Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138332e302f32342d3234203d3e20313337333136.roa
File:                     3131362e39302e3138332e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          iajmQrLPZpStmp+1YLvcK6bDti7chApHRDaykVu3oqc=
Subject key identifier:   BA:04:47:F1:9D:3A:A3:13:A6:27:94:4E:91:B3:F8:90:B3:24:18:AE
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       289474A0922DAAE8F4339747B2F8BFF92764AAA0
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138332e302f32342d3234203d3e20313337333136.roa
Signing time:             Fri 16 Aug 2024 16:00:01 +0000
ROA not before:           Fri 16 Aug 2024 15:55:01 +0000
ROA not after:            Fri 15 Aug 2025 16:00:01 +0000
asID:                     137316
IP address blocks:        116.90.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:94:74:a0:92:2d:aa:e8:f4:33:97:47:b2:f8:bf:f9:27:64:aa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Aug 16 15:55:01 2024 GMT
            Not After : Aug 15 16:00:01 2025 GMT
        Subject: CN=BA0447F19D3AA313A627944E91B3F890B32418AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d8:6e:ae:78:7b:d3:fc:04:af:af:d4:66:ff:
                    c3:33:df:72:1c:17:94:8f:39:09:7c:3f:ea:02:7e:
                    8a:d4:a6:07:16:f8:35:74:cf:28:e9:2b:39:25:3c:
                    eb:6a:7b:a2:11:e7:0f:38:a7:a0:54:e2:06:62:6f:
                    9f:e0:11:08:ac:27:a8:c8:a6:f5:e3:a4:9e:4a:14:
                    ef:95:e7:e1:a6:1e:dd:ac:d6:c2:5a:31:d9:ca:94:
                    62:00:70:e7:a9:7c:6d:20:53:36:b8:1e:4d:06:e8:
                    2c:c5:e4:36:e5:19:fc:b7:01:24:8a:62:15:03:19:
                    ee:33:81:de:e6:87:fb:a8:a7:29:cf:6f:6d:66:43:
                    97:57:0d:6e:fd:78:1f:72:ea:1d:17:c1:d8:4b:b8:
                    c3:9a:27:17:20:44:d1:00:28:55:63:19:c2:df:04:
                    10:b8:84:a0:9e:35:e8:4e:ff:63:d1:2c:f1:2c:fe:
                    45:eb:19:6c:5c:5b:4e:19:a8:12:02:17:c6:84:b4:
                    3b:ad:2f:7f:bb:67:cb:5b:ed:f1:7b:0a:65:8d:05:
                    37:74:16:b4:54:f4:87:bd:82:e5:48:e7:10:d0:42:
                    04:d6:3b:75:64:fe:e6:8c:bb:12:82:85:48:5b:8e:
                    40:7f:36:b0:53:73:9e:9f:b6:d6:7a:6d:60:8a:16:
                    57:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:04:47:F1:9D:3A:A3:13:A6:27:94:4E:91:B3:F8:90:B3:24:18:AE
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138332e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:a8:06:7d:fe:85:6a:12:5f:95:34:51:c9:a2:f3:b9:bc:16:
         7f:52:32:9d:4a:5c:8c:84:5d:93:e5:20:c3:1d:68:0f:da:17:
         5b:b8:d3:c7:74:2e:5e:82:35:3e:af:95:e8:c9:a7:7a:bf:80:
         26:50:29:f0:e1:70:cc:6c:8f:47:43:d9:56:54:6c:76:83:39:
         7c:4a:fa:4d:e4:f4:0f:28:1c:20:9a:9c:24:b9:a7:24:9b:61:
         6f:f2:46:2a:a4:63:17:5c:c8:38:cd:40:0f:e4:05:54:8f:66:
         3d:2f:b4:f5:8a:4e:b2:32:25:da:6a:11:a4:14:c9:52:34:87:
         03:7c:6e:79:53:3f:ac:a1:19:8e:92:92:4c:01:24:99:f1:1f:
         54:ab:05:fe:08:8c:63:a7:09:11:d9:b9:dc:c2:f2:9b:5e:14:
         01:89:66:54:bb:f6:de:f6:d7:9f:a3:ca:ae:95:8d:24:1e:0a:
         2b:ff:e4:d7:8a:2f:4c:d3:5e:34:83:b0:f5:5b:a9:07:d6:cb:
         ba:52:df:f8:1b:5a:10:12:91:b2:9e:0f:db:37:1f:80:19:8a:
         9b:7e:8c:9c:66:e0:9f:6c:25:67:97:62:25:ae:e0:ed:a6:b1:
         b6:bb:41:7c:3e:5c:ab:7c:53:ed:b0:35:2a:3d:90:ff:84:13:
         76:68:ee:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org