Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137392e302f32342d3234203d3e20313337333136.roa
File:                     3131362e39302e3137392e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          r+yZnC89yXZAyW9cHlTZQ6TV6ZT/M6hPPl+CNk/m6zU=
Subject key identifier:   D1:F7:5F:19:5A:52:AE:69:BB:67:F8:9E:70:A9:04:69:90:B1:7A:A3
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       0B2A78E01662FEA9C106AEF2728BA3117D6D81BB
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137392e302f32342d3234203d3e20313337333136.roa
Signing time:             Sun 18 Aug 2024 09:02:19 +0000
ROA not before:           Sun 18 Aug 2024 08:57:19 +0000
ROA not after:            Sun 17 Aug 2025 09:02:19 +0000
asID:                     137316
IP address blocks:        116.90.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2a:78:e0:16:62:fe:a9:c1:06:ae:f2:72:8b:a3:11:7d:6d:81:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Aug 18 08:57:19 2024 GMT
            Not After : Aug 17 09:02:19 2025 GMT
        Subject: CN=D1F75F195A52AE69BB67F89E70A9046990B17AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:25:42:1c:ec:a0:88:50:bd:b1:1b:20:26:18:
                    27:37:b5:f5:ee:c7:48:25:0f:d2:6a:61:f9:4d:93:
                    e5:0c:0f:5b:8e:67:c5:84:60:fc:02:34:62:b2:e6:
                    8b:60:30:8f:49:c2:24:be:69:15:97:5a:ac:88:08:
                    8a:bc:34:ec:df:23:37:d2:66:08:70:be:05:96:74:
                    9d:fc:cc:e5:46:03:06:6e:6c:de:b1:0f:d1:6e:3e:
                    81:91:a2:2c:95:82:6d:6c:d3:e0:bc:4e:eb:2f:77:
                    71:0c:25:4f:2d:3c:8b:55:44:e8:33:78:2e:e5:6a:
                    88:31:4f:52:6a:ce:3b:5f:b1:90:ef:d4:e2:e9:6b:
                    cc:c8:ea:0c:29:7f:6e:80:49:e1:b6:07:c1:22:98:
                    4d:40:68:ad:63:f9:16:e8:11:d3:43:bf:11:4d:b7:
                    bd:db:2a:38:b7:44:f6:a2:17:2c:31:39:83:c0:1e:
                    e1:3e:07:84:72:50:16:9a:26:59:fa:ec:52:59:ba:
                    ea:b8:f3:ae:71:5f:b9:f8:93:bd:2d:9c:a4:99:b9:
                    0a:a8:af:e8:78:36:33:78:22:0a:2f:32:ee:a4:60:
                    e6:49:87:c1:c1:d1:c8:fb:c6:78:fd:a0:9a:70:d1:
                    18:7c:16:be:d1:80:40:60:4e:20:7f:b6:94:ac:a4:
                    f8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F7:5F:19:5A:52:AE:69:BB:67:F8:9E:70:A9:04:69:90:B1:7A:A3
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137392e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:5b:07:8d:d7:5a:96:d5:fe:47:c4:42:19:39:96:4c:a9:15:
         98:08:46:8d:50:02:f3:34:ab:99:72:b5:76:31:3e:d0:03:74:
         3a:73:18:d8:8d:c5:a2:07:fb:7e:9d:ac:23:f6:d8:8b:e2:66:
         e0:79:44:d1:01:80:6f:65:bb:d6:a3:6a:cb:61:65:4e:d7:04:
         3c:65:7d:b7:31:16:4b:83:27:8c:71:ff:cc:4a:39:0f:45:7c:
         2f:dd:ca:ae:c1:c8:67:45:b3:3e:5c:a8:3a:c6:9b:fa:86:a7:
         73:60:94:87:59:cd:c3:59:e1:c9:83:26:15:58:b6:80:b5:e9:
         58:65:b7:75:bc:1a:e3:90:27:1d:bd:02:50:7b:b1:73:d3:48:
         fc:b9:e4:cf:10:f9:da:8c:da:fb:14:a8:0d:28:70:ba:8c:5b:
         05:0a:ee:ca:e4:e1:c5:06:49:b8:30:15:99:09:87:60:00:10:
         99:78:83:f6:68:d1:0f:79:67:16:84:57:a4:5d:2d:4e:2f:fe:
         56:d2:75:5a:3d:93:bf:0a:61:b1:e4:6b:b9:97:3d:32:8d:a7:
         f1:b7:3a:42:51:f8:85:cc:35:29:e1:e0:0c:04:f9:48:3d:d5:
         4a:6a:ee:1a:d4:5c:27:28:9a:b8:bf:a8:69:f4:aa:4c:3b:90:
         a8:c9:bc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org