Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136322e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3136322e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          bVUDttoXbRavrEIFlutmqLDpEC3M1+vbMl/hsMVcXKI=
Subject key identifier:   1D:37:F3:A5:F6:FF:74:0E:C3:30:2F:75:6A:DA:36:66:2F:F4:FA:18
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       11FD59BA2407EA4E6ECBF3CAD6397036F0F28111
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136322e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 25 Oct 2024 04:00:35 +0000
ROA not before:           Fri 25 Oct 2024 03:55:35 +0000
ROA not after:            Fri 24 Oct 2025 04:00:35 +0000
asID:                     18059
IP address blocks:        116.90.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:fd:59:ba:24:07:ea:4e:6e:cb:f3:ca:d6:39:70:36:f0:f2:81:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 25 03:55:35 2024 GMT
            Not After : Oct 24 04:00:35 2025 GMT
        Subject: CN=1D37F3A5F6FF740EC3302F756ADA36662FF4FA18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:83:63:40:5b:6a:14:c1:f6:72:93:d2:3d:d0:
                    82:72:23:6e:c6:d3:5f:55:16:fb:2d:8b:90:d0:9f:
                    a3:b7:03:be:a5:5d:bf:5a:01:90:2e:af:e9:ed:17:
                    10:f6:07:ae:5c:58:4a:f3:55:cd:43:2a:61:55:b7:
                    55:2d:09:7b:f9:99:b2:8e:39:26:1c:36:26:20:26:
                    cc:9f:9b:64:e3:0a:03:7d:ee:2c:37:7f:8e:f1:f0:
                    3f:9f:14:d4:ef:d5:d4:66:13:76:e3:1f:7a:b3:96:
                    30:17:25:94:ec:89:16:9b:f7:62:1f:c6:07:fb:0d:
                    97:85:bc:c8:36:88:52:21:ed:24:76:00:43:72:98:
                    87:3d:77:d1:05:bc:33:de:85:3c:58:37:ec:2b:c6:
                    d3:7a:f3:a7:0a:28:9a:6a:9f:6e:2b:68:57:82:c3:
                    1f:52:7f:a0:d3:6d:59:37:15:87:31:af:3f:b2:51:
                    ee:4f:dd:a5:24:1d:72:f6:97:2c:f7:fb:d0:7a:2a:
                    1c:24:c5:fd:20:48:fa:42:11:59:9b:42:19:e1:1f:
                    65:80:8f:a0:39:10:5f:56:7b:5a:ea:f5:89:9f:57:
                    13:4b:0e:5b:9c:80:db:4e:dc:88:6f:06:87:db:58:
                    a2:32:08:99:89:6e:f4:56:5c:9c:ba:c5:0e:26:e2:
                    1c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:37:F3:A5:F6:FF:74:0E:C3:30:2F:75:6A:DA:36:66:2F:F4:FA:18
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136322e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:36:29:7e:ba:6b:ab:00:5f:9c:0c:34:72:db:b6:b3:77:bb:
         51:2b:14:01:db:5c:4e:13:82:6b:61:ae:86:09:53:a9:a2:52:
         a4:54:15:d5:2e:f3:31:66:f0:0e:07:5d:69:63:a0:aa:8b:40:
         d5:16:be:e9:04:7d:00:2e:6d:0d:49:fe:79:66:bd:99:a2:76:
         c8:d3:82:71:49:03:15:10:fb:30:02:22:5f:95:8e:f2:41:e9:
         4b:6e:20:c4:45:51:d3:55:b1:22:ea:a9:35:2f:e0:58:88:b1:
         6e:31:e4:d8:47:9d:9d:10:27:cc:a2:50:d4:5a:44:b7:65:ee:
         de:29:4c:a5:1d:b3:f7:23:c9:56:eb:d6:85:1b:66:2a:f6:5b:
         ae:7e:95:e1:5b:a9:89:00:65:eb:49:2a:05:b1:bc:8c:0b:28:
         58:71:86:5b:d6:cd:72:34:fd:42:64:f6:fa:cd:07:d7:db:23:
         c3:46:65:0d:6c:4f:9b:61:87:ec:a4:c7:51:90:d9:0b:31:ab:
         37:bc:17:9c:12:bc:a6:8f:98:e7:b8:9b:0f:e6:82:95:3d:68:
         dd:72:8a:c6:99:f9:6f:4a:c0:45:fa:54:77:ff:a4:52:4d:df:
         01:4e:8a:44:4d:11:8c:3d:f4:96:28:ad:c5:46:d4:7f:78:9c:
         43:16:35:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org