Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37322e302f32312d3234203d3e203436303330.roa
File:                     3131362e3231322e37322e302f32312d3234203d3e203436303330.roa (raw, json)
Hash identifier:          gx3HhvD+um8M59vvpKpxIdsP+E9PUgnQxDxum3XiRT0=
Subject key identifier:   D9:01:79:3D:87:09:DA:45:1C:31:E5:6F:7C:FB:9F:73:75:99:BF:9F
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       52DD784FC23A1474E5CB69CCAFA27307A41D8B83
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37322e302f32312d3234203d3e203436303330.roa
Signing time:             Fri 13 Sep 2024 10:00:02 +0000
ROA not before:           Fri 13 Sep 2024 09:55:02 +0000
ROA not after:            Fri 12 Sep 2025 10:00:02 +0000
asID:                     46030
IP address blocks:        116.212.72.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:dd:78:4f:c2:3a:14:74:e5:cb:69:cc:af:a2:73:07:a4:1d:8b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Sep 13 09:55:02 2024 GMT
            Not After : Sep 12 10:00:02 2025 GMT
        Subject: CN=D901793D8709DA451C31E56F7CFB9F737599BF9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:92:d9:5b:71:f2:37:cb:12:ff:6d:b3:8e:
                    96:7b:e6:b6:40:86:98:d5:f2:73:2f:ea:77:ae:ea:
                    7a:33:5e:be:16:07:f0:e1:cf:2a:43:c4:94:99:b0:
                    9a:ba:8a:85:18:80:15:af:1e:91:c6:1c:54:20:fc:
                    4b:b9:3c:5a:f1:41:a0:c0:77:5f:ca:54:11:f4:73:
                    87:98:9c:26:8f:52:68:e1:c2:cb:25:ea:29:54:7b:
                    be:6e:cd:0a:71:ff:d4:95:9f:74:a4:06:6e:e4:3b:
                    f2:e9:ce:a0:b8:17:99:ca:a4:70:09:45:0f:5a:6e:
                    b1:ae:a7:42:09:7e:f3:4c:c9:86:85:60:59:74:e6:
                    9c:fd:ba:49:43:5e:4d:f8:d5:90:85:99:f8:b4:cb:
                    77:bb:6f:c1:4c:ac:05:89:3e:16:63:c0:ce:e3:29:
                    4c:f5:e0:a2:70:c2:e3:41:5a:62:31:6e:b5:38:e5:
                    78:1a:30:ff:30:da:80:d3:55:d2:bc:7f:51:21:d0:
                    fe:c9:4b:af:90:f3:99:06:4e:e4:09:6b:c0:d7:fd:
                    98:82:8f:1b:86:63:8c:24:c9:20:ea:ed:4b:d6:9b:
                    fe:27:e5:47:22:cd:3d:85:40:45:ea:32:36:1b:a4:
                    88:f6:75:ef:92:29:28:88:06:a6:d9:93:7e:7d:e8:
                    37:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:01:79:3D:87:09:DA:45:1C:31:E5:6F:7C:FB:9F:73:75:99:BF:9F
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37322e302f32312d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.212.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:3e:a2:79:ff:99:be:ad:4f:22:ee:3e:4a:1a:c3:ee:4b:a6:
         0b:0d:fb:5d:3c:4b:17:8d:f0:f6:7f:34:f1:96:7d:0f:70:1c:
         6b:e9:40:03:5a:4f:18:b3:4d:61:10:ed:2a:1a:73:04:49:a7:
         b1:21:bf:e4:de:61:b0:27:5c:62:26:51:52:87:e7:28:c4:13:
         4a:ca:68:30:04:d1:e9:74:f1:ef:bf:42:e9:f9:19:a0:7e:b5:
         b7:8f:a6:98:c8:89:b9:22:3d:af:a6:42:f7:d5:06:e0:8e:ed:
         1e:dc:50:69:fe:1f:e4:20:a3:30:3d:f2:5b:9b:46:fb:58:7b:
         ec:17:03:af:eb:16:3c:25:9c:26:8c:0d:11:06:2c:36:ea:44:
         d8:79:cf:2c:6c:e9:e4:36:b0:bf:82:f8:64:a1:8a:9d:95:7c:
         86:23:da:eb:f3:98:7c:d9:09:12:d8:d4:1d:da:d4:ba:8d:91:
         61:ae:a1:6b:8f:d9:c7:67:85:97:2b:4f:9f:3a:3b:b5:49:34:
         8e:34:ce:91:8c:50:90:b2:00:20:65:0b:40:ca:a0:24:3a:b6:
         43:bf:6c:a1:ce:bc:b6:9c:81:ac:91:39:a6:81:65:b0:ff:12:
         1d:01:66:11:42:4f:22:70:82:28:b9:98:6d:92:9a:64:39:7f:
         6f:e6:e5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org