Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137342e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3137342e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          fb4/pzYRLm4Ws9bArk0Chfadey/bTmlyIr8yydtZVVM=
Subject key identifier:   16:BB:F2:C6:E0:6C:FF:82:D0:52:AA:52:55:1C:65:0E:91:79:C3:16
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       274AF34CC8A6E612A85B501308A063F9DB23DBCD
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137342e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:07:15 +0000
ROA not before:           Fri 24 Nov 2023 03:02:15 +0000
ROA not after:            Fri 22 Nov 2024 03:07:15 +0000
asID:                     18059
IP address blocks:        116.90.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4a:f3:4c:c8:a6:e6:12:a8:5b:50:13:08:a0:63:f9:db:23:db:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 03:02:15 2023 GMT
            Not After : Nov 22 03:07:15 2024 GMT
        Subject: CN=16BBF2C6E06CFF82D052AA52551C650E9179C316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:85:25:8e:00:35:e4:f6:c9:e5:63:eb:ac:18:
                    1d:aa:88:45:07:f8:42:62:35:cd:0d:10:aa:e1:5f:
                    8d:94:4a:0f:aa:99:21:a7:31:a0:8e:ad:fb:0b:46:
                    f5:1f:b9:59:91:50:0b:58:73:cd:ae:b5:65:3e:f8:
                    03:34:4d:f7:fb:49:ec:a8:bc:a9:42:1b:a7:53:f9:
                    b1:5b:b4:b7:26:ba:5b:94:ff:71:0e:dc:82:84:ce:
                    94:f9:f0:a0:50:03:1b:ba:52:9d:d1:d5:39:8e:f6:
                    7d:fc:ad:c0:43:45:f0:df:a7:dd:04:e4:4f:f7:34:
                    c9:a3:74:26:ac:3a:57:eb:0e:30:8e:2c:f4:ef:b6:
                    c6:ec:a8:8c:1c:98:11:ab:c2:f2:50:d2:07:dd:79:
                    85:88:6a:d7:62:dc:ce:cc:66:20:c9:27:35:5a:34:
                    60:c0:a9:f5:a9:94:07:8d:43:42:f4:ee:c3:b2:98:
                    99:df:58:fb:d1:5e:76:91:fa:2e:bf:b0:98:7c:b0:
                    2b:d3:34:18:a6:04:22:68:87:13:96:f6:10:d4:13:
                    38:8d:de:ff:36:09:b3:c1:ad:76:88:5d:1c:50:57:
                    77:61:92:31:31:e9:d3:b1:ce:b6:86:b8:cc:0d:d1:
                    d7:cd:58:70:d1:f8:71:52:aa:97:a9:95:36:b7:f9:
                    70:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BB:F2:C6:E0:6C:FF:82:D0:52:AA:52:55:1C:65:0E:91:79:C3:16
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137342e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:bc:cb:a7:ab:00:2a:0e:16:3d:79:3d:7e:02:ec:a0:98:60:
         14:ca:92:f2:0a:60:05:5d:6b:28:f1:b8:af:ce:e2:22:bd:3a:
         12:bb:ed:54:13:6b:f1:ce:a5:22:0f:9a:69:ef:40:ca:88:b8:
         99:2f:6a:f0:c8:81:e4:6f:85:5d:f1:3c:35:13:42:da:42:b3:
         28:30:0a:10:0a:f2:9e:1f:20:b5:3b:8d:1d:f2:32:1b:4e:ee:
         7b:4f:31:f0:1f:3d:f7:e3:36:95:b0:fb:fb:c8:30:ad:70:a4:
         18:b3:86:ee:04:83:27:a6:f2:a7:7c:8c:4e:72:f5:93:bd:45:
         b5:f6:45:d9:27:0c:c7:80:f7:54:e3:91:97:db:07:03:10:2b:
         8e:93:40:ad:47:d4:4e:45:55:85:eb:c2:11:7a:b9:d1:da:91:
         2f:5e:2b:16:0a:b3:b4:96:dc:7b:bb:cf:9d:f5:50:8e:7f:fe:
         f1:88:de:de:19:da:03:3c:bd:d0:99:b9:d0:0f:2d:78:ff:40:
         fe:1e:f8:de:da:bf:bf:41:bc:91:da:ce:58:8d:1c:84:51:db:
         9b:0c:47:b2:ae:31:27:52:a1:9f:23:65:72:68:c0:17:38:67:
         59:51:df:25:51:ab:90:3a:1c:14:7f:99:63:c3:f0:c8:9b:5c:
         6a:db:6c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:44:29 2024 by rpki-client on console-fra.rpki-client.org