Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa
File:                     3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa (raw, json)
Hash identifier:          fO4dn4A4zdtZ6G/2nXq9CJ1VvXgdFhWGaS/BoFGh8RY=
Subject key identifier:   27:62:5F:F4:24:D2:1F:38:0E:D7:40:31:D6:62:D8:99:99:0E:F7:4E
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       57FCD06D402B469B5B137130F9AE580A7DAD7FD4
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa
Signing time:             Mon 31 Jul 2023 00:02:25 +0000
ROA not before:           Sun 30 Jul 2023 23:57:25 +0000
ROA not after:            Mon 29 Jul 2024 00:02:25 +0000
asID:                     4787
IP address blocks:        116.206.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:fc:d0:6d:40:2b:46:9b:5b:13:71:30:f9:ae:58:0a:7d:ad:7f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 30 23:57:25 2023 GMT
            Not After : Jul 29 00:02:25 2024 GMT
        Subject: CN=27625FF424D21F380ED74031D662D899990EF74E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4d:bf:46:7c:89:dd:91:ab:1c:88:12:ba:b7:
                    c1:e7:5c:9e:8a:45:8a:f8:ae:72:f4:bf:a2:f1:2a:
                    6c:ad:d1:9c:78:f0:0d:fe:bf:33:72:f7:07:53:ce:
                    3d:33:99:48:20:79:2b:05:fa:8a:39:13:4c:93:d1:
                    97:67:a2:f1:28:24:df:18:5b:b9:b6:8c:34:7b:6e:
                    d4:13:71:68:7f:13:7f:5c:43:65:b7:7a:e5:56:c2:
                    c1:c2:ea:93:e8:a1:90:19:85:05:51:0b:e3:60:74:
                    40:a0:1e:ff:4d:6a:fd:50:46:ff:e7:2c:b7:22:98:
                    07:cb:0f:a3:69:3b:57:1e:f5:56:97:6e:2d:d4:10:
                    04:3c:b2:f0:13:0e:a2:3a:f9:ac:5c:03:36:92:76:
                    07:cf:a1:e1:6d:81:7c:fe:64:25:b9:f5:e0:bc:43:
                    68:bb:c3:7a:ec:95:d2:0e:69:71:f3:7b:24:19:0e:
                    e3:59:54:d9:a8:67:23:e8:9d:6d:3f:c5:a4:43:df:
                    bf:a2:45:81:82:ca:f2:a6:aa:e3:f6:1f:f2:aa:2a:
                    9c:85:5f:0b:d8:6e:f4:f9:8d:98:ab:1c:b8:df:96:
                    8e:2c:36:4f:e3:c5:c4:ab:5c:31:d4:ba:79:50:c2:
                    69:49:4c:0b:f7:e3:9b:55:a4:18:ba:eb:2a:68:f5:
                    f9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:62:5F:F4:24:D2:1F:38:0E:D7:40:31:D6:62:D8:99:99:0E:F7:4E
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:7f:17:86:c5:b8:89:ae:22:fe:05:4a:23:95:9a:eb:b8:ec:
         39:09:5d:87:7f:55:d6:94:b0:b6:4f:ca:95:49:4b:56:fe:99:
         34:fe:72:85:13:11:8f:00:ca:9f:d5:00:0d:1f:25:a3:36:73:
         77:26:5f:29:ef:ce:1a:9f:43:80:00:b8:47:e9:db:75:a4:6c:
         0d:9f:ae:cb:68:52:cc:64:14:e6:dc:47:33:d8:13:2b:62:cf:
         a8:b8:0b:ad:c6:1a:6e:38:68:78:51:a8:4c:85:81:e4:38:ef:
         d1:ad:ca:b5:90:36:27:97:0a:a9:19:b9:fe:41:7d:69:d6:78:
         04:87:2e:65:d6:02:63:15:12:f7:a4:a1:a3:b2:00:7b:87:a1:
         4a:43:2c:ac:fe:ef:b8:c2:22:8f:d8:24:fa:6f:09:ec:09:e7:
         50:9a:49:96:73:5e:d2:11:d2:d2:f4:b6:ff:42:af:16:aa:33:
         66:70:d8:81:5c:a9:1a:63:e8:0a:ca:dd:1d:bd:cb:04:3a:97:
         c8:01:74:ec:d2:e9:7f:b8:bb:51:24:05:9b:05:b4:07:22:bf:
         d9:cc:aa:87:d8:b7:17:6f:0e:1e:89:c3:78:57:79:89:88:9d:
         b5:a9:07:09:6c:94:bd:3f:1c:ed:bf:6b:8b:f9:d1:e2:1f:83:
         64:40:ba:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:08:35 2024 by rpki-client on console-ams.rpki-client.org