Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137382e302f32342d3234203d3e20313337333136.roa
File:                     3131362e39302e3137382e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          Ga61nBFjuAVxHuay/rQBZWvLeGHzRzGvb06C7qUbGEc=
Subject key identifier:   13:4E:C8:FF:39:F5:84:7E:F4:F4:20:B9:38:4E:F8:45:39:E9:B9:1A
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       0EC9D9C5C270B03E2CCC805C47BA8D72EBB448BD
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137382e302f32342d3234203d3e20313337333136.roa
Signing time:             Sun 17 Sep 2023 09:01:46 +0000
ROA not before:           Sun 17 Sep 2023 08:56:46 +0000
ROA not after:            Sun 15 Sep 2024 09:01:46 +0000
asID:                     137316
IP address blocks:        116.90.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 02:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c9:d9:c5:c2:70:b0:3e:2c:cc:80:5c:47:ba:8d:72:eb:b4:48:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Sep 17 08:56:46 2023 GMT
            Not After : Sep 15 09:01:46 2024 GMT
        Subject: CN=134EC8FF39F5847EF4F420B9384EF84539E9B91A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c7:eb:a0:cc:7e:8e:7f:2f:72:25:2f:2f:f4:
                    89:70:9a:22:c8:09:b1:9e:5a:20:87:71:1e:b7:2e:
                    e3:94:a0:8d:7e:de:79:dd:48:28:cd:75:d9:18:cd:
                    6e:1b:ce:6d:27:92:05:5c:b0:2a:37:b7:56:d0:97:
                    56:28:ac:e2:51:5a:ff:2e:7c:65:3f:99:64:c6:d3:
                    47:97:ca:03:cd:86:38:b9:3e:2c:0f:9f:d6:73:55:
                    fc:7e:38:71:1e:5f:3b:7d:5b:07:c3:35:17:3f:4f:
                    b7:53:03:25:40:43:68:13:18:de:68:a4:60:c2:e7:
                    8d:0b:e8:41:e0:30:2a:df:26:a5:d7:93:0a:57:02:
                    fc:5e:4e:21:53:8e:c7:60:de:ef:ca:9b:eb:7e:60:
                    88:04:ea:2f:f5:04:92:cf:ec:91:9f:e4:e9:d6:07:
                    d3:6b:7a:b4:cb:51:91:ca:0a:ba:01:5c:be:89:34:
                    9d:a4:5c:56:0c:ea:51:c4:03:df:bd:6d:ad:aa:e0:
                    9c:15:ce:1f:a7:6d:b7:e9:32:26:3b:d0:d4:f1:35:
                    d2:b3:a9:e8:d4:1c:d2:f9:2c:40:5b:6d:f3:b8:4f:
                    77:ed:b5:bb:4a:40:01:20:42:f8:d8:d7:b2:4d:07:
                    97:ad:84:6c:25:11:3c:6e:ea:a5:6e:5a:0b:da:bd:
                    9d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4E:C8:FF:39:F5:84:7E:F4:F4:20:B9:38:4E:F8:45:39:E9:B9:1A
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137382e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:b5:2f:f2:61:9d:56:ef:10:ed:1c:c1:1a:7c:42:60:e9:a5:
         b5:12:32:a3:0c:66:05:af:43:3b:eb:9b:7f:6b:9c:2d:15:73:
         42:fe:d2:2f:18:34:9b:af:50:ad:3e:e0:dd:99:53:af:08:30:
         4e:6e:71:60:0f:6f:ae:bc:f7:fb:b6:c0:1c:90:c0:69:5b:8a:
         2b:1b:33:4b:31:70:b3:87:9c:7e:9d:3f:53:72:6b:7b:38:ef:
         3d:df:e6:b3:4e:80:6a:2a:53:77:1f:ef:78:49:d5:21:81:01:
         74:1c:59:51:39:69:85:81:9a:a3:4e:e4:36:1e:06:17:d9:86:
         17:61:97:54:5a:27:7a:38:af:e5:c0:0a:d4:9d:98:3d:fe:02:
         9c:f3:92:9d:10:66:11:ee:4a:c4:18:4b:5e:db:b0:38:3e:10:
         e2:a3:ef:12:c5:65:af:72:ba:b1:4f:08:5b:45:bd:ad:13:ce:
         bf:5d:a2:5a:ea:db:79:89:08:69:cc:a6:b5:1c:31:01:e9:c9:
         28:54:95:0e:cd:89:89:64:be:9d:72:d4:ad:c2:a5:90:41:85:
         77:91:c2:82:ac:a9:28:8b:3a:f7:59:46:18:17:4d:d9:ef:cd:
         5c:6d:d0:54:60:a4:1f:da:58:39:14:c9:b0:30:f6:ba:44:fd:
         ed:23:3f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:28:55 2024 by rpki-client on console-ams.rpki-client.org