Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138322e302f32342d3234203d3e20313337333136.roa
File:                     3131362e39302e3138322e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          OhRr4/F3RTDZEnM30gCGIvbHqtVcCT5JqtOjl8JM1SA=
Subject key identifier:   3C:62:2C:8F:D8:49:8B:E7:03:A4:1A:7E:F0:C3:45:CA:46:E0:18:1C
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       7CD4F247B9D5585D993A8172FBA9775C60726111
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138322e302f32342d3234203d3e20313337333136.roa
Signing time:             Fri 15 Sep 2023 16:00:00 +0000
ROA not before:           Fri 15 Sep 2023 15:55:00 +0000
ROA not after:            Fri 13 Sep 2024 16:00:00 +0000
asID:                     137316
IP address blocks:        116.90.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 02:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d4:f2:47:b9:d5:58:5d:99:3a:81:72:fb:a9:77:5c:60:72:61:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Sep 15 15:55:00 2023 GMT
            Not After : Sep 13 16:00:00 2024 GMT
        Subject: CN=3C622C8FD8498BE703A41A7EF0C345CA46E0181C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c8:fd:50:1d:21:a2:58:5a:33:34:3e:8e:02:
                    f4:1e:6f:47:76:72:fb:76:40:02:86:70:a7:07:9b:
                    ff:f7:f3:03:11:7b:f2:73:a8:95:13:f4:b7:ad:eb:
                    ee:9b:3f:6e:84:04:c2:c0:a2:ac:14:f8:f7:40:5c:
                    ae:07:87:15:a5:d3:64:bc:30:ae:15:aa:a8:68:56:
                    ed:4d:fd:20:f5:62:11:aa:a9:9c:51:19:0e:08:2c:
                    d7:06:5d:22:af:b1:a1:bf:ce:22:16:27:2f:d3:00:
                    54:be:b7:de:ea:90:5f:44:29:04:38:e1:ef:7d:da:
                    65:8c:5f:10:34:f3:38:8a:54:0b:2a:c8:5f:3f:20:
                    ac:69:07:d6:4c:f4:c0:18:1c:d6:12:69:35:bc:00:
                    8d:2d:dd:8a:7c:f2:82:20:64:12:27:b4:54:3b:51:
                    fd:c7:3e:fe:64:56:55:da:dc:0f:d7:a3:4d:4b:2c:
                    28:52:f9:48:d6:87:0c:b8:9a:77:46:86:4f:9d:2b:
                    c1:81:d9:f1:1f:ac:14:56:51:3a:32:28:71:f1:36:
                    64:fa:14:ec:55:2a:8e:aa:c9:32:30:fe:02:ab:12:
                    3b:2a:7e:17:e2:4a:14:a8:ae:e0:54:39:62:74:c4:
                    93:c4:3c:c0:a0:48:a6:09:2e:3f:3e:e7:b1:2d:ba:
                    a2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:62:2C:8F:D8:49:8B:E7:03:A4:1A:7E:F0:C3:45:CA:46:E0:18:1C
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138322e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:47:23:2f:90:78:37:43:66:29:f2:fd:99:0b:bb:3b:59:db:
         cd:2c:6f:54:49:81:da:cf:ca:5a:cc:86:1a:d5:53:e8:28:f4:
         4a:76:75:a3:cb:9a:44:d9:62:66:b9:4c:a2:96:90:57:88:55:
         9a:b5:31:89:70:1f:b8:88:74:35:65:78:3d:50:6e:53:8b:16:
         2e:f1:6c:6b:4a:a8:b6:e6:3e:5d:3f:8b:05:e1:2d:24:47:7b:
         9a:60:09:24:42:21:83:e0:84:52:06:2f:02:df:51:30:c5:1e:
         40:f7:5b:6c:bb:d9:51:eb:9c:2b:44:9f:d6:7e:df:b4:a1:cf:
         2f:64:d4:75:46:64:23:d7:d7:a3:bb:62:1b:7a:66:5a:9b:b5:
         0a:76:6b:44:fe:a5:90:5e:c8:68:d1:ee:41:bf:72:cc:1f:19:
         34:dc:72:18:3a:3e:8a:b3:b6:b4:27:b4:11:14:86:d1:1b:b1:
         97:6c:03:3c:cf:d5:48:a5:27:db:cd:1e:98:94:71:99:dc:dd:
         33:10:42:78:80:15:dd:ea:20:c3:86:c3:76:fb:d2:70:c9:6c:
         ff:92:75:91:b8:5a:da:67:0c:6a:d1:93:58:7b:69:77:3f:f7:
         ff:6c:ef:2b:d7:ec:24:cc:9d:33:d7:8a:68:44:50:f7:f9:dc:
         b8:e3:79:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:28:55 2024 by rpki-client on console-ams.rpki-client.org