Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31362e302f32342d3234203d3e203535363835.roa
File:                     3230332e3136312e31362e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier:          e08GLqWRhv7Ng16ezdp67HmObTnZpX4tgqpuEXJDycU=
Subject key identifier:   8D:29:6F:34:82:9D:C9:1B:6D:9E:D2:62:68:BF:D4:35:5E:BC:EC:6F
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       2F67A6667B77413D2DD9B94657A1BB1B682F2152
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31362e302f32342d3234203d3e203535363835.roa
Signing time:             Thu 15 Aug 2024 04:02:52 +0000
ROA not before:           Thu 15 Aug 2024 03:57:52 +0000
ROA not after:            Thu 14 Aug 2025 04:02:52 +0000
asID:                     55685
IP address blocks:        203.161.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:67:a6:66:7b:77:41:3d:2d:d9:b9:46:57:a1:bb:1b:68:2f:21:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Aug 15 03:57:52 2024 GMT
            Not After : Aug 14 04:02:52 2025 GMT
        Subject: CN=8D296F34829DC91B6D9ED26268BFD4355EBCEC6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:26:7b:b1:61:b1:b7:1f:8f:b6:6c:8f:b3:aa:
                    c5:eb:bc:e0:f6:c5:80:01:57:47:da:24:e5:3b:18:
                    8d:c4:d5:6a:ec:0d:0c:6c:7c:23:ad:ee:3d:c9:33:
                    75:f1:19:36:42:ba:d6:89:e7:cd:c9:8f:aa:cd:1e:
                    b8:c0:57:6e:5a:a3:1a:64:01:bf:ee:68:5f:42:0f:
                    96:74:4d:9a:2f:4a:a2:cc:f4:82:f1:cf:59:74:38:
                    a8:83:f0:de:4b:d6:5a:de:96:31:43:00:8b:a9:4e:
                    28:95:58:3d:c1:f8:14:9d:52:d8:fa:cf:aa:50:41:
                    32:94:28:de:75:b4:45:23:71:79:fd:52:64:8f:1a:
                    4a:5f:ca:b9:bd:a1:db:c9:42:20:81:d2:d1:19:ff:
                    65:8a:49:87:d1:25:a9:c2:45:c6:7a:4c:2e:53:af:
                    a5:d0:82:0d:32:af:a3:f5:4b:67:e4:a9:bf:8a:c4:
                    b2:91:14:43:74:7b:3c:d9:36:9b:c8:bd:aa:9b:3c:
                    36:76:f4:8f:f0:22:78:3d:62:ba:5b:83:c3:e5:bc:
                    60:d3:b9:ed:8c:ec:4f:b1:e8:5a:84:b8:bb:0c:35:
                    bb:c6:72:82:85:19:f6:a7:ae:8e:17:c6:b5:da:7e:
                    98:23:ed:50:0e:0e:dc:be:39:12:72:22:30:61:5e:
                    4f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:29:6F:34:82:9D:C9:1B:6D:9E:D2:62:68:BF:D4:35:5E:BC:EC:6F
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31362e302f32342d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.161.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:0f:08:01:aa:b2:89:e3:30:72:90:fa:97:5a:d2:fe:21:d4:
         55:d2:76:80:31:6e:ae:77:c5:09:e8:2e:0b:38:fd:ef:f0:46:
         84:b1:56:49:03:29:ad:db:2a:9a:72:46:9a:e8:d1:cd:28:74:
         ad:5f:ab:82:41:8e:d5:67:75:4a:92:2b:fb:64:0e:ad:3b:a1:
         7b:4e:ed:ec:28:43:78:66:3e:58:c7:65:ab:b0:b6:00:fd:f7:
         37:92:b1:e2:a4:d3:cf:85:fb:3e:4b:2b:f5:11:16:76:ea:f8:
         b4:26:a3:00:57:d2:66:12:dc:1c:89:43:ad:f3:bf:86:45:28:
         a5:fa:cd:df:51:1a:80:7a:6d:4c:69:b0:41:cc:28:63:d0:cf:
         b7:91:7b:28:94:2e:0f:9b:d5:cc:74:5f:ae:e7:95:28:30:16:
         f0:29:3a:cc:2e:52:2e:e3:16:d4:a4:c5:6a:f5:f4:c8:39:73:
         67:1f:8c:de:d4:44:d5:37:1b:04:a5:1d:66:b5:c9:92:0e:b2:
         4c:e8:e0:f6:e3:fb:63:e8:b9:8e:12:00:e0:5e:c3:fa:23:e1:
         25:87:04:2c:a7:9b:09:54:54:b7:ae:9f:9b:c8:df:67:24:0a:
         93:d7:30:35:74:be:58:2d:16:c6:d1:f4:57:4b:2d:56:db:87:
         a6:84:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:02 2024 by rpki-client on console-ams.rpki-client.org