Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS137379.roa
File:                     AS137379.roa (raw, json)
Hash identifier:          Z4MIJUqMOvirE2SHUjhYz08IiUGc/JsWL19e9jt5EIs=
Subject key identifier:   A2:DC:33:33:A9:62:6C:AC:77:FC:AF:15:D0:8E:49:DC:7B:40:06:7E
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       34F2A1BE60AB6B74D87FE054CD506E3F0B28654E
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS137379.roa
Signing time:             Thu 17 Oct 2024 15:00:02 +0000
ROA not before:           Thu 17 Oct 2024 14:55:02 +0000
ROA not after:            Thu 16 Oct 2025 15:00:02 +0000
asID:                     137379
IP address blocks:        101.255.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl
                          rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f2:a1:be:60:ab:6b:74:d8:7f:e0:54:cd:50:6e:3f:0b:28:65:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Oct 17 14:55:02 2024 GMT
            Not After : Oct 16 15:00:02 2025 GMT
        Subject: CN=A2DC3333A9626CAC77FCAF15D08E49DC7B40067E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3e:fb:d0:4a:e7:ed:53:4f:5c:50:ea:26:00:
                    26:31:28:ba:0e:f8:af:f7:71:45:d1:ff:80:8c:d4:
                    74:81:6f:1c:d5:e6:e4:73:07:ba:c7:36:79:9c:a3:
                    47:c7:37:8e:30:85:86:26:8c:dc:3d:97:6f:14:74:
                    2c:3e:93:e2:0c:65:d7:4b:8f:d5:57:fb:44:5e:81:
                    2d:8a:27:56:33:70:a3:b8:0c:ee:fa:fc:58:d3:c4:
                    71:c3:8d:cb:81:f2:4a:e4:f0:5d:fc:e3:df:8e:6a:
                    c7:5d:21:ef:e2:79:ba:d8:d3:92:39:2a:0d:90:19:
                    42:2e:33:61:09:89:b0:ef:f7:d1:38:49:e5:22:41:
                    27:33:b9:d7:d4:c1:ef:aa:a4:ae:97:48:b9:7c:11:
                    b6:e2:b0:9d:96:8f:80:01:c9:5f:c2:e1:63:f2:d8:
                    b7:d0:1e:4b:2c:9f:bf:53:e8:7d:15:e7:ca:c3:9a:
                    65:20:66:3f:f6:a2:59:c7:1d:ce:b7:ba:2b:b3:78:
                    23:90:5d:89:ac:14:a5:5f:9c:3a:59:89:a6:00:2a:
                    3f:63:13:8d:86:19:e8:b3:56:de:c2:0f:2a:4a:3b:
                    55:01:81:35:e5:9d:a4:c0:95:b3:ad:d1:19:a7:b3:
                    c5:c3:6c:e2:94:ae:c1:05:8b:ff:a5:be:e3:cc:76:
                    4a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DC:33:33:A9:62:6C:AC:77:FC:AF:15:D0:8E:49:DC:7B:40:06:7E
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS137379.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.255.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:59:f7:1c:77:91:4b:7d:16:04:7d:a0:f9:79:ce:ee:65:26:
         ad:9e:c1:2a:06:f3:49:7f:86:5e:f1:98:94:0d:86:99:bf:fb:
         18:6b:25:c2:e6:32:b3:09:7e:85:0d:bd:cf:15:39:ca:af:75:
         7f:e0:f5:f1:c2:8a:fb:72:45:d2:60:63:14:98:a3:dc:58:b9:
         48:83:83:77:53:1a:c5:01:07:6c:16:cf:6f:8b:ff:7e:1c:8e:
         48:52:1b:df:1c:cd:f9:92:05:a9:f3:94:b6:30:e2:77:ee:aa:
         38:e0:cd:d2:0d:dc:02:20:a3:b4:a7:cb:46:1d:9e:51:b6:30:
         7f:22:7d:b6:2c:90:0d:6d:36:62:88:92:05:15:53:fb:19:b7:
         e6:e9:3b:82:75:df:63:eb:0a:de:7c:e9:27:7e:22:8a:06:96:
         4a:61:eb:c1:35:d9:39:d7:c5:f7:43:be:cf:19:24:4f:b4:92:
         98:eb:cb:14:b7:a4:29:7a:1e:20:67:1e:c1:ce:da:52:18:1e:
         48:bb:59:61:eb:09:fd:c6:af:69:a4:dd:e8:01:6a:fa:22:e9:
         a7:56:26:d3:27:50:35:44:aa:07:44:94:fc:12:d4:5b:22:59:
         aa:4a:b2:4f:f0:53:06:b9:04:37:35:4b:8c:40:2d:0f:a1:d0:
         38:52:33:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org