Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138332e302f32342d3234203d3e20313337333136.roa
File:                     3131362e39302e3138332e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          bv/hivnfVmLA0O4RD3D7mgqATzo0gl+RzITvfu43z24=
Subject key identifier:   7A:FD:A4:D1:B1:B5:4F:29:54:F4:17:30:15:AB:96:E3:95:45:98:2D
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       05D93BB3C162BF5291089193FBE63413B2A01584
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138332e302f32342d3234203d3e20313337333136.roa
Signing time:             Fri 15 Sep 2023 16:00:01 +0000
ROA not before:           Fri 15 Sep 2023 15:55:01 +0000
ROA not after:            Fri 13 Sep 2024 16:00:01 +0000
asID:                     137316
IP address blocks:        116.90.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 02:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d9:3b:b3:c1:62:bf:52:91:08:91:93:fb:e6:34:13:b2:a0:15:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Sep 15 15:55:01 2023 GMT
            Not After : Sep 13 16:00:01 2024 GMT
        Subject: CN=7AFDA4D1B1B54F2954F4173015AB96E39545982D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b1:96:de:28:8c:5e:8c:05:15:a0:d2:b2:ee:
                    30:e7:45:02:7f:b1:65:46:6d:35:9b:23:b3:2f:f2:
                    6a:df:f2:0e:78:15:f6:dd:58:b0:7c:0c:58:66:9b:
                    1e:40:b5:30:a6:c3:04:69:57:a7:5e:dc:d1:34:5b:
                    1e:c6:b2:d6:fb:fa:cf:b3:13:6c:8b:53:a6:c2:35:
                    10:8a:83:8e:8f:65:ae:fd:6e:9e:52:f5:70:63:2a:
                    63:7f:bc:69:f7:f0:f5:51:c6:02:6e:0b:cb:20:51:
                    82:1c:13:39:e0:47:ac:0c:1f:a8:75:f6:8b:cb:d2:
                    8a:a5:e9:be:fb:b0:1c:bb:70:52:a9:ed:5a:d7:ca:
                    55:a2:21:15:d9:1f:bd:b2:97:9c:e8:ab:11:c6:4a:
                    aa:a8:c5:71:9b:49:a4:07:22:19:50:8d:de:5b:60:
                    ae:fe:83:80:51:18:3c:14:48:79:78:47:76:b4:7c:
                    0d:4c:04:86:4b:1d:25:03:06:11:77:96:c3:f9:97:
                    0f:22:0f:7f:d0:45:2a:02:29:59:9c:47:e2:be:fa:
                    d9:d9:7a:90:01:e2:7c:57:8a:d4:4e:bc:4d:97:c9:
                    36:be:44:bf:2d:89:11:ae:4f:b5:d9:56:2b:53:83:
                    36:a3:6c:27:f0:0e:d5:f0:9e:3e:1b:3e:ed:a1:1f:
                    e5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FD:A4:D1:B1:B5:4F:29:54:F4:17:30:15:AB:96:E3:95:45:98:2D
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138332e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:df:ba:d9:75:8f:82:9d:4c:be:8b:10:06:40:7e:b1:27:c8:
         2c:f0:18:ea:88:53:23:5b:88:56:99:91:35:c0:02:5a:9a:24:
         bf:54:4b:b0:d3:d6:0d:44:b7:c4:fb:ba:ad:e8:34:a5:0d:71:
         ed:fc:6c:1d:65:24:49:81:f2:72:52:f3:22:b8:86:56:23:8e:
         0a:34:bd:92:d6:07:82:6f:2e:c5:78:dd:01:c8:f9:2b:48:16:
         2e:d6:fd:bc:0b:54:e9:30:2c:92:75:af:1b:67:e7:77:e8:d8:
         4d:99:bf:b2:78:ac:95:02:f2:f1:bf:80:e8:17:11:21:11:85:
         b7:39:d4:36:a3:97:c1:4f:c6:ab:2a:e7:9d:55:df:9b:1d:1b:
         e3:be:42:0a:28:3e:36:4a:bf:c5:c7:82:e5:47:1c:be:d9:94:
         4c:0e:d4:99:4b:d2:8f:d4:c6:f0:05:af:c0:59:be:01:ef:0a:
         e3:78:7a:fd:f2:ec:49:4f:a7:67:77:c4:98:20:87:b5:9f:33:
         a7:fd:07:3c:6c:79:84:f7:4f:32:0b:40:69:6e:93:59:b7:b7:
         56:df:74:c0:37:37:08:d2:c6:ae:07:79:67:70:a4:a1:17:3d:
         19:26:07:74:73:9d:7f:bb:2a:46:32:a8:41:51:44:b7:67:5f:
         52:b5:74:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:22:03 2024 by rpki-client on console-fra.rpki-client.org