Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138302e302f32342d3234203d3e20313337333136.roa
File:                     3131362e39302e3138302e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          LvFCmg9LSBaEAN2eFrO+pERViNL6xGEnihDcdLpvJbE=
Subject key identifier:   2B:3E:C0:E4:EC:5D:36:D8:5C:8A:E1:7E:49:91:02:F1:99:6D:E5:E6
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       4720587438A57628FCF8AABF7C7B91959D7B7BAC
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138302e302f32342d3234203d3e20313337333136.roa
Signing time:             Fri 15 Sep 2023 14:00:00 +0000
ROA not before:           Fri 15 Sep 2023 13:55:00 +0000
ROA not after:            Fri 13 Sep 2024 14:00:00 +0000
asID:                     137316
IP address blocks:        116.90.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 02:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:20:58:74:38:a5:76:28:fc:f8:aa:bf:7c:7b:91:95:9d:7b:7b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Sep 15 13:55:00 2023 GMT
            Not After : Sep 13 14:00:00 2024 GMT
        Subject: CN=2B3EC0E4EC5D36D85C8AE17E499102F1996DE5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:58:03:53:8b:dd:37:fe:c7:9f:84:5a:59:dd:
                    bd:b4:dc:f7:29:cb:c7:81:d6:55:14:1e:68:a4:e6:
                    08:e6:6b:81:54:64:f0:ff:32:33:2d:c7:e1:e8:16:
                    35:df:67:ce:dd:85:d4:75:60:68:00:ec:5f:0e:75:
                    47:cf:db:02:ce:a2:88:72:03:b7:e5:ab:4e:0e:65:
                    54:97:fb:35:2a:81:4e:92:2f:e8:1f:22:c0:26:97:
                    25:c8:1b:54:61:8b:23:59:25:2c:47:4f:cf:7a:ad:
                    28:ae:18:34:b8:24:20:4b:59:e5:2b:d0:4b:39:fb:
                    8f:55:b7:b1:d8:a2:10:5b:09:b5:17:63:c8:e9:a4:
                    49:ef:68:f9:38:b1:37:dd:65:8c:f7:78:24:15:6d:
                    d1:54:74:b5:84:81:5c:fd:a1:42:3c:87:30:8a:eb:
                    54:55:79:c0:4c:0c:d5:68:76:68:e7:69:9c:04:af:
                    31:3b:8e:dd:a5:17:7a:a6:3e:5b:0b:9a:9b:b9:fe:
                    53:23:20:64:3f:1b:2e:56:2b:51:1d:90:05:3b:9b:
                    30:bc:15:14:a5:21:84:07:a7:79:5a:7b:cb:69:40:
                    86:4c:0b:d2:88:81:53:63:f1:40:63:21:96:c8:38:
                    f2:fb:23:20:2c:ee:88:f9:a4:ed:17:c2:d7:88:f0:
                    38:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3E:C0:E4:EC:5D:36:D8:5C:8A:E1:7E:49:91:02:F1:99:6D:E5:E6
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138302e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:1c:e7:41:1b:99:ec:c7:b5:c3:7e:dc:42:11:d2:76:cc:a2:
         03:39:f1:b2:8f:1c:07:fb:7a:85:7f:da:90:4a:47:5b:67:b6:
         1a:2a:27:a3:3c:8f:b7:60:0b:0a:3c:7c:8c:0d:f6:ee:ac:f4:
         55:7b:d2:0b:7f:3f:86:45:6a:31:2c:75:02:7a:76:14:ba:24:
         62:56:f5:3d:7e:64:3c:e7:a6:82:83:e0:f1:91:38:e1:c8:11:
         b6:7d:b9:ed:dd:fd:da:10:f0:d0:f7:30:be:83:9f:36:5a:99:
         8e:7a:62:ef:07:07:ca:1a:0c:99:3f:dc:6c:8b:5c:8e:f1:24:
         2d:18:48:1a:04:6f:fa:ea:db:bb:02:99:b7:f1:b0:2c:c7:1a:
         39:ce:a7:e8:9d:00:8a:75:b0:47:1d:fa:d6:0b:4b:0c:a8:c2:
         c5:b5:ff:bc:f8:04:6a:e3:ea:0d:f2:e5:30:8f:3a:3a:96:56:
         f7:78:d5:2d:26:07:71:c1:b1:21:6c:39:95:5a:f9:50:35:da:
         bc:7d:af:c5:7e:76:66:36:f5:4e:e0:ef:3b:51:a8:ce:24:7d:
         dd:ba:ce:c7:1b:fd:2e:70:c1:8f:9a:3e:97:84:c1:ca:9c:3d:
         de:64:38:63:96:d3:e7:b6:42:d5:a2:2b:b0:c6:de:73:89:77:
         47:a3:0b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:22:03 2024 by rpki-client on console-fra.rpki-client.org