Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa
File:                     3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa (raw, json)
Hash identifier:          /tllqFCqoEKXuRPZgdKgL/0BtCYLYIiONPJsBcFPtJc=
Subject key identifier:   1A:32:2B:AC:CE:F1:E7:16:39:AA:C6:5E:D9:25:65:08:E2:6E:A6:A2
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       5A3C0DBF3DBD0CFA425C3AEC7F5D1BD6A9833765
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa
Signing time:             Sat 20 Jan 2024 17:08:04 +0000
ROA not before:           Sat 20 Jan 2024 17:03:04 +0000
ROA not after:            Sat 18 Jan 2025 17:08:04 +0000
asID:                     149746
IP address blocks:        116.254.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3c:0d:bf:3d:bd:0c:fa:42:5c:3a:ec:7f:5d:1b:d6:a9:83:37:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Jan 20 17:03:04 2024 GMT
            Not After : Jan 18 17:08:04 2025 GMT
        Subject: CN=1A322BACCEF1E71639AAC65ED9256508E26EA6A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8c:cd:c8:9c:1f:34:c1:2c:c7:cb:d0:68:3d:
                    6e:32:86:b3:07:59:8e:7b:96:34:a7:83:eb:c8:9c:
                    a5:a3:bd:df:c5:5e:d5:8c:25:e8:c7:8c:9e:a2:30:
                    d3:b6:85:f3:7a:25:4c:e0:49:ed:d3:b5:c4:e5:6e:
                    10:93:e2:58:97:fd:60:5c:9f:fe:84:0a:fe:17:f9:
                    0a:4e:5c:32:ab:59:7e:57:6c:06:f7:a8:1c:22:c8:
                    f6:97:b8:6d:36:b1:12:c4:00:1b:6e:fb:4c:c1:fc:
                    77:e1:d3:f5:8a:5d:06:34:e1:1d:5c:60:b7:a6:8f:
                    4e:7f:5b:52:83:a9:c4:72:54:1e:0b:fd:23:1e:16:
                    49:27:ca:29:9d:bb:17:ae:61:91:58:d3:4d:da:da:
                    8c:74:e8:cc:fe:ae:fa:a7:7c:4a:1d:4c:c7:42:77:
                    b0:6a:50:c3:f4:15:69:9a:e2:a4:48:c9:33:8b:9e:
                    18:91:51:cc:69:9c:15:55:1d:69:e4:29:85:90:08:
                    10:c3:bc:77:d4:14:c0:14:f6:77:d2:17:9f:26:a1:
                    66:e5:c4:bd:9a:94:7e:26:f0:da:be:d8:9b:eb:d5:
                    38:e3:5f:5a:11:39:d5:69:9f:f3:d7:59:8e:22:90:
                    a9:b4:d0:a9:a6:e3:66:4c:86:97:48:aa:c1:25:bd:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:32:2B:AC:CE:F1:E7:16:39:AA:C6:5E:D9:25:65:08:E2:6E:A6:A2
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.254.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:6d:55:a1:bf:37:92:43:22:6b:1c:9d:1a:94:eb:7e:83:75:
         9d:63:07:7b:a9:5d:c1:b8:4d:6d:4e:c2:48:b3:42:57:75:72:
         92:1a:dd:35:c4:84:09:19:8e:06:14:e7:3b:34:40:a2:77:d0:
         88:f6:f0:ac:bc:f7:f5:bd:ff:9c:d3:26:d0:70:26:05:5c:97:
         26:ca:36:35:d4:98:3f:78:04:1d:2a:d2:2d:54:4a:af:22:aa:
         a1:a0:8b:5f:02:6d:ed:11:55:45:bc:8b:d1:ac:54:2b:ab:29:
         ad:db:de:bb:26:93:55:f3:7f:d5:c2:45:d3:26:ef:9d:b8:5e:
         5e:7b:fb:46:9c:dc:1e:2b:c8:89:dd:ac:42:04:d8:53:fb:b3:
         70:0e:d7:10:4c:3e:0b:cc:7a:74:55:78:82:7c:22:3d:e2:3e:
         47:60:a7:38:2f:bc:cd:fe:1b:ac:1b:84:b0:e4:f9:c3:7b:03:
         08:f3:21:1d:86:36:8b:0d:3b:75:db:92:e5:12:d5:2b:00:8d:
         77:ce:b7:04:22:44:cf:ce:00:c1:a0:65:45:0b:7b:0d:e6:bc:
         a3:91:29:64:16:3a:41:93:32:c4:49:60:f6:a3:e5:d5:eb:48:
         e1:5b:6a:91:50:ff:f4:95:17:91:a1:7e:48:89:69:d9:90:6f:
         e3:59:61:29
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUWjwNvz29DPpCXDrsf10b1qmDN2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdE
NTU3Qzk1MzAeFw0yNDAxMjAxNzAzMDRaFw0yNTAxMTgxNzA4MDRaMDMxMTAvBgNV
BAMTKDFBMzIyQkFDQ0VGMUU3MTYzOUFBQzY1RUQ5MjU2NTA4RTI2RUE2QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCijM3InB80wSzHy9BoPW4yhrMH
WY57ljSng+vInKWjvd/FXtWMJejHjJ6iMNO2hfN6JUzgSe3TtcTlbhCT4liX/WBc
n/6ECv4X+QpOXDKrWX5XbAb3qBwiyPaXuG02sRLEABtu+0zB/Hfh0/WKXQY04R1c
YLemj05/W1KDqcRyVB4L/SMeFkknyimduxeuYZFY003a2ox06Mz+rvqnfEodTMdC
d7BqUMP0FWma4qRIyTOLnhiRUcxpnBVVHWnkKYWQCBDDvHfUFMAU9nfSF58moWbl
xL2alH4m8Nq+2Jvr1TjjX1oROdVpn/PXWY4ikKm00Kmm42ZMhpdIqsElvRPlAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUGjIrrM7x5xY5qsZe2SVlCOJupqIwHwYDVR0j
BBgwFoAUwAFjiA8jVxR1mSBQchfyp9VXyVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZWE3YTExNS1iOGI4LTQ5MGItODMyMC1jOWU1OWExMDAzZGQvMC9DMDAxNjM4ODBG
MjM1NzE0NzU5OTIwNTA3MjE3RjJBN0Q1NTdDOTUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdENTU3
Qzk1My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlYTdhMTE1LWI4YjgtNDkwYi04
MzIwLWM5ZTU5YTEwMDNkZC8wLzMxMzEzNjJlMzIzNTM0MmUzMTMxMzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzM0MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB0/nMwDQYJ
KoZIhvcNAQELBQADggEBAA5tVaG/N5JDImscnRqU636DdZ1jB3upXcG4TW1Owkiz
Qld1cpIa3TXEhAkZjgYU5zs0QKJ30Ij28Ky89/W9/5zTJtBwJgVclybKNjXUmD94
BB0q0i1USq8iqqGgi18Cbe0RVUW8i9GsVCurKa3b3rsmk1Xzf9XCRdMm7524Xl57
+0ac3B4ryIndrEIE2FP7s3AO1xBMPgvMenRVeIJ8Ij3iPkdgpzgvvM3+G6wbhLDk
+cN7AwjzIR2GNosNO3XbkuUS1SsAjXfOtwQiRM/OAMGgZUULew3mvKORKWQWOkGT
MsRJYPaj5dXrSOFbapFQ//SVF5GhfkiJadmQb+NZYSk=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:52:57 2024 by rpki-client on console-ams.rpki-client.org