Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37332e302f32342d3234203d3e203436303330.roa
File:                     3131362e3231322e37332e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          LSv0+zJii1HC1fg1FYrZ1lSSdy6fFemV9KE3MB6q6pg=
Subject key identifier:   A1:6C:13:23:64:7D:1C:83:E6:5C:66:C0:B7:56:FB:0F:55:5B:1B:D8
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       45A427828C93421A72C49D4F7309383E8A192007
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37332e302f32342d3234203d3e203436303330.roa
Signing time:             Tue 29 Oct 2024 14:00:02 +0000
ROA not before:           Tue 29 Oct 2024 13:55:02 +0000
ROA not after:            Tue 28 Oct 2025 14:00:02 +0000
asID:                     46030
IP address blocks:        116.212.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a4:27:82:8c:93:42:1a:72:c4:9d:4f:73:09:38:3e:8a:19:20:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Oct 29 13:55:02 2024 GMT
            Not After : Oct 28 14:00:02 2025 GMT
        Subject: CN=A16C1323647D1C83E65C66C0B756FB0F555B1BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6d:b2:cd:aa:0d:8c:fb:81:85:d1:0d:14:8f:
                    b7:d8:3e:16:8f:06:7d:bd:96:02:71:25:a3:0a:f2:
                    c8:19:ac:0c:85:f5:45:17:00:c1:85:13:d7:81:cb:
                    a2:17:f7:1d:c6:f2:97:4a:fa:d7:a4:18:eb:36:60:
                    89:b6:a2:50:70:df:3c:f0:b0:52:94:c7:d6:aa:6a:
                    b9:8e:bb:25:24:a0:31:73:81:e8:94:0f:47:ae:c9:
                    be:ab:af:e1:06:7f:eb:f8:86:3e:de:f5:d7:9f:9b:
                    1d:0f:9c:8a:02:05:30:35:57:34:55:44:0b:e9:f8:
                    cb:9c:97:4a:41:a1:09:15:d0:d3:83:74:20:69:98:
                    0a:fb:5a:ac:55:72:44:e6:2a:10:cb:b1:9d:c2:43:
                    3d:d9:d1:13:92:cf:de:9f:30:b1:39:c4:d2:bf:35:
                    cb:3e:96:51:c4:4a:86:d9:57:5f:49:e0:45:ea:15:
                    39:2f:fb:4b:6d:5b:da:48:01:f1:ea:8a:3d:5f:70:
                    63:9e:6d:c9:91:17:66:be:0d:2b:fe:00:a8:d4:06:
                    58:36:95:19:65:ec:7f:37:4a:e6:95:92:1d:c9:77:
                    a6:4d:46:7b:69:42:a6:6a:8e:0f:45:6f:38:f8:ca:
                    0b:9f:e8:1a:c8:a2:6e:e4:6b:4a:a5:61:43:2c:17:
                    6c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6C:13:23:64:7D:1C:83:E6:5C:66:C0:B7:56:FB:0F:55:5B:1B:D8
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37332e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.212.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:26:b4:70:3e:46:c6:f6:9e:26:90:0a:d1:f4:10:97:74:67:
         f6:62:2f:9e:5f:0a:62:07:8a:e2:45:1c:b6:43:b3:32:6d:f7:
         f2:b8:8c:0a:a8:a8:46:37:0f:b3:13:20:94:0e:1f:4c:3b:14:
         b9:aa:77:ca:de:e3:90:45:eb:79:b1:24:19:77:49:08:04:e8:
         f3:45:91:7f:36:f4:69:2a:43:72:5e:17:d0:9d:18:28:71:6a:
         4d:f4:1a:c0:5f:35:78:06:0d:54:0e:59:59:ad:e9:42:50:5e:
         30:01:95:97:ea:95:29:26:ba:cd:f7:6f:5f:b3:20:4a:4d:46:
         5f:5f:60:37:7d:9f:ee:f5:a8:d9:a6:70:99:82:8b:a7:88:7b:
         ea:1f:fe:92:a7:2b:8f:7e:da:c2:24:0e:03:fd:54:f6:5a:56:
         b0:cd:91:63:05:3b:f2:bd:4c:30:51:0a:87:09:a3:ac:aa:cc:
         09:f0:0e:8d:46:e5:e5:67:46:9d:d3:e3:72:84:b6:5a:78:eb:
         aa:de:0e:53:0e:60:d9:c1:7c:3d:df:32:39:2a:37:ac:cf:47:
         d8:4c:3c:81:27:6f:75:5d:7d:66:80:ea:87:ea:8b:06:0b:f6:
         dc:74:5e:38:69:b7:67:4a:28:87:8e:cc:1b:ae:4e:8e:b3:b4:
         1d:ed:a2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org