Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136352e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3136352e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          TgNmL4XjDpnjjM9AsAjZfX+vwRry8hmS6BXenfHwMmw=
Subject key identifier:   19:98:88:BA:18:61:14:B9:EE:02:69:B8:8D:5F:EB:5C:46:0F:03:F7
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       6C10C0FC49E62AADDD503F75D2C5D635B91599E3
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136352e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 25 Oct 2024 04:00:30 +0000
ROA not before:           Fri 25 Oct 2024 03:55:30 +0000
ROA not after:            Fri 24 Oct 2025 04:00:30 +0000
asID:                     18059
IP address blocks:        116.90.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:10:c0:fc:49:e6:2a:ad:dd:50:3f:75:d2:c5:d6:35:b9:15:99:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 25 03:55:30 2024 GMT
            Not After : Oct 24 04:00:30 2025 GMT
        Subject: CN=199888BA186114B9EE0269B88D5FEB5C460F03F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cb:d9:d6:9a:cb:d6:f7:70:c9:bf:de:f0:c6:
                    ad:2e:27:fb:b3:67:be:42:ae:d1:4c:0e:7c:13:ed:
                    04:c5:c8:b4:49:90:84:c9:63:03:7b:e1:1a:3b:97:
                    2a:44:e5:5e:54:a1:0f:3a:c6:4e:13:49:e4:0b:de:
                    32:76:8e:a5:11:75:61:4d:4e:d6:30:a0:49:3a:af:
                    d1:11:96:57:18:d8:be:30:be:7a:14:a5:9d:7e:60:
                    00:34:b2:f1:a6:af:97:5b:3d:b8:4a:17:e6:56:2b:
                    a1:32:2d:6f:7e:ac:5d:43:f1:6a:df:6b:94:65:60:
                    c0:5d:b5:2b:3d:1d:05:9b:cb:e4:13:77:07:0d:6a:
                    12:f0:b5:06:1c:a3:ae:d7:ad:88:9c:7d:7c:37:eb:
                    c3:61:93:05:d7:96:a0:f2:70:89:e4:bc:3d:10:cc:
                    e5:3f:3d:33:19:7b:97:81:ee:3c:1b:47:cc:96:d9:
                    2d:98:58:76:ab:b0:bc:eb:4e:7c:79:13:1c:30:29:
                    9a:e3:75:87:59:8d:59:49:41:99:f0:47:6c:1c:b4:
                    e9:77:47:fc:80:ab:25:20:0f:7d:60:cb:81:3f:35:
                    f8:ad:fe:64:59:09:8d:dc:bb:d9:cc:79:e3:1f:6b:
                    eb:ab:0d:65:b8:4e:1a:f3:ac:07:16:c8:ae:8e:24:
                    ce:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:98:88:BA:18:61:14:B9:EE:02:69:B8:8D:5F:EB:5C:46:0F:03:F7
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136352e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:de:32:6d:48:77:9d:b6:36:62:16:b0:18:8f:d6:55:48:2c:
         7f:c1:83:ab:fd:af:ae:47:b1:dd:e0:7f:9f:96:35:0a:d4:84:
         54:42:7f:51:24:97:05:83:19:9e:c0:e2:43:07:52:ab:8c:27:
         8b:89:87:e0:51:ad:e8:f3:82:60:cd:fb:86:87:ab:17:51:a3:
         0f:f1:04:09:eb:d0:36:8e:bc:82:26:f8:6e:97:ed:1f:70:cf:
         38:05:58:42:ed:8e:fd:fb:17:a6:f4:35:d8:63:82:11:9c:cc:
         2f:17:cc:89:0c:2d:1b:f4:de:7e:af:42:9b:af:2a:64:c4:43:
         f1:c0:d2:a4:69:41:a4:05:aa:35:55:03:d5:26:28:80:5d:40:
         31:b3:e9:a6:1e:46:e5:77:4a:f4:56:e2:72:99:95:2e:cb:c0:
         34:80:fe:f9:f8:d8:a0:73:8b:76:39:cb:1b:33:a7:b6:98:b0:
         ad:bb:7d:13:48:b1:ea:2f:7b:89:6b:f3:05:e1:75:42:3e:76:
         74:07:91:f5:68:2c:17:24:24:4c:03:5e:3f:c2:4b:e0:7b:18:
         73:d1:5b:7b:a2:1d:a8:9e:80:1e:19:a2:5f:c8:0d:86:69:73:
         2d:69:53:4e:e8:a1:e6:09:69:f8:d1:e1:91:df:8d:db:ca:56:
         4d:24:15:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org