Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136382e302f32342d3234203d3e203338373635.roa
File:                     3131362e39302e3136382e302f32342d3234203d3e203338373635.roa (raw, json)
Hash identifier:          AoSvcQZY7VUklYXt2Qx4gYjHhYCH+5rua/Vad//zHSo=
Subject key identifier:   79:8F:FD:B9:AC:90:AB:9C:17:10:45:7A:86:8E:5C:F7:B8:84:9B:7D
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       6787BA15D96D57ACC93BADDFA4B413D8E44C9D65
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136382e302f32342d3234203d3e203338373635.roa
Signing time:             Thu 09 May 2024 21:00:01 +0000
ROA not before:           Thu 09 May 2024 20:55:01 +0000
ROA not after:            Thu 08 May 2025 21:00:01 +0000
asID:                     38765
IP address blocks:        116.90.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 05:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:87:ba:15:d9:6d:57:ac:c9:3b:ad:df:a4:b4:13:d8:e4:4c:9d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: May  9 20:55:01 2024 GMT
            Not After : May  8 21:00:01 2025 GMT
        Subject: CN=798FFDB9AC90AB9C1710457A868E5CF7B8849B7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:b3:97:58:58:72:40:58:e0:68:66:b2:a6:
                    50:a9:97:b8:41:15:95:13:fa:4b:49:e8:64:86:42:
                    9f:2d:b3:25:02:1a:07:cb:70:98:cb:95:29:7e:1e:
                    0e:69:8e:f3:cd:5a:d9:14:8e:1c:3f:72:fc:45:5b:
                    5a:19:23:24:81:ee:f3:58:32:d2:00:19:82:e0:8d:
                    08:d5:a6:71:73:52:0b:29:5b:b9:a6:d0:dc:84:b3:
                    7f:f8:2a:e3:67:29:cf:fd:a2:79:5d:ef:1b:cb:78:
                    40:52:1c:2d:8b:b4:b8:a3:9b:cc:81:1a:0b:1b:bb:
                    76:12:4c:25:d3:59:1b:b4:46:73:8e:e3:8e:45:27:
                    f6:55:a2:41:c2:ac:6c:ec:1d:97:93:28:db:e7:68:
                    f7:12:53:89:0e:7b:3e:cc:d4:37:12:f7:fb:b9:ae:
                    57:20:0f:53:e6:9c:f7:48:fc:6c:7c:83:fb:15:4e:
                    46:76:78:b6:a0:d7:82:5b:73:d4:d3:7c:d2:db:d0:
                    c6:49:e8:3c:9d:ea:c9:9a:60:77:cf:da:22:30:a8:
                    1d:d3:1c:e9:db:f5:ef:df:d3:1d:94:b6:c7:92:a2:
                    29:89:4d:3d:91:5f:c0:5b:80:40:c2:6a:d6:9c:1c:
                    eb:ba:36:b7:86:37:ca:00:2e:80:69:7c:b4:44:fa:
                    dc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8F:FD:B9:AC:90:AB:9C:17:10:45:7A:86:8E:5C:F7:B8:84:9B:7D
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136382e302f32342d3234203d3e203338373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:5f:b7:6b:b5:75:cc:11:ff:bd:8f:52:57:29:5d:1a:41:3d:
         cc:c8:e4:c0:37:ae:d1:d9:ae:c6:94:ab:61:63:11:8b:75:4e:
         82:4f:e6:e0:44:ff:ac:bd:03:26:89:80:8b:4f:a7:15:ec:bc:
         80:e9:77:14:5b:b1:e9:1a:3c:41:ca:09:32:f9:7d:34:45:ce:
         8e:31:eb:f5:c7:f4:0b:d3:ea:dd:f0:b1:bc:fc:65:53:36:28:
         7c:a7:b1:a8:26:50:9e:a8:2e:b6:05:af:eb:0c:01:f5:dc:38:
         dc:a6:8b:1e:f5:79:85:c2:59:3a:31:b6:57:c6:56:e5:e5:06:
         52:5b:b3:c5:9f:f2:d3:68:9d:a7:ea:2a:93:1c:6f:4d:0f:57:
         67:93:ae:f4:fb:95:76:3d:49:fc:28:cc:fa:b1:03:2d:90:7b:
         ae:c4:3b:41:aa:e5:54:16:f6:58:9d:12:38:82:c2:d2:c2:9a:
         f5:e1:1a:e4:a9:26:02:bb:13:0d:38:83:66:45:d2:86:60:b8:
         e4:3a:84:9a:0a:30:ca:7c:31:72:ea:d1:ed:17:24:d5:a5:16:
         a6:14:64:3d:0b:75:b5:7f:72:f6:34:dc:28:01:9a:cc:05:da:
         fa:32:d5:a8:20:e8:3a:1b:ea:03:13:47:56:85:25:05:c7:5e:
         a2:90:a0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:44 2024 by rpki-client on console-fra.rpki-client.org