Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131322e37382e33322e302f32312d3234203d3e203535363636.roa
File:                     3131322e37382e33322e302f32312d3234203d3e203535363636.roa (raw, json)
Hash identifier:          ewWehhas15TkoZvf1xm21Kqel6ttoF+bP2DeC3Ev0tU=
Subject key identifier:   CF:1F:63:C3:52:D8:61:7B:A9:8D:1E:00:90:7A:14:94:95:04:29:34
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       163F2690D58487161EA9EA58E4EA92A057BD9A4E
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131322e37382e33322e302f32312d3234203d3e203535363636.roa
Signing time:             Mon 31 Jul 2023 00:14:34 +0000
ROA not before:           Mon 31 Jul 2023 00:09:34 +0000
ROA not after:            Mon 29 Jul 2024 00:14:34 +0000
asID:                     55666
IP address blocks:        112.78.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3f:26:90:d5:84:87:16:1e:a9:ea:58:e4:ea:92:a0:57:bd:9a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Jul 31 00:09:34 2023 GMT
            Not After : Jul 29 00:14:34 2024 GMT
        Subject: CN=CF1F63C352D8617BA98D1E00907A149495042934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:34:e1:83:8b:0f:4c:e3:dd:0a:c0:7b:63:
                    3e:09:5a:aa:52:1f:3d:dc:bb:f6:5e:d6:24:f8:fb:
                    43:ef:d1:ab:52:1d:3f:88:30:c8:2c:3d:29:f3:ad:
                    10:15:ec:f9:34:bc:54:26:42:14:00:da:e1:e9:0f:
                    fa:3d:6c:1d:2c:18:e1:d2:a4:d9:b5:bc:82:d0:90:
                    52:03:6b:dc:57:c6:7e:12:33:51:86:d6:4b:1a:6b:
                    de:b9:d9:0c:73:8f:07:fe:d6:aa:70:d7:c8:49:cc:
                    6e:a8:5c:c8:af:d4:47:06:0e:46:8b:ee:db:8e:49:
                    cf:10:e8:14:3a:cd:89:b3:df:77:91:bb:fd:b3:66:
                    3a:30:59:ab:61:84:c1:6a:40:a8:a4:d2:78:05:0f:
                    44:52:6f:a4:43:2d:c5:3d:47:9a:7b:d9:ce:87:0b:
                    bf:69:58:ba:81:de:8f:4e:1b:b4:e3:0e:fb:ee:97:
                    d2:05:e7:95:4f:d1:59:0b:30:e3:38:01:93:d5:6c:
                    3a:1e:87:eb:7c:e7:92:83:00:59:17:7e:39:4d:a3:
                    e2:24:86:01:c7:d0:79:86:9d:3c:4a:c9:2e:07:19:
                    71:51:ef:e9:8a:57:9c:c8:0c:98:d6:6d:e7:ef:57:
                    27:ff:d5:ae:ad:a7:bd:4a:da:3a:1a:8d:5b:b2:e6:
                    c3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1F:63:C3:52:D8:61:7B:A9:8D:1E:00:90:7A:14:94:95:04:29:34
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131322e37382e33322e302f32312d3234203d3e203535363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:0b:9b:90:bc:0e:a2:49:58:f5:8b:0e:3f:56:1d:7c:89:f1:
         03:0f:6d:ba:52:ea:d9:26:61:dc:70:1e:65:f7:38:cb:c0:67:
         2e:9e:05:e5:17:1b:31:8e:ee:fa:b1:7d:82:c4:8e:a6:93:d0:
         15:c4:1d:2c:28:d9:83:cc:c3:55:91:13:92:cc:fd:dd:e3:8e:
         f1:e5:6c:95:03:29:8c:6a:e2:e6:63:f8:64:4e:b9:87:29:64:
         db:92:45:7f:40:76:4c:32:b4:74:2e:74:a3:78:0d:5e:be:c5:
         9c:cc:5a:07:67:da:d1:6a:b8:0a:bf:19:b0:3e:46:c0:3c:8f:
         b5:9a:31:0e:f8:c3:0b:83:b2:fc:3c:41:e1:8c:aa:77:90:cd:
         c0:c4:f8:85:a9:46:4d:9b:db:60:f6:e0:3a:ad:60:43:61:07:
         62:88:b0:c9:a1:29:69:b4:15:57:55:1c:f8:19:73:bb:7a:6f:
         ab:a2:98:2f:90:ec:96:2c:ec:9e:7c:83:c7:31:53:5a:69:4a:
         40:d3:4f:36:10:63:42:2f:ac:e8:21:bb:dc:b4:f8:c7:8a:66:
         c9:0f:1c:c2:18:55:e9:68:11:6f:bd:3c:cf:cd:70:cd:73:5d:
         56:39:95:6d:1e:00:a2:ad:ee:aa:8c:f9:1a:76:94:fc:af:9a:
         a2:85:ce:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:35:14 2024 by rpki-client on console-ams.rpki-client.org