Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137322e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3137322e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          SrvXngGXhi9hyU/hMgJEq7sfnYamrB6la/L5yki4fsc=
Subject key identifier:   35:D2:60:22:A5:A6:B7:57:45:90:55:05:28:49:C5:BE:AF:B7:C6:C6
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       77304D9396896F415750C7FFE0BA9DEC66CF4EDD
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137322e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:05:48 +0000
ROA not before:           Fri 24 Nov 2023 03:00:48 +0000
ROA not after:            Fri 22 Nov 2024 03:05:48 +0000
asID:                     18059
IP address blocks:        116.90.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:30:4d:93:96:89:6f:41:57:50:c7:ff:e0:ba:9d:ec:66:cf:4e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 03:00:48 2023 GMT
            Not After : Nov 22 03:05:48 2024 GMT
        Subject: CN=35D26022A5A6B757459055052849C5BEAFB7C6C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:8b:fa:cb:50:a0:e7:73:b5:96:1a:8a:ea:
                    30:aa:d3:05:a1:11:e3:b8:c3:93:59:3c:87:6a:48:
                    10:4a:06:9e:ec:37:77:10:27:82:2a:fd:5a:7a:c0:
                    c6:4b:d5:a3:72:23:13:9e:f9:12:fc:1b:fa:23:c3:
                    07:24:49:f7:fe:6c:13:10:97:a8:d7:da:6c:b0:ee:
                    21:04:47:24:b6:c8:fe:8e:7d:1a:ba:d3:01:e7:e2:
                    52:18:a5:eb:e8:5f:a0:bd:78:b6:5a:27:00:26:12:
                    9e:f2:aa:9b:d9:8c:6f:7e:17:3e:f5:c5:bd:12:56:
                    72:d4:6e:8a:48:85:bf:79:5b:36:e1:97:5b:ae:f0:
                    cb:83:e7:dc:69:c5:08:50:72:05:47:94:9f:c5:08:
                    ee:10:16:2e:17:ab:eb:65:4c:f4:7f:83:2f:d9:88:
                    0b:12:ca:b7:34:25:4a:06:c6:fe:25:79:95:e3:8b:
                    a8:ad:c8:fb:b6:09:ae:75:4c:18:f7:2e:08:b0:83:
                    b2:43:85:a6:31:f9:1e:05:ec:f7:31:1d:da:98:4f:
                    18:2f:33:55:9a:31:ca:66:b5:9c:09:a0:49:c2:e2:
                    c8:92:26:3e:81:30:82:d0:5e:91:c6:e9:3e:05:1d:
                    8f:84:6b:34:2e:5f:dd:37:51:b6:b0:0f:80:7f:d9:
                    66:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D2:60:22:A5:A6:B7:57:45:90:55:05:28:49:C5:BE:AF:B7:C6:C6
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137322e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:64:11:ee:ec:1a:78:41:e2:db:4b:76:91:70:f2:87:87:31:
         15:b2:a3:0b:d0:0f:75:f7:b6:6b:6a:8c:36:28:ec:d3:f7:8f:
         21:c8:e8:dd:13:de:d9:55:8b:c1:09:75:51:ad:64:92:1d:04:
         d8:28:64:dd:22:ca:12:46:9f:96:64:cf:b5:f4:52:11:b0:cc:
         d1:03:63:29:1e:23:22:6c:66:c3:db:5f:43:2d:56:81:fc:ab:
         94:ee:dc:ed:b9:43:ed:e1:3a:81:9f:91:53:72:66:f4:c0:54:
         57:ea:06:9b:81:24:89:ce:39:15:51:a2:80:3a:a8:1a:ef:0a:
         54:93:30:c9:8a:d0:e5:10:62:c1:5b:fe:31:79:90:9f:68:f9:
         2c:49:f0:35:bd:30:0a:b4:4e:d2:b5:f5:3c:c6:a5:86:2c:10:
         f3:9a:0c:cf:79:48:41:36:a5:49:dd:3d:9d:68:a7:2b:86:27:
         b6:05:20:bd:b1:c0:a5:c2:1c:33:e9:8a:b9:66:81:3c:3b:75:
         24:54:35:b1:94:56:a6:61:87:91:de:34:fc:cf:70:ce:42:6a:
         d8:b3:30:3b:68:e8:59:9a:46:d6:0d:94:17:f5:46:55:e7:00:
         05:fa:c4:e5:d4:26:c6:33:27:86:65:ba:8f:2d:04:fc:fa:29:
         85:9d:64:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:54 2024 by rpki-client on console-fra.rpki-client.org