Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3231302e37392e3230382e302f32302d3230203d3e203137393130.roa
File:                     3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (raw, json)
Hash identifier:          Elh39w1U+GBq3XiIsIcKakRKgH0ks1OQk6DpSiPwZ6E=
Subject key identifier:   66:98:CE:75:2D:97:69:95:0C:CD:A8:93:1C:58:3F:BF:55:49:8E:40
Certificate issuer:       /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Certificate serial:       5CD5D5A3EFFE737DB66D372006F5F86EC1D12266
Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3231302e37392e3230382e302f32302d3230203d3e203137393130.roa
Signing time:             Mon 01 Jul 2024 01:05:23 +0000
ROA not before:           Mon 01 Jul 2024 01:00:23 +0000
ROA not after:            Mon 30 Jun 2025 01:05:23 +0000
asID:                     17910
IP address blocks:        210.79.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl
                          rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d5:d5:a3:ef:fe:73:7d:b6:6d:37:20:06:f5:f8:6e:c1:d1:22:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
        Validity
            Not Before: Jul  1 01:00:23 2024 GMT
            Not After : Jun 30 01:05:23 2025 GMT
        Subject: CN=6698CE752D9769950CCDA8931C583FBF55498E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d5:79:c0:34:a8:35:6e:57:14:44:7d:58:c6:
                    4f:49:a6:a6:10:15:10:1b:f7:84:a9:ac:81:f1:cb:
                    68:10:cd:3e:03:a3:7f:2a:20:2c:9b:f8:9f:f1:4e:
                    6f:a3:33:43:ca:28:59:5c:3c:03:7d:b1:ec:d3:7a:
                    af:5b:74:23:e2:ff:72:94:3b:98:e2:25:36:e4:f2:
                    48:f6:bb:bc:75:d2:b4:5e:a1:90:9b:e2:f5:9e:59:
                    85:90:4d:fc:f4:5a:09:41:7c:2d:02:6c:3f:89:f6:
                    8e:88:3a:dd:17:14:64:2b:a1:60:b0:28:c4:1b:a2:
                    b8:95:d1:bd:ce:bc:ed:a7:e4:83:52:41:52:e8:94:
                    4d:8b:90:35:71:84:bb:fe:4f:43:86:c3:f3:b4:54:
                    8b:83:17:46:92:f8:4c:14:0c:6b:63:19:5f:02:48:
                    da:11:dc:6f:36:68:17:02:78:25:67:21:b6:32:f2:
                    82:a1:ec:d0:b5:11:82:23:67:b5:f9:e7:21:2d:2a:
                    2f:10:76:32:48:29:60:f6:c0:a4:4f:6a:26:64:22:
                    5a:4e:2e:e2:4d:e0:cb:70:40:80:6c:0d:76:79:a0:
                    2b:3f:57:71:cc:76:ca:ad:1a:d7:6f:91:0d:f4:ed:
                    10:6f:4f:d5:2c:82:38:5f:68:6b:0b:34:40:2c:ff:
                    ca:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:98:CE:75:2D:97:69:95:0C:CD:A8:93:1C:58:3F:BF:55:49:8E:40
            X509v3 Authority Key Identifier:
                keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3231302e37392e3230382e302f32302d3230203d3e203137393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4a:96:5f:01:05:69:0c:c6:15:90:41:21:ed:96:e5:14:9d:46:
         56:99:c5:6e:68:da:06:77:96:92:d2:25:0c:58:a9:ef:f3:98:
         4e:6b:91:da:a6:22:48:ea:5f:16:e9:48:53:51:e3:a8:f5:6e:
         6f:5f:f3:8f:3a:43:5c:f9:30:93:21:83:18:3c:ff:e8:f1:6c:
         f0:51:b2:81:a9:ac:ef:17:2b:c1:57:e9:86:2d:2c:7b:91:e6:
         4d:77:32:67:3c:3d:d6:76:fc:7f:a9:c5:fb:6d:51:8b:28:4c:
         ac:e7:59:47:1b:3a:94:ae:ea:ed:96:34:0b:33:71:e9:f2:6b:
         b8:e4:c8:a3:29:81:f1:5c:9b:d4:8b:15:64:3c:9d:2f:a1:e0:
         0e:1e:b3:df:7d:27:3c:b4:b3:4a:57:ee:7c:68:0f:57:c5:67:
         69:59:0f:8c:1c:12:1e:7a:17:02:70:ef:7a:2c:43:b9:71:d3:
         1a:0b:a3:f1:1a:78:f5:cb:f6:96:73:e8:ae:7f:ab:88:e7:1c:
         57:ec:5e:aa:f4:3d:33:67:8e:39:b7:b6:00:f2:cd:8b:b5:93:
         17:47:d2:ff:7d:21:b0:2c:36:34:c6:7b:7c:e5:09:82:5d:4b:
         99:83:1a:1f:71:32:ab:af:78:ee:df:0a:af:fe:ea:3e:9d:67:
         a9:a5:f9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org