Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136332e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3136332e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          x+UsLA/abqOXTxKvNY4cb+0wEtEn38EvK+7DDjEBlew=
Subject key identifier:   1E:86:41:E3:19:9D:EE:7A:89:FD:9B:EB:E7:2A:01:B8:39:E3:13:39
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       655A6E6DA6FAEAAD09812FB73C3C2B1074A8AEA4
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136332e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 25 Oct 2024 04:00:34 +0000
ROA not before:           Fri 25 Oct 2024 03:55:34 +0000
ROA not after:            Fri 24 Oct 2025 04:00:34 +0000
asID:                     18059
IP address blocks:        116.90.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5a:6e:6d:a6:fa:ea:ad:09:81:2f:b7:3c:3c:2b:10:74:a8:ae:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 25 03:55:34 2024 GMT
            Not After : Oct 24 04:00:34 2025 GMT
        Subject: CN=1E8641E3199DEE7A89FD9BEBE72A01B839E31339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:f4:c9:29:6c:8f:87:92:c8:ed:1a:64:98:
                    04:d8:b9:ed:1d:55:40:69:94:72:96:92:d0:88:02:
                    a9:c3:d2:eb:65:25:fd:a8:bf:16:ed:9e:39:10:ff:
                    d1:4a:b0:49:ca:86:78:71:74:c7:8c:83:7a:8e:3f:
                    58:ef:ee:87:fd:98:31:0d:c8:05:ac:ad:ec:71:98:
                    84:14:44:4e:cd:6c:87:34:73:ca:e7:42:43:91:3b:
                    4f:87:36:25:52:ea:b8:e6:63:ce:0d:a6:27:d6:7e:
                    ca:9f:c1:69:1a:09:d8:01:b5:4a:4e:67:a0:2d:e6:
                    78:ec:42:c2:33:ee:44:e4:38:1d:3e:60:04:44:f1:
                    6e:88:40:a5:a3:5e:74:f8:e2:4e:1c:99:2c:7e:13:
                    fe:8b:9e:d8:5d:a6:b4:6d:9d:7d:8b:33:36:d8:85:
                    d7:25:74:ff:f6:30:71:84:d4:5c:68:26:04:91:ac:
                    c9:0d:da:d1:20:e8:30:c4:62:66:92:63:2f:d5:c5:
                    96:91:bb:28:14:6f:51:a0:56:33:41:2f:09:78:b1:
                    3e:82:ad:32:cb:9c:d3:5e:0a:6a:f2:4d:cc:38:dd:
                    04:a1:e8:a9:dd:af:2a:f6:d0:e4:86:2f:3f:c8:fd:
                    38:ff:de:a7:e4:76:4b:70:a5:64:f8:ea:e2:05:8f:
                    e3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:86:41:E3:19:9D:EE:7A:89:FD:9B:EB:E7:2A:01:B8:39:E3:13:39
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136332e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:0c:a6:20:af:7f:10:d6:26:84:82:41:91:4a:47:44:11:3e:
         65:10:fd:2c:84:e8:9c:31:67:d9:a0:cc:4b:54:f5:f0:f9:3f:
         ed:f0:26:ea:e1:0b:6f:ca:fd:cb:9a:44:1f:94:9e:ed:df:26:
         02:35:2e:b3:6c:ca:4b:da:80:de:14:57:8f:87:32:d2:e3:1e:
         65:cb:19:51:15:1a:35:ad:23:db:1d:eb:88:aa:94:8e:00:00:
         b9:92:0d:b9:2e:64:1b:d5:a7:1f:9b:ee:de:f9:db:98:3c:4a:
         f9:a4:0e:2b:58:7f:77:58:99:a3:b9:36:1a:0b:f2:ec:24:dd:
         61:a4:3c:fd:18:1b:db:be:48:8d:bc:ef:1a:f9:24:62:1c:83:
         4b:e6:bc:3e:56:39:b7:a7:96:07:1c:3e:5c:33:cb:d3:15:d6:
         4a:84:9b:c3:16:b2:33:61:be:c9:8e:44:0f:fe:4d:e1:8e:f0:
         c2:c8:bb:87:e2:3a:ed:3f:61:d5:99:2e:b9:1d:25:ed:54:9f:
         1a:c7:b4:0b:71:48:54:78:12:c2:88:50:26:04:38:72:ef:a4:
         db:04:68:e4:9d:49:f4:a3:1e:32:03:18:0a:fd:64:03:09:65:
         2f:b3:12:62:7e:88:58:77:d0:38:24:c6:6d:69:37:97:52:cd:
         2a:44:a1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org