Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137332e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3137332e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          fN3rj7Kw7eBHMmwLQFl4ZY9TpYLirWhMgAuZhzDvHj0=
Subject key identifier:   C6:9F:80:B6:52:B5:EB:26:E4:DC:A5:31:D4:83:B1:6E:1D:64:98:80
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       2F9350704B06A2E3BDB5933D1CF5EC70D11F4DFA
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137332e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:06:57 +0000
ROA not before:           Fri 24 Nov 2023 03:01:57 +0000
ROA not after:            Fri 22 Nov 2024 03:06:57 +0000
asID:                     18059
IP address blocks:        116.90.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:93:50:70:4b:06:a2:e3:bd:b5:93:3d:1c:f5:ec:70:d1:1f:4d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 03:01:57 2023 GMT
            Not After : Nov 22 03:06:57 2024 GMT
        Subject: CN=C69F80B652B5EB26E4DCA531D483B16E1D649880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4e:16:af:04:de:04:2f:19:62:35:50:bb:08:
                    1b:52:89:33:32:d2:6a:2e:be:e1:70:fc:9b:55:e4:
                    d2:9e:f1:25:38:d1:b9:1f:0a:93:31:03:fd:da:1b:
                    e3:51:4a:28:69:d8:cf:ea:ad:0a:19:76:83:b9:61:
                    d0:e2:81:a9:4b:8c:f3:89:83:42:8f:e4:ce:db:8c:
                    23:fb:8e:20:47:69:f2:38:52:5d:b8:aa:7b:a3:11:
                    a1:82:c6:09:df:d3:8b:69:40:fb:33:fd:a0:21:d6:
                    b4:65:3f:7d:6f:10:5d:74:83:1c:b1:08:5e:a6:27:
                    e6:75:4b:81:61:41:7d:6b:96:9c:db:24:ff:cb:c2:
                    08:c9:75:2d:54:25:c3:3a:26:fc:04:f5:4f:e3:20:
                    12:f6:df:d8:17:56:93:5e:79:f5:a6:3a:ea:f5:31:
                    ba:d5:4e:57:c4:e1:61:d7:12:70:f3:d2:b7:a9:7b:
                    28:30:91:1e:98:61:a7:84:30:48:24:bf:41:d0:84:
                    db:df:c8:26:c8:63:91:52:78:9b:d1:25:40:22:b4:
                    f2:39:50:34:83:77:e4:6d:a8:5a:ae:3e:97:c0:b5:
                    06:c6:9e:4f:01:47:ea:4a:fb:6a:ec:95:27:d0:06:
                    be:e9:73:47:2b:ae:a5:85:c2:cb:b8:07:db:30:d7:
                    a7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9F:80:B6:52:B5:EB:26:E4:DC:A5:31:D4:83:B1:6E:1D:64:98:80
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137332e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:b7:24:4a:86:92:91:c6:65:bf:6d:e2:6e:93:f8:74:47:9e:
         37:2f:e2:d9:7b:43:eb:a7:51:0e:b1:bd:44:f2:6d:0a:f6:6f:
         cf:b3:fe:a4:67:12:b5:9a:23:3a:88:86:aa:de:da:7a:8d:a3:
         74:d2:50:4c:87:68:06:ee:1d:74:e7:f8:cb:20:af:6d:28:ab:
         0c:47:f3:16:bc:c5:6c:df:a1:08:98:52:92:cd:46:a0:10:50:
         9f:d9:ab:40:f4:5b:47:22:87:f4:89:4f:d1:9e:12:a1:3d:0d:
         26:ec:d0:5b:7a:44:df:8d:69:68:45:b5:d3:3b:2a:ed:86:c0:
         e8:e4:ad:84:93:1b:97:69:e0:3d:ab:c6:a7:fe:48:02:c5:36:
         16:0a:a6:e8:35:e8:93:a1:46:59:8d:6e:42:5a:bb:33:f9:34:
         8f:4a:6a:c7:64:5a:9f:45:2f:39:c2:4a:85:05:ce:a3:1e:15:
         19:cf:30:0e:36:17:bf:9e:f7:90:28:74:53:9c:a4:b8:10:8a:
         69:9c:47:68:69:78:22:5f:83:78:48:64:9a:26:6d:44:05:82:
         e5:00:e6:dd:be:62:8f:99:dc:72:0a:f3:be:34:1d:2a:b2:e2:
         06:e9:30:0c:d8:33:37:94:dd:93:3e:8e:e6:c6:97:5e:7b:73:
         d4:d7:42:2b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUL5NQcEsGouO9tZM9HPXscNEfTfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2
QzhBMUQ4RTAeFw0yMzExMjQwMzAxNTdaFw0yNDExMjIwMzA2NTdaMDMxMTAvBgNV
BAMTKEM2OUY4MEI2NTJCNUVCMjZFNERDQTUzMUQ0ODNCMTZFMUQ2NDk4ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPThavBN4ELxliNVC7CBtSiTMy
0mouvuFw/JtV5NKe8SU40bkfCpMxA/3aG+NRSihp2M/qrQoZdoO5YdDigalLjPOJ
g0KP5M7bjCP7jiBHafI4Ul24qnujEaGCxgnf04tpQPsz/aAh1rRlP31vEF10gxyx
CF6mJ+Z1S4FhQX1rlpzbJP/LwgjJdS1UJcM6JvwE9U/jIBL239gXVpNeefWmOur1
MbrVTlfE4WHXEnDz0repeygwkR6YYaeEMEgkv0HQhNvfyCbIY5FSeJvRJUAitPI5
UDSDd+RtqFquPpfAtQbGnk8BR+pK+2rslSfQBr7pc0crrqWFwsu4B9sw16dDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUxp+AtlK16ybk3KUx1IOxbh1kmIAwHwYDVR0j
BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1
MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB
MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h
ZDBiLTRjZDViNjE5NTllZi8wLzMxMzEzNjJlMzkzMDJlMzEzNzMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHRarTANBgkqhkiG
9w0BAQsFAAOCAQEAjLckSoaSkcZlv23ibpP4dEeeNy/i2XtD66dRDrG9RPJtCvZv
z7P+pGcStZojOoiGqt7aeo2jdNJQTIdoBu4ddOf4yyCvbSirDEfzFrzFbN+hCJhS
ks1GoBBQn9mrQPRbRyKH9IlP0Z4SoT0NJuzQW3pE341paEW10zsq7YbA6OSthJMb
l2ngPavGp/5IAsU2Fgqm6DXok6FGWY1uQlq7M/k0j0pqx2Ran0UvOcJKhQXOox4V
Gc8wDjYXv573kCh0U5ykuBCKaZxHaGl4Il+DeEhkmiZtRAWC5QDm3b5ij5nccgrz
vjQdKrLiBukwDNgzN5Tdkz6O5saXXntz1NdCKw==
-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:54 2024 by rpki-client on console-fra.rpki-client.org