Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37322e302f32342d3234203d3e203436303330.roa
File:                     3131362e3231322e37322e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          bPRucN9mP+x6XcRUCqS2LOfuwAQtoYyOOJN3L9ZeYEk=
Subject key identifier:   A5:7D:84:9C:DA:DA:A6:92:A8:8C:5C:4E:49:C2:22:91:9A:76:49:87
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       5EF6806EA13BDDBE6117B65BEB3B5171320810DC
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37322e302f32342d3234203d3e203436303330.roa
Signing time:             Thu 01 Feb 2024 10:25:49 +0000
ROA not before:           Thu 01 Feb 2024 10:20:49 +0000
ROA not after:            Thu 30 Jan 2025 10:25:49 +0000
asID:                     46030
IP address blocks:        116.212.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f6:80:6e:a1:3b:dd:be:61:17:b6:5b:eb:3b:51:71:32:08:10:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Feb  1 10:20:49 2024 GMT
            Not After : Jan 30 10:25:49 2025 GMT
        Subject: CN=A57D849CDADAA692A88C5C4E49C222919A764987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:be:3c:79:95:30:7e:7c:96:65:e9:f7:75:07:
                    19:c4:41:77:9e:a9:2b:60:3b:8e:51:77:c3:e4:61:
                    c7:1e:76:b6:b6:ed:5d:a1:0b:ca:a7:54:4c:a6:83:
                    67:e8:b3:51:66:e7:8e:f2:bf:c6:f1:fc:78:c3:70:
                    57:fe:09:8a:d5:75:37:83:83:c1:3d:8a:23:3b:18:
                    43:1a:7b:50:fc:33:c2:b1:81:01:31:2e:13:76:04:
                    3b:e5:6e:98:75:91:b9:e0:8f:8c:fb:bc:90:0a:6b:
                    ab:62:ba:ae:ca:f3:ec:b5:94:51:1e:69:41:c4:24:
                    d1:72:ab:87:32:fd:18:f6:44:4d:e5:6f:d7:ab:87:
                    9e:d2:8b:3c:f4:94:e5:ff:1a:6b:0c:2d:1a:b7:89:
                    af:d7:2a:35:0c:5d:c5:78:a3:ff:3e:e3:db:fb:58:
                    bd:42:43:c9:91:14:97:92:e0:4f:a0:dc:ed:48:08:
                    12:83:d6:4e:f3:c4:0a:85:59:93:76:9f:f4:26:4f:
                    0c:2b:a6:d6:b3:6e:6e:32:1a:5c:75:86:ea:7a:7c:
                    6d:44:1d:e4:dd:9c:6e:c0:98:e6:bf:38:eb:a1:d9:
                    ad:86:b6:73:be:0c:02:18:ff:7b:9a:d6:13:47:c0:
                    87:09:30:e9:43:6b:ca:3c:91:89:d5:71:c9:c7:14:
                    1c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7D:84:9C:DA:DA:A6:92:A8:8C:5C:4E:49:C2:22:91:9A:76:49:87
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37322e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.212.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:03:6d:59:8b:c2:49:0d:e6:80:bf:b0:e8:de:9c:43:4a:e1:
         0d:26:07:73:76:df:7a:91:ea:c7:a8:c4:da:c1:3c:f0:93:47:
         e0:27:b1:cc:3c:4c:7b:5f:7f:92:ff:5a:e6:bd:13:1c:7d:23:
         7b:cb:a4:30:4a:8f:54:4b:62:f5:b0:76:3d:21:55:38:89:ea:
         ef:23:96:38:a5:f4:bd:6b:f3:49:c6:8f:04:8f:de:66:98:a1:
         16:8b:b2:d7:72:e0:be:07:5b:91:5e:24:6f:15:e8:fd:12:6e:
         70:f2:15:02:5d:d3:af:8e:4e:c2:d6:ca:a5:2c:2c:80:01:40:
         13:ba:a7:98:89:aa:15:b7:75:3f:c2:a1:b5:91:b5:c6:9b:45:
         81:14:29:28:ae:75:1e:3d:4d:0d:8a:32:6b:4a:21:76:de:ac:
         61:a5:52:ba:67:b4:34:a8:9b:8f:ff:ee:7b:b3:b3:2e:55:b0:
         3f:88:ed:0c:64:dc:d4:98:70:c8:42:a5:5a:e3:cd:b8:49:3d:
         5c:83:8c:81:55:c9:8e:bd:65:a5:f1:b4:c1:ca:c3:db:48:fa:
         cd:8f:de:76:70:e8:f7:ec:4c:0c:28:3b:dd:e1:ef:02:f0:f5:
         45:85:f5:46:fa:77:cb:78:5b:5a:fa:27:38:f1:6d:7f:65:39:
         28:19:25:12
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXvaAbqE73b5hF7Zb6ztRcTIIENwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0
MEZCMDU1NjAeFw0yNDAyMDExMDIwNDlaFw0yNTAxMzAxMDI1NDlaMDMxMTAvBgNV
BAMTKEE1N0Q4NDlDREFEQUE2OTJBODhDNUM0RTQ5QzIyMjkxOUE3NjQ5ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTvjx5lTB+fJZl6fd1BxnEQXee
qStgO45Rd8PkYccedra27V2hC8qnVEymg2fos1Fm547yv8bx/HjDcFf+CYrVdTeD
g8E9iiM7GEMae1D8M8KxgQExLhN2BDvlbph1kbngj4z7vJAKa6tiuq7K8+y1lFEe
aUHEJNFyq4cy/Rj2RE3lb9erh57Sizz0lOX/GmsMLRq3ia/XKjUMXcV4o/8+49v7
WL1CQ8mRFJeS4E+g3O1ICBKD1k7zxAqFWZN2n/QmTwwrptazbm4yGlx1hup6fG1E
HeTdnG7AmOa/OOuh2a2GtnO+DAIY/3ua1hNHwIcJMOlDa8o8kYnVccnHFByJAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUpX2EnNrappKojFxOScIikZp2SYcwHwYDVR0j
BBgwFoAUVmDbOBHBZGrB+Luplql1e0D7BVYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDFkNTk2Yy0wOWUzLTQ2MjEtYTYzYi0yMGE1MTNjZDQ4YjkvMC81NjYwREIzODEx
QzE2NDZBQzFGOEJCQTk5NkE5NzU3QjQwRkIwNTU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0MEZC
MDU1Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMWQ1OTZjLTA5ZTMtNDYyMS1h
NjNiLTIwYTUxM2NkNDhiOS8wLzMxMzEzNjJlMzIzMTMyMmUzNzMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHTUSDANBgkqhkiG
9w0BAQsFAAOCAQEAfwNtWYvCSQ3mgL+w6N6cQ0rhDSYHc3bfepHqx6jE2sE88JNH
4CexzDxMe19/kv9a5r0THH0je8ukMEqPVEti9bB2PSFVOInq7yOWOKX0vWvzScaP
BI/eZpihFouy13LgvgdbkV4kbxXo/RJucPIVAl3Tr45OwtbKpSwsgAFAE7qnmImq
Fbd1P8KhtZG1xptFgRQpKK51Hj1NDYoya0ohdt6sYaVSume0NKibj//ue7OzLlWw
P4jtDGTc1JhwyEKlWuPNuEk9XIOMgVXJjr1lpfG0wcrD20j6zY/ednDo9+xMDCg7
3eHvAvD1RYX1Rvp3y3hbWvonOPFtf2U5KBklEg==
-----END CERTIFICATE-----
Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org