Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137372e302f32342d3234203d3e20313337333136.roa
File:                     3131362e39302e3137372e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          VPIssVCiaQ4IAfJcawX7k9Lh+Qrw40nfXUjBMhqk5tA=
Subject key identifier:   0C:DA:37:5F:F3:D5:7B:98:A0:A3:FA:DF:E0:B4:B9:B7:D1:A6:3B:DC
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       506C30F05454F9CF4E897D30BFCC36E411BD56BA
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137372e302f32342d3234203d3e20313337333136.roa
Signing time:             Tue 11 Jun 2024 08:02:38 +0000
ROA not before:           Tue 11 Jun 2024 07:57:38 +0000
ROA not after:            Tue 10 Jun 2025 08:02:38 +0000
asID:                     137316
IP address blocks:        116.90.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6c:30:f0:54:54:f9:cf:4e:89:7d:30:bf:cc:36:e4:11:bd:56:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Jun 11 07:57:38 2024 GMT
            Not After : Jun 10 08:02:38 2025 GMT
        Subject: CN=0CDA375FF3D57B98A0A3FADFE0B4B9B7D1A63BDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:63:64:3e:e0:2d:f9:d1:dc:bb:8e:77:78:48:
                    1f:8a:d6:28:75:09:2a:fe:85:9f:d4:ec:93:1e:71:
                    93:21:e6:8e:35:3a:b0:b9:4c:12:3c:19:5f:5e:85:
                    8b:3e:a1:d1:02:4f:96:85:ef:cc:49:72:dd:2f:aa:
                    d8:94:7f:e9:fc:ce:6d:6c:6f:43:39:55:76:76:57:
                    eb:59:87:7f:85:bb:29:0a:bc:0b:eb:a1:85:79:b1:
                    7b:5b:82:d2:49:83:de:a6:15:18:77:49:0b:03:f1:
                    99:f0:a1:cc:56:2d:45:9a:ee:a9:07:b6:e0:f0:f3:
                    99:c8:e7:fb:85:6e:d9:67:9f:71:2a:8f:92:62:b4:
                    ac:85:2b:4a:e0:be:2e:28:8f:64:f5:78:f3:d4:bd:
                    33:35:1a:dd:ef:fc:ad:9c:f3:60:8c:8d:bf:44:b5:
                    6f:67:66:d3:54:e3:5a:f7:df:23:01:4e:91:34:5c:
                    fa:07:d0:f5:f2:af:32:0c:cb:5e:9a:fc:70:11:82:
                    a2:0d:53:a8:7c:5c:82:79:4f:39:67:c8:54:fc:f5:
                    01:b0:87:cb:ca:e4:a6:6c:80:ec:92:de:11:c4:c4:
                    8c:15:10:5f:f0:ec:4a:36:4b:a8:1c:6b:1b:8f:35:
                    f4:1a:87:5d:8c:5f:7a:a1:0d:f1:08:e0:11:fb:73:
                    a0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DA:37:5F:F3:D5:7B:98:A0:A3:FA:DF:E0:B4:B9:B7:D1:A6:3B:DC
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137372e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:e8:6b:98:cc:cf:f6:a8:65:3e:de:65:28:73:eb:6c:76:a9:
         7a:15:78:ae:40:e4:87:8a:c2:9c:7e:13:85:c9:5c:0f:d2:ef:
         15:74:1d:97:b1:1e:fe:38:c8:61:b0:d5:93:1c:07:65:c1:37:
         f0:c1:63:3c:47:5d:09:fd:bd:92:ae:7b:ce:b4:f7:bc:24:aa:
         79:cd:5f:41:a6:fc:f1:2d:a2:af:a6:54:d3:3d:93:d9:65:f6:
         9e:94:b3:74:1e:cf:17:9a:c8:43:b5:75:30:41:45:32:c6:c1:
         17:5d:dd:2a:5f:8b:b5:bf:f6:24:cf:cf:56:de:d5:a5:20:62:
         f0:62:a7:9d:c6:ae:68:69:4e:77:bc:3d:5d:58:30:e6:bd:e5:
         34:dd:1c:8b:8a:87:fe:ad:66:7d:14:0e:57:8e:49:56:af:d6:
         4f:98:76:dc:a9:cb:07:69:9c:0b:ce:b9:89:b1:0b:64:e4:c5:
         43:5d:89:95:7e:25:87:8a:7e:ab:9e:f2:99:8d:d1:4c:68:96:
         c6:15:4f:ac:79:d7:ad:11:4f:dc:80:a8:55:58:56:ca:81:ee:
         6b:4a:a0:ba:b8:92:e3:35:5a:65:08:f8:c8:43:aa:13:4e:dd:
         a4:b3:d4:68:59:11:bb:bd:2d:cf:f5:5b:60:17:5e:89:b7:07:
         47:0c:b5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org