Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136312e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3136312e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          2V6PARAFGzG/odEBZEVwJ5Vd0ot+RAfmVhzpar/mtno=
Subject key identifier:   30:B0:B6:E2:82:51:66:D4:FE:0E:A4:75:EA:59:97:96:22:B0:FB:E1
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       1018C14740BCBC83BE66DB71947AF9063F893605
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136312e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 25 Oct 2024 04:00:35 +0000
ROA not before:           Fri 25 Oct 2024 03:55:35 +0000
ROA not after:            Fri 24 Oct 2025 04:00:35 +0000
asID:                     18059
IP address blocks:        116.90.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:18:c1:47:40:bc:bc:83:be:66:db:71:94:7a:f9:06:3f:89:36:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 25 03:55:35 2024 GMT
            Not After : Oct 24 04:00:35 2025 GMT
        Subject: CN=30B0B6E2825166D4FE0EA475EA59979622B0FBE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:d2:3f:2e:1e:76:b7:7e:cb:dd:fc:dc:a1:
                    e2:fa:b2:48:80:39:51:b2:c7:56:8b:09:68:8c:b8:
                    21:0d:45:7d:ca:ba:2b:0b:c0:5c:cb:71:2b:ef:24:
                    81:aa:d4:77:5b:11:4c:e3:8c:03:84:91:3d:ad:8f:
                    60:7a:1a:1f:bb:cf:4d:25:d9:4d:fa:98:b4:01:fb:
                    5c:0a:dc:d6:08:e8:fd:36:f1:b7:d3:46:d7:cb:15:
                    ca:2c:31:68:bb:06:f2:7b:91:0c:67:0d:5d:0f:4e:
                    c9:f8:3a:c9:3d:8f:14:d0:49:03:7a:e8:43:0a:04:
                    83:28:6a:b0:40:7d:42:34:cb:f6:a1:e3:e1:88:d9:
                    c5:ef:64:5d:f1:5b:e5:f0:16:5d:ed:47:be:b1:5b:
                    47:a5:5d:f2:7c:b4:c0:18:ee:9c:28:ca:3c:fd:6d:
                    1a:e7:2f:cd:ae:f9:a3:93:a2:6b:fd:ca:cd:09:b1:
                    e0:17:09:b7:cd:9f:80:b1:d9:3f:f3:e5:f2:a2:9b:
                    13:fb:90:d7:24:3e:ee:0c:1c:b9:bb:70:e0:37:32:
                    56:75:ac:94:d1:11:58:6e:95:88:33:25:ad:da:5a:
                    97:e7:cc:e9:d0:27:72:b1:8d:72:15:07:a0:fb:8e:
                    cb:6b:0b:18:b1:18:91:e5:08:77:f3:64:e2:b9:82:
                    a6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B0:B6:E2:82:51:66:D4:FE:0E:A4:75:EA:59:97:96:22:B0:FB:E1
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136312e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:75:23:f7:9e:0e:00:be:81:5f:62:3a:30:dd:42:4e:50:d1:
         5c:34:ff:13:60:b2:4b:86:dd:eb:51:9d:88:9d:8b:f0:c5:75:
         3f:ea:24:68:eb:fa:28:46:ff:90:ba:02:92:f1:76:0c:92:2d:
         bf:ef:0a:24:51:d0:7d:87:93:d3:b0:85:26:8b:82:04:e7:3c:
         95:a7:09:cb:3e:bf:08:2e:18:d8:8f:46:11:7d:72:67:3a:f8:
         1e:46:77:90:a5:4d:e7:27:18:95:f6:2f:1f:40:2a:05:ea:88:
         ea:3c:bd:2d:68:5b:77:6a:f7:d6:5c:94:95:4d:25:34:2d:34:
         22:d8:54:f2:37:a2:74:a4:3f:0a:16:51:a5:08:0e:65:b0:97:
         bd:11:97:e5:fe:d2:17:18:a9:54:6c:03:e8:24:1a:5d:dd:36:
         a1:46:08:f5:4f:19:d3:cc:0a:9e:14:51:7d:18:ef:0c:9b:52:
         56:12:ef:88:20:ae:cf:1e:a3:2f:8a:5b:34:ef:75:b3:e6:f1:
         99:53:e9:7e:d4:eb:86:98:06:b8:76:d2:64:89:bf:4f:3d:ff:
         b9:76:21:1c:25:b5:79:fc:92:ae:a7:2c:02:2b:04:ab:92:72:
         26:75:56:0e:de:84:58:cc:dc:38:2a:3c:8b:5f:a6:f6:7b:cb:
         19:45:b6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org