Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137302e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3137302e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          ynigEJysgjDUm1dNF0FIUX1S9RM04Reyd2lxtm9Zz+g=
Subject key identifier:   27:BA:2B:3D:BE:CD:07:1D:E5:AA:2B:F7:22:33:0B:70:FC:EA:E0:68
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       36B5283A7A24B0A58260F6AFC809B4EDD10290DF
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137302e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 25 Oct 2024 04:00:37 +0000
ROA not before:           Fri 25 Oct 2024 03:55:37 +0000
ROA not after:            Fri 24 Oct 2025 04:00:37 +0000
asID:                     18059
IP address blocks:        116.90.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b5:28:3a:7a:24:b0:a5:82:60:f6:af:c8:09:b4:ed:d1:02:90:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 25 03:55:37 2024 GMT
            Not After : Oct 24 04:00:37 2025 GMT
        Subject: CN=27BA2B3DBECD071DE5AA2BF722330B70FCEAE068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:45:f3:2a:bd:c2:9b:83:60:3c:51:7d:bf:01:
                    a1:b7:fe:7b:bf:58:9c:73:b8:96:76:4a:a2:d7:eb:
                    99:95:1c:22:ea:c0:80:33:e6:c5:ec:e2:e8:d3:58:
                    98:b1:9d:5e:cf:72:5d:4b:30:f7:ad:cf:ae:8a:97:
                    f7:c5:1f:06:45:26:e2:96:4e:2e:b9:8c:44:23:48:
                    e7:84:2f:4d:1a:bb:64:b9:41:e3:88:51:b7:3d:b3:
                    2a:6e:ef:04:9b:5c:fe:62:4f:62:21:2f:0b:38:61:
                    b7:81:f8:e2:13:0a:d2:26:ab:4b:58:c6:6e:c4:30:
                    cc:95:a0:6b:3d:ae:6e:9c:96:3a:36:7c:a2:29:75:
                    2f:42:c3:21:bc:fd:f7:f6:f3:c1:ae:40:73:aa:d7:
                    57:0d:0e:66:c7:f1:5e:a9:0a:76:8c:69:35:f2:12:
                    04:59:ef:90:cf:79:24:fa:49:c2:ac:47:ba:d9:58:
                    f2:22:54:20:1b:a0:3e:00:a3:02:27:3e:52:71:4d:
                    ad:94:42:0d:6d:37:a1:18:48:ff:0c:fa:63:b0:a5:
                    28:42:8e:94:34:71:6d:5d:a8:b2:d3:2a:17:14:3d:
                    7d:ef:f3:8e:37:f6:b6:7f:63:6e:12:8a:21:4d:39:
                    bf:cf:30:f5:a3:fd:56:ac:4c:c9:8c:6d:4c:1f:0b:
                    95:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BA:2B:3D:BE:CD:07:1D:E5:AA:2B:F7:22:33:0B:70:FC:EA:E0:68
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137302e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:56:b1:86:0f:4b:b9:1d:4e:3b:f9:19:fd:c7:55:6b:e4:4b:
         d1:97:35:89:19:b5:1c:5b:5a:22:9b:e0:2b:c6:7e:f3:23:a6:
         e2:07:48:b6:47:e5:d3:5c:74:5f:08:fb:4f:80:62:a4:6c:f0:
         26:76:49:6d:0b:62:43:8f:ef:16:17:33:c1:0f:30:70:e0:05:
         d0:5c:95:6e:c4:5c:94:2e:15:37:c6:a5:4e:82:cd:22:af:35:
         91:af:b6:d1:f5:a0:78:d1:31:08:c8:08:08:67:6a:c7:71:51:
         6b:d1:f0:fe:1c:fc:d7:67:f7:63:b0:58:96:5e:7f:e9:14:6f:
         b9:31:07:5c:7b:c1:d5:fe:11:b4:ba:91:7b:e6:39:9f:0c:21:
         2b:4a:d4:30:d4:56:5e:71:a5:5a:8b:28:05:e9:58:31:c3:df:
         a0:04:c5:9d:f0:d4:66:c1:79:f4:ab:cd:b3:f6:67:70:8c:c3:
         c8:bb:0b:c6:bf:3c:e1:d8:1a:25:dc:4e:b8:8e:fb:57:b0:f7:
         a5:01:e0:9f:d9:3c:84:92:96:67:0c:05:24:3b:a0:b3:51:80:
         30:77:57:b4:39:62:9c:10:03:1f:3d:cc:01:2b:36:13:e3:c9:
         ee:39:3e:1e:85:95:8d:fa:12:f9:b7:78:a7:53:b1:8b:46:dd:
         e9:23:c8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org