Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS137379.roa
File:                     AS137379.roa (raw, json)
Hash identifier:          7dXVfdRe2flYlzPeAYZMg2J1g04kVYXN4VVX4HkJGgA=
Subject key identifier:   38:35:99:B2:C2:EF:7E:42:1D:9B:4C:EB:AC:DF:E9:82:8B:B9:07:1B
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       453606446A10F6ABE07A020A42011E1560F3979D
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS137379.roa
Signing time:             Thu 16 Nov 2023 14:54:37 +0000
ROA not before:           Thu 16 Nov 2023 14:49:37 +0000
ROA not after:            Thu 14 Nov 2024 14:54:37 +0000
asID:                     137379
IP address blocks:        101.255.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl
                          rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:36:06:44:6a:10:f6:ab:e0:7a:02:0a:42:01:1e:15:60:f3:97:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Nov 16 14:49:37 2023 GMT
            Not After : Nov 14 14:54:37 2024 GMT
        Subject: CN=383599B2C2EF7E421D9B4CEBACDFE9828BB9071B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:b8:5e:6c:e9:b0:34:e5:29:9a:dd:37:d1:
                    d3:11:20:a1:7a:7d:19:0d:ec:d0:8b:c5:7e:0c:95:
                    16:17:ff:47:e7:ed:ba:18:c0:63:f8:b7:fe:2c:25:
                    ea:ef:bc:d2:c9:45:dc:03:8d:ed:a4:7b:e0:42:43:
                    78:f8:e8:a2:66:82:c6:7f:48:ab:4a:db:d2:12:7f:
                    cd:26:39:bf:fc:fd:54:db:ef:8a:1a:ba:02:d2:35:
                    cc:eb:dc:87:98:21:14:2f:5f:9f:04:d4:39:9b:a6:
                    ff:99:43:64:99:13:f4:f6:56:d4:f6:26:a5:76:7b:
                    87:b7:ae:43:d8:63:c0:b3:31:16:2a:4a:07:45:d7:
                    c6:53:12:ab:6d:f3:31:72:bf:4d:a0:30:1e:82:ad:
                    2d:a8:12:1e:bf:b6:69:c8:39:13:96:d4:e1:87:16:
                    34:92:77:13:00:90:7c:14:39:48:c6:f2:92:c0:a9:
                    e1:2f:4f:af:da:9e:2c:d3:59:e2:23:50:62:f5:fa:
                    d3:b1:48:d4:bf:6b:05:54:6b:67:49:4d:f0:98:7a:
                    0e:6f:f2:5f:64:e7:c9:bb:e3:a2:bb:75:4a:18:bb:
                    1a:27:1e:e2:d7:6e:40:87:e3:1a:5d:0a:84:db:5b:
                    2e:44:36:f3:6d:5d:36:21:bd:28:78:ae:a1:ac:44:
                    91:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:35:99:B2:C2:EF:7E:42:1D:9B:4C:EB:AC:DF:E9:82:8B:B9:07:1B
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS137379.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.255.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:10:ea:88:a6:03:85:20:64:35:97:e8:e4:2e:df:51:81:1d:
         c4:cc:b7:a6:4f:70:80:95:28:71:a0:93:e5:5d:08:6a:97:f5:
         27:51:5a:af:d1:26:51:e1:53:08:e4:5f:f9:00:83:d5:17:a5:
         11:0c:d3:8f:99:90:16:15:44:a1:15:e5:7e:b9:86:4e:15:1a:
         a6:ce:45:ad:89:a8:8f:17:5b:1b:d1:59:28:8b:03:a4:81:88:
         53:a0:5d:a4:21:b2:58:9d:bf:22:6a:01:7f:2d:e5:32:68:b0:
         d0:c5:ac:63:74:28:a5:78:ca:1d:49:df:55:d3:b6:15:ad:45:
         0a:28:6e:94:5b:d4:23:25:86:76:41:62:a2:e0:9c:e2:5b:d4:
         4d:b9:67:b0:49:93:7d:6c:cd:ca:bf:36:60:36:e4:65:59:23:
         95:d6:10:9f:fd:16:2c:83:19:6a:5a:7b:f7:d6:5e:3c:90:6a:
         50:ea:a8:82:36:70:a3:eb:6e:69:21:53:81:df:92:aa:f1:d1:
         5c:c3:27:31:99:48:0c:e5:78:78:d5:f6:66:e2:a8:48:6c:cd:
         59:59:02:6b:3f:0b:fd:1c:e1:b3:e5:e5:92:a8:ae:42:62:52:
         70:68:f1:3d:de:d7:e0:46:3a:fb:47:70:b3:bc:e2:50:d1:19:
         44:8d:2a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:52:56 2024 by rpki-client on console-ams.rpki-client.org