8:9a:
                    5a:0e:39:bc:d6:45:06:22:58:26:c9:b7:db:b4:06:
                    ca:36:e5:0a:cd:99:14:d4:50:5b:f4:0d:4b:45:12:
                    f7:d9:14:72:4f:65:ca:a9:a2:ff:bc:d5:a6:ce:08:
                    2f:f7:87:a9:a1:aa:96:2a:76:04:84:d6:08:d5:67:
                    42:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E8:21:A0:64:A6:4A:A6:01:5F:61:55:56:37:EC:D8:74:14:0C:BC
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137302e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:3e:e1:1c:b4:ba:8c:44:8a:14:1f:c1:43:75:46:ae:d7:f2:
         65:ba:29:37:bc:c2:be:d3:f4:ce:5d:a6:da:df:6f:97:ae:2c:
         e3:62:32:af:7d:25:55:63:3e:1e:60:fa:39:39:36:7e:2b:51:
         36:e8:97:59:87:f6:d2:96:38:43:47:5b:6a:b6:b7:61:81:02:
         fa:75:54:6c:5b:56:47:d4:7f:c2:ca:7c:ef:24:28:be:59:f2:
         0f:43:37:af:6a:63:4b:74:2a:eb:1c:db:c7:39:59:d8:fc:06:
         fa:79:6d:8c:27:23:2d:ea:ed:77:2a:24:4d:49:70:45:1f:a8:
         63:a6:2e:6f:84:b4:82:1e:de:7a:51:38:32:e3:5a:fd:56:bf:
         e9:6e:21:08:66:49:ff:64:2e:21:11:eb:46:64:19:8a:2a:41:
         fa:95:36:d3:f1:4d:e1:6e:84:cb:09:30:6d:e9:af:3f:c0:dc:
         f1:16:fa:74:4e:5d:03:da:6e:81:34:91:70:c8:09:76:58:16:
         9e:71:29:88:12:9e:82:d4:bf:8c:b2:a1:8e:aa:45:99:9b:8f:
         eb:59:a5:05:26:bc:bb:93:c8:55:69:01:22:03:ce:b3:da:9c:
         12:68:13:ae:2c:d6:7f:6b:28:a5:31:75:a0:ab:cc:e2:6c:7f:
         4a:f6:e6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:54 2024 by rpki-client on console-fra.rpki-client.org