Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3134302e3231332e3139372e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3139372e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          k+6pDVnSn24ZBgF/WnieIBVSJ9zMwYO7oUxPWWZ4y3g=
Subject key identifier:   94:F3:77:52:0A:DF:67:C9:50:8E:73:42:FF:16:8F:DF:4E:D9:C0:FA
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       6A6AE3BEE8B4A6A04C6D1E880E8D84E74EE1B396
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3134302e3231332e3139372e302f32342d3234203d3e20313339393934.roa
Signing time:             Sun 28 Jul 2024 06:00:00 +0000
ROA not before:           Sun 28 Jul 2024 05:55:00 +0000
ROA not after:            Sun 27 Jul 2025 06:00:00 +0000
asID:                     139994
IP address blocks:        140.213.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6a:e3:be:e8:b4:a6:a0:4c:6d:1e:88:0e:8d:84:e7:4e:e1:b3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Jul 28 05:55:00 2024 GMT
            Not After : Jul 27 06:00:00 2025 GMT
        Subject: CN=94F377520ADF67C9508E7342FF168FDF4ED9C0FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2a:a2:64:d2:4a:96:2b:2b:29:cd:50:a4:e5:
                    88:88:7f:95:82:ca:92:0b:e7:9c:0c:60:ae:ea:8a:
                    de:ac:94:39:2f:38:15:c9:8b:eb:cc:46:58:9f:0c:
                    7e:c2:7f:c7:ca:cf:19:79:6e:9d:40:4a:3f:cc:b6:
                    c8:96:7f:98:dd:86:22:75:4b:84:a8:d7:77:9b:20:
                    ed:ca:39:33:b2:47:24:d4:ba:dc:22:8c:4a:05:2c:
                    0b:4d:19:c6:d6:65:31:67:30:1f:18:64:42:e4:db:
                    dc:b5:07:c4:78:21:46:a1:f4:de:4c:29:95:c2:b0:
                    cb:4e:35:8b:ca:7d:9b:92:2b:ba:bc:f0:38:c3:4b:
                    d4:57:b3:a1:f6:36:35:5f:70:ab:c7:bc:31:31:25:
                    5f:3c:8f:9f:4b:31:e6:c4:00:d5:e0:ed:b3:b9:01:
                    24:12:cf:18:87:05:c0:48:d4:60:66:9a:02:e4:cb:
                    cf:a0:d9:18:56:24:3b:07:17:89:65:bd:4c:9a:b9:
                    b7:d3:82:79:76:3e:a9:23:9b:09:84:3d:65:08:bc:
                    9b:df:b9:7e:9d:d3:f5:97:50:86:09:42:fe:d2:f9:
                    46:86:64:8d:4a:6f:dc:52:52:4c:0c:c6:7e:2d:cd:
                    0f:a6:94:b4:58:c0:c3:f9:9c:53:79:79:e4:ba:9c:
                    26:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F3:77:52:0A:DF:67:C9:50:8E:73:42:FF:16:8F:DF:4E:D9:C0:FA
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3134302e3231332e3139372e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:66:a3:67:dc:ab:94:b2:07:41:93:ad:68:ca:70:19:04:51:
         c3:1a:30:fb:81:a7:7d:99:e0:e0:26:a2:59:24:e5:ed:48:36:
         0f:39:1a:f1:de:cf:dd:7b:5b:e7:70:f5:29:c8:9a:5c:4f:bc:
         74:10:b4:89:e4:23:46:ef:58:b2:06:e0:20:8a:6c:51:48:1e:
         12:bc:69:25:87:ef:92:c8:a6:8e:88:ee:b5:41:b4:83:13:53:
         6b:13:3d:63:e4:9b:ff:c7:a8:4b:8a:0c:4c:1e:e5:1d:c6:b3:
         5e:d7:4a:25:36:71:f1:90:c4:98:d8:5e:fd:8e:fb:31:dc:5b:
         ef:07:b1:8d:13:72:17:aa:16:09:d3:94:71:d0:0e:a2:73:ed:
         f6:cb:43:be:17:aa:f9:b8:4f:21:9d:15:37:f8:1e:ec:a1:38:
         a2:dd:29:75:c0:5a:fc:1d:27:7d:28:63:1c:e8:0b:59:df:7a:
         2c:b2:dc:f6:41:a6:1a:4c:24:99:b5:4f:ce:40:bd:7f:82:4a:
         a4:d2:ee:09:00:e5:1d:ae:38:7f:4a:2e:22:9e:40:c3:8c:71:
         b4:0d:75:a7:70:b4:3c:d9:82:1f:96:c3:3f:27:ac:34:bb:a4:
         16:56:85:6c:8f:18:29:3e:be:50:3e:33:cc:26:81:8a:6d:c2:
         b7:ed:cd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:21:50 2024 by rpki-client on console-ams.rpki-client.org