Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/3131362e302e302e302f32312d3234203d3e203539313339.roa
File:                     3131362e302e302e302f32312d3234203d3e203539313339.roa (raw, json)
Hash identifier:          B3x9ZS+tmVLcqM2BgTYbBHoFZgvZz8neI98nHr1drrc=
Subject key identifier:   B5:99:A8:A9:F1:F2:39:B1:67:86:C5:97:BA:D3:71:1A:AF:E1:77:AE
Certificate issuer:       /CN=EB7AB53449E52996F1539393C3DA704C6F12F359
Certificate serial:       352E3B0DD8D9C9210B83E4BAC3C74D78CDAE9EDD
Authority key identifier: EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/3131362e302e302e302f32312d3234203d3e203539313339.roa
Signing time:             Thu 30 May 2024 06:01:13 +0000
ROA not before:           Thu 30 May 2024 05:56:13 +0000
ROA not after:            Thu 29 May 2025 06:01:13 +0000
asID:                     59139
IP address blocks:        116.0.0.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl
                          rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2e:3b:0d:d8:d9:c9:21:0b:83:e4:ba:c3:c7:4d:78:cd:ae:9e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB7AB53449E52996F1539393C3DA704C6F12F359
        Validity
            Not Before: May 30 05:56:13 2024 GMT
            Not After : May 29 06:01:13 2025 GMT
        Subject: CN=B599A8A9F1F239B16786C597BAD3711AAFE177AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9c:90:b6:f0:b0:bf:5a:17:5d:70:73:81:2d:
                    34:c1:28:d6:93:e5:f4:fd:fb:39:64:87:37:e4:1c:
                    d1:45:c7:53:ea:a9:e7:df:a7:d4:bc:bb:2b:75:fa:
                    77:d2:bb:a8:e1:1d:3f:e9:ff:6e:5c:ec:06:30:c2:
                    d0:04:ef:1e:6a:04:af:22:7f:da:ba:45:f1:00:1c:
                    8f:5b:76:38:e4:f6:96:2c:07:53:37:f2:da:4d:d3:
                    de:a9:b5:fe:2c:a6:9c:84:22:42:d9:77:f2:29:63:
                    72:3c:e0:da:34:5c:5b:7a:6c:03:28:8b:1c:fa:ff:
                    3c:34:67:ff:04:7b:78:e3:a2:67:aa:7e:23:2d:f0:
                    dd:d4:7d:02:bc:7d:7f:cc:2e:94:5c:be:64:00:a3:
                    78:8b:08:18:03:ab:13:b9:6e:1b:3b:94:7f:3b:9c:
                    16:52:b2:ea:6b:cf:10:41:6d:58:d2:ee:0c:ed:6a:
                    22:b8:86:bb:c4:01:5c:36:0f:78:11:12:6a:4f:04:
                    9c:04:90:f2:00:8c:92:da:7f:39:22:7c:3d:9d:b9:
                    72:5f:92:6e:ac:0e:39:be:5d:3c:45:43:9b:9b:33:
                    df:d0:bf:c5:a2:0b:db:0e:8a:fd:71:57:a4:f9:bb:
                    df:20:b4:c8:ec:fe:ed:5b:fb:82:73:4f:2a:26:79:
                    b7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:99:A8:A9:F1:F2:39:B1:67:86:C5:97:BA:D3:71:1A:AF:E1:77:AE
            X509v3 Authority Key Identifier:
                keyid:EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/3131362e302e302e302f32312d3234203d3e203539313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.0.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:20:97:7b:d9:a2:69:f5:15:03:b1:92:fa:81:97:f3:01:63:
         41:c8:03:d8:11:dc:c2:23:3d:09:11:7a:7c:ae:66:a8:ab:bd:
         af:68:a9:90:75:0d:f4:31:27:b9:2b:0b:5b:a9:b3:7f:68:c7:
         c4:34:82:e2:66:a1:e7:c8:4b:03:2e:6c:7f:3d:14:0d:58:fb:
         43:86:94:39:ec:e9:de:8a:78:7f:62:3d:7c:53:ac:61:9b:80:
         47:1d:bc:d7:3c:84:92:ed:eb:b2:b2:63:bc:f5:cf:6a:16:38:
         f3:49:48:95:84:e6:ec:30:e8:ff:15:d0:14:96:0b:69:cc:ba:
         43:bb:b4:1a:e3:0a:b1:21:79:f7:b2:b3:14:7c:e2:16:a3:ee:
         58:ef:d4:c9:8a:19:08:f2:a4:e9:72:2e:c5:dc:b9:01:c8:61:
         25:5b:f0:7e:a5:34:59:93:90:6d:79:42:6f:00:ad:f4:08:84:
         70:bf:94:03:39:72:f4:ee:fe:d4:51:4e:40:b4:4d:e2:ec:74:
         16:85:f5:2c:2e:f7:bf:93:19:8c:6c:66:67:0c:ec:46:7a:d0:
         3a:c6:2d:8c:26:db:0a:64:c4:f3:13:7f:c9:95:ef:93:bd:16:
         af:81:cf:65:01:5a:7c:1b:7b:88:cb:67:41:02:db:e6:71:2a:
         33:94:36:31
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUNS47DdjZySELg+S6w8dNeM2unt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2
RjEyRjM1OTAeFw0yNDA1MzAwNTU2MTNaFw0yNTA1MjkwNjAxMTNaMDMxMTAvBgNV
BAMTKEI1OTlBOEE5RjFGMjM5QjE2Nzg2QzU5N0JBRDM3MTFBQUZFMTc3QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbnJC28LC/WhddcHOBLTTBKNaT
5fT9+zlkhzfkHNFFx1Pqqeffp9S8uyt1+nfSu6jhHT/p/25c7AYwwtAE7x5qBK8i
f9q6RfEAHI9bdjjk9pYsB1M38tpN096ptf4sppyEIkLZd/IpY3I84No0XFt6bAMo
ixz6/zw0Z/8Ee3jjomeqfiMt8N3UfQK8fX/MLpRcvmQAo3iLCBgDqxO5bhs7lH87
nBZSsuprzxBBbVjS7gztaiK4hrvEAVw2D3gREmpPBJwEkPIAjJLafzkifD2duXJf
km6sDjm+XTxFQ5ubM9/Qv8WiC9sOiv1xV6T5u98gtMjs/u1b+4JzTyomebdDAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUtZmoqfHyObFnhsWXutNxGq/hd64wHwYDVR0j
BBgwFoAU63q1NEnlKZbxU5OTw9pwTG8S81kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZThjZDk3ZS01NmY1LTRjYTUtYTg1Yy01NWEzMjNmMDYwOGMvMC9FQjdBQjUzNDQ5
RTUyOTk2RjE1MzkzOTNDM0RBNzA0QzZGMTJGMzU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2RjEy
RjM1OS5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2Q5N2UtNTZmNS00Y2E1LWE4
NWMtNTVhMzIzZjA2MDhjLzAvMzEzMTM2MmUzMDJlMzAyZTMwMmYzMjMxMmQzMjM0
MjAzZDNlMjAzNTM5MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDdAAAMA0GCSqGSIb3DQEBCwUA
A4IBAQAsIJd72aJp9RUDsZL6gZfzAWNByAPYEdzCIz0JEXp8rmaoq72vaKmQdQ30
MSe5KwtbqbN/aMfENILiZqHnyEsDLmx/PRQNWPtDhpQ57Oneinh/Yj18U6xhm4BH
HbzXPISS7euysmO89c9qFjjzSUiVhObsMOj/FdAUlgtpzLpDu7Qa4wqxIXn3srMU
fOIWo+5Y79TJihkI8qTpci7F3LkByGElW/B+pTRZk5BteUJvAK30CIRwv5QDOXL0
7v7UUU5AtE3i7HQWhfUsLve/kxmMbGZnDOxGetA6xi2MJtsKZMTzE3/Jle+TvRav
gc9lAVp8G3uIy2dBAtvmcSozlDYx
-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org