Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137372e302f32342d3234203d3e20313337333136.roa
File:                     3131362e39302e3137372e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          6x90Z1wZRLAl5hkOZcDNk+QONF8b1k4OA6an92HJSeY=
Subject key identifier:   29:58:3B:A6:DD:35:C2:0F:5F:D2:15:93:5B:95:9B:19:0D:CD:43:55
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       58C488FC474A10AC4A5F34AB957DBD552DE76BC7
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137372e302f32342d3234203d3e20313337333136.roa
Signing time:             Tue 11 Jul 2023 08:00:01 +0000
ROA not before:           Tue 11 Jul 2023 07:55:01 +0000
ROA not after:            Tue 09 Jul 2024 08:00:01 +0000
asID:                     137316
IP address blocks:        116.90.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 02:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c4:88:fc:47:4a:10:ac:4a:5f:34:ab:95:7d:bd:55:2d:e7:6b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Jul 11 07:55:01 2023 GMT
            Not After : Jul  9 08:00:01 2024 GMT
        Subject: CN=29583BA6DD35C20F5FD215935B959B190DCD4355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:d4:e0:11:b5:ef:18:5b:c6:5b:a0:4f:2f:
                    a8:0c:86:15:3c:9b:ff:88:d8:b7:5b:59:0b:ca:a5:
                    47:12:a8:c2:94:51:c6:48:c8:3b:f7:35:d9:85:3a:
                    58:d3:67:fa:95:a6:8e:29:d5:f9:c2:87:ba:71:8b:
                    ee:4b:40:11:5e:0a:4f:c3:71:bb:43:8b:61:d0:c1:
                    0a:f5:06:ec:9c:eb:a0:5c:5c:1d:3a:59:ff:c6:b5:
                    60:80:05:1a:39:07:cd:13:01:f2:30:f9:c0:ec:15:
                    59:7d:85:8e:40:38:b2:91:f1:ab:a8:33:a6:23:b4:
                    b5:61:2a:02:93:a6:bd:e5:04:f7:62:8a:d8:07:65:
                    2d:8d:f7:69:1e:51:82:2d:90:b3:dc:cc:ee:4d:3c:
                    05:73:de:fe:7f:6e:1a:ac:f4:39:55:d6:9e:6a:9b:
                    dc:a3:a7:f9:35:c8:80:9b:57:11:12:4c:d8:b1:a7:
                    b4:6b:a5:f9:48:30:f8:6d:ae:8e:80:f1:e6:9f:15:
                    15:f9:a6:88:08:ba:21:cd:5a:62:83:21:7f:18:42:
                    99:af:cd:41:c2:5c:64:5b:a3:ec:50:dc:67:65:53:
                    b1:92:52:1c:d2:a5:6d:4d:cf:f9:70:8d:a1:de:b6:
                    f6:1c:6c:af:9d:fd:cf:64:18:9a:21:18:da:98:44:
                    ca:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:58:3B:A6:DD:35:C2:0F:5F:D2:15:93:5B:95:9B:19:0D:CD:43:55
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137372e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:7d:ea:6b:82:9c:7f:ac:53:20:77:f5:30:8e:9e:1d:40:db:
         1a:06:f8:29:df:77:45:b8:73:26:bc:61:21:75:62:98:9d:dc:
         7e:b4:34:7e:ab:36:68:1b:4e:15:91:c3:3a:a6:20:d4:91:f3:
         c6:f1:f5:1f:1b:ee:8b:67:76:8d:ca:b2:63:32:af:95:1f:bc:
         9f:a9:c8:b9:ac:43:da:58:90:0d:53:c6:40:53:b5:e0:f1:0a:
         f4:dc:0f:b9:d5:47:9d:32:7f:ce:36:14:ae:8b:0a:2a:bb:81:
         d2:9d:f7:80:a0:58:ff:b8:97:ba:f2:8e:f4:2f:20:ea:b0:2e:
         cc:a4:03:31:af:62:99:1a:e4:b8:fc:1e:6b:58:fd:7a:a1:a9:
         24:4e:79:3a:9a:a1:71:d3:47:98:1e:2a:3a:f2:3d:93:db:20:
         3f:89:e6:23:b3:53:99:bd:46:18:2f:a6:41:d1:25:e5:f6:1e:
         03:4c:81:62:09:fe:ac:5a:28:a2:30:b6:a7:da:ee:ef:2b:9e:
         3c:1a:cf:a4:a3:a0:31:af:49:3c:bd:90:1c:fd:a4:1f:87:19:
         fd:70:36:8a:01:ff:14:f6:0c:71:05:72:ad:09:07:2d:6c:69:
         46:af:fc:e9:eb:17:15:f2:83:a5:7c:4b:b5:43:2a:70:24:c2:
         d6:42:e6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:28:55 2024 by rpki-client on console-ams.rpki-client.org