Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136342e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3136342e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          3gvYHrmvd4t9YAgAzeO/elmvv6uStwDeBnJDZ8nrOJs=
Subject key identifier:   C7:C9:FD:24:85:4B:9B:03:87:DD:F8:66:FA:65:B5:6A:0E:4A:52:00
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       6E078FB65E9E838C7D6D8AF87011E0D09BC5BF1A
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136342e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 25 Oct 2024 04:00:32 +0000
ROA not before:           Fri 25 Oct 2024 03:55:32 +0000
ROA not after:            Fri 24 Oct 2025 04:00:32 +0000
asID:                     18059
IP address blocks:        116.90.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:07:8f:b6:5e:9e:83:8c:7d:6d:8a:f8:70:11:e0:d0:9b:c5:bf:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 25 03:55:32 2024 GMT
            Not After : Oct 24 04:00:32 2025 GMT
        Subject: CN=C7C9FD24854B9B0387DDF866FA65B56A0E4A5200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fe:83:0a:12:43:96:55:7d:05:c5:50:53:c8:
                    a4:74:aa:14:f5:04:84:d5:25:95:d5:97:f8:64:07:
                    6b:af:dc:9e:dc:63:92:86:c6:dd:bb:19:d4:d8:9e:
                    f6:22:14:fb:ed:6d:80:ad:9c:36:4c:8e:55:f1:27:
                    68:34:eb:c4:57:4f:f8:4c:86:06:0c:eb:ec:0d:ee:
                    60:14:58:e5:e2:50:39:47:4f:a0:8c:b4:d5:cb:9d:
                    7f:02:72:9b:83:45:ef:cc:eb:e2:e5:c6:ec:31:f1:
                    f2:07:d2:6e:ad:93:e7:00:2a:51:71:37:8d:17:68:
                    d9:37:bf:5a:16:36:78:ff:08:81:7b:d4:ad:ae:43:
                    35:6d:b6:f7:b4:b4:e5:f6:ca:1e:e7:43:a2:21:39:
                    b8:d0:4f:c7:e3:78:80:2d:f6:31:84:99:17:fa:b5:
                    e3:6d:e5:83:f7:4f:e5:d6:9e:3a:e9:73:e4:45:97:
                    0f:82:25:8f:cf:38:f9:0d:af:9b:87:67:09:34:35:
                    17:1f:5e:e0:2f:d5:4e:2a:00:49:82:a0:fc:32:98:
                    c8:58:1a:e9:f1:ee:34:b2:f1:b0:ab:8c:91:43:48:
                    d5:09:0e:31:60:06:24:d8:87:de:82:54:30:d4:b5:
                    5c:9b:ef:02:59:02:56:f8:fc:a4:75:cb:56:26:62:
                    43:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C9:FD:24:85:4B:9B:03:87:DD:F8:66:FA:65:B5:6A:0E:4A:52:00
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136342e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:8f:ee:a1:ea:30:31:25:1e:a8:27:0a:56:52:dc:a0:47:e0:
         32:03:72:93:49:e0:a5:9f:24:33:12:24:d4:fe:5e:2c:71:76:
         14:40:0c:82:b5:2f:67:37:60:95:42:90:88:a5:f1:38:23:3e:
         9e:eb:1e:94:8a:f2:45:e1:28:4b:0e:e6:72:3f:f7:5d:c5:1a:
         55:87:ac:c3:9b:b5:d4:48:86:cc:be:10:6a:55:c9:a3:86:c4:
         d7:f7:fb:d6:3a:2f:8b:b7:d3:3c:6e:36:bd:8b:14:96:e8:a5:
         3e:04:7a:da:b7:47:2e:ab:be:86:63:6b:11:58:68:c4:7a:ee:
         4f:f5:54:26:40:93:c4:f6:b8:d7:3d:b1:1c:f2:7f:a6:c7:22:
         c2:b0:2f:84:24:a6:21:09:fc:d3:fe:39:66:cf:9c:9d:0a:66:
         2c:45:fa:97:dc:f2:2b:8b:74:94:cd:e7:62:66:7f:25:2a:12:
         ff:61:36:da:8a:5b:3c:3d:87:da:64:86:b6:41:2d:55:60:6d:
         ab:d6:e2:c0:39:f9:31:e6:5e:76:ff:24:13:e4:b8:21:32:7b:
         d4:0e:cf:75:ee:86:06:2e:ec:77:3f:f3:c6:34:e6:fe:43:ce:
         6f:fb:d7:84:d7:38:1d:00:1a:d7:28:7e:e6:6a:2a:0b:6f:4f:
         3b:49:dc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org