Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136322e302f32342d3234203d3e203536323436.roa
File:                     3131362e36382e3136322e302f32342d3234203d3e203536323436.roa (raw, json)
Hash identifier:          6odykOJSWUxFmIq7AfOra4nPkzGKUp0C0REwLWTdIFY=
Subject key identifier:   B0:C0:3E:0C:C1:63:7C:24:DE:41:BD:7E:AA:4A:59:92:EC:4F:14:64
Certificate issuer:       /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
Certificate serial:       5C879ADE925D336C1A14F6DE9DDC9A46A77810F1
Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136322e302f32342d3234203d3e203536323436.roa
Signing time:             Mon 01 Jul 2024 01:03:07 +0000
ROA not before:           Mon 01 Jul 2024 00:58:07 +0000
ROA not after:            Mon 30 Jun 2025 01:03:07 +0000
asID:                     56246
IP address blocks:        116.68.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl
                          rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 18:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:87:9a:de:92:5d:33:6c:1a:14:f6:de:9d:dc:9a:46:a7:78:10:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
        Validity
            Not Before: Jul  1 00:58:07 2024 GMT
            Not After : Jun 30 01:03:07 2025 GMT
        Subject: CN=B0C03E0CC1637C24DE41BD7EAA4A5992EC4F1464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a1:aa:41:42:84:6d:fa:30:12:23:95:27:24:
                    d9:8f:3f:bc:16:0b:5a:07:de:2f:72:44:86:01:e5:
                    d6:45:df:a9:07:2d:f1:d6:77:aa:ff:7b:01:de:ad:
                    65:70:3a:37:3d:cd:3c:e7:78:71:e4:a3:85:b1:02:
                    8e:8b:0c:d3:2f:ee:6a:4a:b2:df:e1:b3:c3:13:8a:
                    df:93:73:9b:95:82:03:c4:e1:df:96:cf:5c:fd:2d:
                    ee:66:57:5e:e2:10:0b:02:82:ad:bd:3a:88:43:1e:
                    5c:d9:de:fb:ba:2f:be:6e:bf:f7:5f:51:51:e1:32:
                    6e:23:90:8a:8f:0c:79:73:74:06:16:86:83:fa:08:
                    24:0e:de:29:48:7c:37:0e:0a:20:8d:65:12:b0:e5:
                    da:72:c6:91:13:a5:98:83:eb:5c:bb:65:9e:93:48:
                    ee:e3:86:84:ba:c6:84:57:a6:92:ac:f9:13:bd:ac:
                    0b:95:14:f2:37:5d:90:bd:65:d8:9e:dd:f5:39:d7:
                    5b:8f:54:af:46:a4:a6:76:89:fd:41:92:a8:c5:a1:
                    46:86:3c:ba:5f:3c:f8:ed:13:77:d7:4c:61:c4:a3:
                    dd:e6:ee:5d:8e:96:96:52:06:0d:87:db:f9:81:a8:
                    f0:b1:39:f2:63:a8:64:94:83:19:f6:9b:a3:91:43:
                    77:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C0:3E:0C:C1:63:7C:24:DE:41:BD:7E:AA:4A:59:92:EC:4F:14:64
            X509v3 Authority Key Identifier:
                keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136322e302f32342d3234203d3e203536323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:4d:52:29:a2:52:c2:b5:88:67:85:f8:45:6a:58:f4:b6:94:
         7c:ff:a2:69:a6:7a:a8:d0:98:c5:91:6b:8c:9a:6b:6e:60:31:
         29:10:64:1b:fe:a1:d8:cf:72:0d:d4:fe:25:a2:96:9c:4c:18:
         7b:24:d0:91:dc:91:8f:bf:4f:69:27:73:ca:36:9a:01:a3:9b:
         74:ee:81:98:d8:ae:ea:ec:54:1a:63:6a:d1:79:ce:bc:8c:9d:
         0c:18:24:9c:8c:f1:c9:9b:4d:84:5b:c3:02:4f:f4:fe:13:18:
         dd:9a:48:69:a5:ed:71:91:69:e3:34:cc:77:3a:bc:97:75:18:
         cc:38:70:c6:f0:93:93:47:cf:b4:3c:61:e8:14:0b:41:76:cb:
         6f:aa:89:4a:33:cb:5a:95:c4:6b:19:76:e5:b4:9c:d4:87:be:
         be:7a:b5:89:cc:04:50:02:ef:36:6c:12:ad:83:b3:2a:35:39:
         37:7a:3d:82:12:ae:3f:b9:66:7a:49:91:6d:6d:eb:75:6e:7a:
         e4:74:9e:66:8e:52:b1:8c:1b:42:e5:7a:27:fd:d3:c8:0a:ee:
         d6:a3:77:46:de:1f:f0:35:49:0a:b9:eb:53:47:d7:05:c5:c4:
         ab:95:1d:8b:b8:3d:0b:82:8f:6c:97:5b:75:02:e0:48:e0:06:
         0c:bb:3b:6f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXIea3pJdM2waFPbendyaRqd4EPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF
NEQ1RkRFNjAeFw0yNDA3MDEwMDU4MDdaFw0yNTA2MzAwMTAzMDdaMDMxMTAvBgNV
BAMTKEIwQzAzRTBDQzE2MzdDMjRERTQxQkQ3RUFBNEE1OTkyRUM0RjE0NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuoapBQoRt+jASI5UnJNmPP7wW
C1oH3i9yRIYB5dZF36kHLfHWd6r/ewHerWVwOjc9zTzneHHko4WxAo6LDNMv7mpK
st/hs8MTit+Tc5uVggPE4d+Wz1z9Le5mV17iEAsCgq29OohDHlzZ3vu6L75uv/df
UVHhMm4jkIqPDHlzdAYWhoP6CCQO3ilIfDcOCiCNZRKw5dpyxpETpZiD61y7ZZ6T
SO7jhoS6xoRXppKs+RO9rAuVFPI3XZC9Zdie3fU511uPVK9GpKZ2if1BkqjFoUaG
PLpfPPjtE3fXTGHEo93m7l2OlpZSBg2H2/mBqPCxOfJjqGSUgxn2m6ORQ3efAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUsMA+DMFjfCTeQb1+qkpZkuxPFGQwHwYDVR0j
BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx
NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1
RkRFNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05
NGE2LTc5M2JkYmRhMzc3Ny8wLzMxMzEzNjJlMzYzODJlMzEzNjMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHREojANBgkqhkiG
9w0BAQsFAAOCAQEAjk1SKaJSwrWIZ4X4RWpY9LaUfP+iaaZ6qNCYxZFrjJprbmAx
KRBkG/6h2M9yDdT+JaKWnEwYeyTQkdyRj79PaSdzyjaaAaObdO6BmNiu6uxUGmNq
0XnOvIydDBgknIzxyZtNhFvDAk/0/hMY3ZpIaaXtcZFp4zTMdzq8l3UYzDhwxvCT
k0fPtDxh6BQLQXbLb6qJSjPLWpXEaxl25bSc1Ie+vnq1icwEUALvNmwSrYOzKjU5
N3o9ghKuP7lmekmRbW3rdW565HSeZo5SsYwbQuV6J/3TyAru1qN3Rt4f8DVJCrnr
U0fXBcXEq5Udi7g9C4KPbJdbdQLgSOAGDLs7bw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:41 2024 by rpki-client on console-ams.rpki-client.org