Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37382e302f32342d3234203d3e203436303330.roa
File:                     3131362e3231322e37382e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          NIQo7CfRNHBRvaWdmtpKev1w+fqnLchma1nB/VLqXBM=
Subject key identifier:   03:04:C2:97:45:78:85:06:CE:0E:0A:E8:73:22:6A:1D:5C:C7:89:B4
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       637EECD5990F82F10921BDFC827C000A99626E96
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37382e302f32342d3234203d3e203436303330.roa
Signing time:             Wed 29 Nov 2023 07:56:11 +0000
ROA not before:           Wed 29 Nov 2023 07:51:11 +0000
ROA not after:            Wed 27 Nov 2024 07:56:11 +0000
asID:                     46030
IP address blocks:        116.212.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 06:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7e:ec:d5:99:0f:82:f1:09:21:bd:fc:82:7c:00:0a:99:62:6e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Nov 29 07:51:11 2023 GMT
            Not After : Nov 27 07:56:11 2024 GMT
        Subject: CN=0304C29745788506CE0E0AE873226A1D5CC789B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:94:d6:2a:d0:e0:06:69:e4:99:f3:7b:cf:ad:
                    c6:39:c1:4b:b5:c0:d9:22:e2:26:4b:71:66:d6:f4:
                    60:3d:87:ee:08:3b:de:f3:af:f9:16:4c:37:58:43:
                    1a:10:31:98:be:c5:bc:05:de:c4:58:a9:cf:3f:0a:
                    a7:f2:50:b6:f0:98:ef:77:40:60:7c:3a:db:70:ee:
                    e0:71:05:3f:6e:14:f7:18:0c:c4:10:64:bb:2d:e9:
                    d1:99:ca:4b:e5:e2:c5:d6:bd:a4:0b:7a:9c:a2:23:
                    a7:9e:96:ad:a1:dc:f9:53:1b:66:85:98:9d:c9:3b:
                    14:e5:51:ef:16:10:dc:08:e1:b9:74:6c:a6:e3:1c:
                    03:b7:06:c2:64:a7:be:04:6d:08:10:6a:bf:bd:e4:
                    0e:e0:53:0a:20:b7:3d:63:1b:0f:f7:ad:4f:e4:1b:
                    98:30:59:72:a2:ca:5c:6e:3d:70:fe:3d:c9:b0:38:
                    70:28:92:8b:68:58:cd:4a:e3:ba:c9:19:96:f0:c0:
                    45:bb:23:00:2a:69:bd:bd:74:99:d3:07:98:87:46:
                    f1:f5:87:b9:70:47:14:c1:cf:41:95:0d:46:96:9f:
                    6d:1e:a9:e4:f8:13:da:bc:a7:4a:64:8b:f9:12:6d:
                    88:73:a2:7b:cb:5f:c5:15:f8:17:3c:c7:27:92:f4:
                    25:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:04:C2:97:45:78:85:06:CE:0E:0A:E8:73:22:6A:1D:5C:C7:89:B4
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37382e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.212.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:91:8c:e5:9c:98:eb:8f:a2:f1:75:6f:cc:26:69:c0:69:2d:
         3a:47:11:e7:80:d1:73:00:d1:d5:64:a9:18:79:d1:9f:b6:3c:
         f0:29:33:b7:c3:00:3e:8e:93:e2:de:fa:4e:29:1c:18:c8:26:
         ae:9f:1e:48:fd:21:25:f9:88:3a:5f:db:f3:b1:36:4d:69:6f:
         25:b9:48:05:79:69:11:56:83:bd:27:0f:ca:76:93:e1:c8:38:
         27:dc:82:d2:67:39:5e:cf:61:f8:0e:04:62:f7:7e:fe:6f:2b:
         06:0d:e6:da:06:98:3d:19:f2:84:c7:e1:4c:fb:df:31:df:2c:
         95:2e:82:a8:23:5c:4a:0f:d9:e6:ff:7d:62:9a:d2:08:f1:83:
         63:8f:6b:9e:38:84:3e:57:dc:e0:9e:8e:cf:af:e8:62:a7:bc:
         b6:21:40:94:1a:b6:95:8b:1c:ba:d3:e7:46:be:79:7c:06:ae:
         21:10:1b:45:9a:5d:d2:16:52:61:e1:9e:f4:30:b7:09:87:a8:
         e5:2c:1a:62:aa:81:94:b0:a3:b1:c8:e0:c7:fd:b8:39:a5:16:
         a0:37:b8:65:36:62:5f:b6:b1:42:c9:e1:d1:7d:e2:6f:bf:49:
         f9:f8:ae:ba:0f:4c:e5:bc:1c:bb:ba:e6:e2:d5:62:4b:fa:a3:
         6c:ca:16:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 06:27:30 2024 by rpki-client on console-fra.rpki-client.org