Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235332e302f32342d3234203d3e203338353030.roa
File:                     3131362e36382e3235332e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier:          Zya17nvgTzQYKkg+JiBbWtmrVOxRraKb1wqBVLHeMC0=
Subject key identifier:   0B:A6:DA:65:2E:6C:51:AF:36:1E:7E:79:60:A5:83:AC:B0:FC:1A:0C
Certificate issuer:       /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Certificate serial:       502AC34B90971E7E519D2204AA7E44A880A56E83
Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235332e302f32342d3234203d3e203338353030.roa
Signing time:             Mon 01 Jul 2024 01:04:47 +0000
ROA not before:           Mon 01 Jul 2024 00:59:47 +0000
ROA not after:            Mon 30 Jun 2025 01:04:47 +0000
asID:                     38500
IP address blocks:        116.68.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl
                          rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2a:c3:4b:90:97:1e:7e:51:9d:22:04:aa:7e:44:a8:80:a5:6e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
        Validity
            Not Before: Jul  1 00:59:47 2024 GMT
            Not After : Jun 30 01:04:47 2025 GMT
        Subject: CN=0BA6DA652E6C51AF361E7E7960A583ACB0FC1A0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:58:9f:cb:bc:92:b0:6c:42:b6:33:04:86:6a:
                    4f:d3:a7:c4:b1:7f:8e:72:fb:68:e1:ee:dd:f8:cd:
                    e6:20:f8:3c:d9:cc:a9:22:6e:94:d1:db:83:a0:47:
                    3f:36:63:8f:23:e1:40:ed:af:1f:1e:9d:01:9b:0d:
                    b7:1a:75:c1:29:a6:6c:55:23:a2:df:51:0b:cf:bb:
                    54:0b:da:63:4a:b1:74:fe:f6:ec:2e:bc:ff:fa:fa:
                    81:40:65:52:b1:bc:46:e9:bd:cb:ea:d7:52:68:23:
                    8e:1c:e7:a1:d3:af:d1:06:97:bd:e6:1c:78:5a:74:
                    58:f5:43:a1:3f:1f:d5:23:ee:be:7e:ab:bd:38:23:
                    ff:de:f2:3e:3e:f9:1f:41:04:eb:df:b2:70:6a:03:
                    6e:8f:a4:7b:86:cf:ed:e6:1e:13:fe:a7:0b:37:68:
                    89:d8:93:e3:b9:cc:e8:89:62:a7:80:54:c8:f2:5b:
                    ac:19:aa:87:eb:99:fa:5e:ee:bb:6c:b1:f9:4a:73:
                    81:07:e5:71:63:4b:51:b6:dd:fb:ef:e8:48:ad:9d:
                    f1:5a:c0:c8:54:d6:8c:4c:c8:42:c9:de:f7:7e:47:
                    65:1e:99:95:dd:b1:cd:fc:f2:68:bf:27:97:71:98:
                    4f:00:47:97:ea:ce:74:01:34:4f:27:bf:81:f4:15:
                    b1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A6:DA:65:2E:6C:51:AF:36:1E:7E:79:60:A5:83:AC:B0:FC:1A:0C
            X509v3 Authority Key Identifier:
                keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235332e302f32342d3234203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:97:dd:e1:57:fc:f3:2a:2c:c2:b9:e8:b2:c6:8f:6c:16:9a:
         53:70:63:c6:bb:ab:2e:73:b8:fc:68:47:1b:b4:3a:c1:34:7e:
         a4:b3:ce:f1:6e:d3:54:ff:dd:7a:7c:97:49:a0:b0:e3:21:ff:
         95:0d:8b:a6:78:ce:f3:bc:49:c5:f8:e5:18:d1:07:3f:39:ca:
         67:b4:7e:7d:aa:8a:4b:fb:16:8d:8f:bb:18:74:99:c0:3d:4f:
         f2:6a:28:61:b4:00:c9:67:0d:3f:6f:5d:63:2c:40:04:86:92:
         c9:cb:13:39:48:43:77:a3:c4:64:5e:da:17:3a:93:31:ce:a5:
         91:81:49:c9:a1:35:c8:8a:30:50:10:33:fe:3e:e1:6b:9c:cb:
         59:36:c9:f6:60:70:e9:05:f2:69:f1:e3:f1:9a:b0:18:99:4f:
         95:d3:ed:a1:50:11:50:17:f4:c0:3e:85:91:75:aa:be:52:a8:
         31:77:64:0f:8e:ca:d9:cd:03:bf:6b:d7:32:91:2a:12:41:be:
         bb:f3:2b:7a:ba:3d:b8:e3:e6:ab:5a:1d:00:9d:38:9f:91:4d:
         e6:ed:01:8b:61:fd:22:20:d4:4f:0d:e7:f0:5e:f4:55:cf:2a:
         ef:78:67:90:95:c4:88:d4:a5:30:11:48:41:60:b1:8e:f3:12:
         5f:b5:3d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org