Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa
File:                     3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa (raw, json)
Hash identifier:          AWlzk3ZoaHcBSVd6ZuQ0ShtXcOejentHEd5dteeJxXs=
Subject key identifier:   3C:4C:F4:CB:13:CE:BD:02:E7:4A:19:5D:3C:23:00:2B:FF:3F:AD:F2
Certificate issuer:       /CN=C6F736EFBEBD1A0143DB0A57A143545915A18B33
Certificate serial:       2CCAEEAF27ABB2977C7F1114F61FF7DF9D3E39BB
Authority key identifier: C6:F7:36:EF:BE:BD:1A:01:43:DB:0A:57:A1:43:54:59:15:A1:8B:33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa
Signing time:             Mon 31 Jul 2023 00:03:07 +0000
ROA not before:           Sun 30 Jul 2023 23:58:07 +0000
ROA not after:            Mon 29 Jul 2024 00:03:07 +0000
asID:                     55693
IP address blocks:        116.254.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.crl
                          rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ca:ee:af:27:ab:b2:97:7c:7f:11:14:f6:1f:f7:df:9d:3e:39:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F736EFBEBD1A0143DB0A57A143545915A18B33
        Validity
            Not Before: Jul 30 23:58:07 2023 GMT
            Not After : Jul 29 00:03:07 2024 GMT
        Subject: CN=3C4CF4CB13CEBD02E74A195D3C23002BFF3FADF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:39:4a:f9:40:82:b8:db:bd:18:58:9b:b4:db:
                    5a:3a:3e:e8:b1:8e:23:b2:27:07:ac:6a:6b:b8:1d:
                    8a:07:75:6d:c9:2e:7c:94:f1:46:84:ff:6b:44:6c:
                    23:75:8f:8f:25:ff:bf:66:c2:fa:be:54:72:72:29:
                    b1:2d:2b:13:8a:ec:60:85:0c:5d:ef:a3:b4:01:46:
                    f1:2b:dd:e1:33:f8:86:c8:7d:af:a5:d5:19:0d:ba:
                    c1:a9:3e:42:6a:cd:c3:80:12:1b:30:65:e6:54:9d:
                    56:57:7b:5f:94:ab:4f:dd:79:94:a9:96:c1:67:b2:
                    d3:33:de:ab:33:66:d3:bf:45:67:5d:92:40:2d:e7:
                    13:1e:bd:bb:45:7b:5c:19:02:0c:e4:35:55:6b:18:
                    28:e5:19:3b:b9:34:69:28:fe:f0:94:9a:20:29:b3:
                    e4:81:5e:45:df:4f:3b:8a:c0:73:21:af:a1:27:e5:
                    db:70:2b:7f:7c:12:82:5b:b9:70:69:00:13:66:0b:
                    71:9c:bc:fc:3f:0e:39:25:7f:a4:7a:55:4b:94:50:
                    1f:39:e2:30:33:59:d6:1a:5b:d5:68:d6:64:3b:48:
                    25:a3:c4:ae:99:e1:18:02:c1:64:35:c6:58:9d:fd:
                    1c:31:60:33:4c:0a:13:57:c3:16:eb:2d:1e:06:b8:
                    da:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4C:F4:CB:13:CE:BD:02:E7:4A:19:5D:3C:23:00:2B:FF:3F:AD:F2
            X509v3 Authority Key Identifier:
                keyid:C6:F7:36:EF:BE:BD:1A:01:43:DB:0A:57:A1:43:54:59:15:A1:8B:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.254.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:23:9a:5a:ac:75:09:3b:2b:57:c8:b6:0b:c3:15:1e:25:9d:
         23:04:44:72:56:3c:13:bc:d9:14:8b:b8:38:ed:80:2c:42:29:
         db:0d:1d:b3:36:f3:0c:31:e3:25:b6:5b:08:1a:04:af:5c:ca:
         50:09:7d:b4:8d:ba:66:b5:59:cd:45:17:ad:4c:d9:a5:f5:e6:
         46:60:31:98:36:33:05:dc:83:6c:2b:6c:cc:54:fe:ec:f0:f6:
         5f:ea:55:4b:53:8f:ed:8f:11:6f:51:cb:be:db:cf:f7:27:e7:
         e0:64:a1:bd:bf:a9:d1:12:98:99:aa:b0:a1:ed:5b:20:94:f0:
         98:36:a5:5c:9a:c8:08:b2:86:f7:e3:b4:08:8a:fb:45:00:6a:
         d7:d8:da:ce:23:de:8e:82:11:b7:52:27:52:7c:de:dd:4b:99:
         22:34:9f:31:73:f9:f0:68:7f:5b:4d:6e:ba:67:9d:7c:bf:68:
         1f:1b:9a:4d:a4:87:e0:57:6d:89:29:98:c5:8a:11:94:a1:58:
         f0:7b:b1:db:1e:13:a1:c6:e4:de:a2:e8:a9:d5:29:fc:6c:18:
         b2:6c:73:ec:a7:f2:6d:36:d4:3d:59:f9:9d:2f:63:af:e4:7d:
         c1:43:e7:b4:92:28:81:d2:c9:07:88:65:67:89:38:c5:64:c1:
         5d:db:80:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:14:18 2024 by rpki-client on console-ams.rpki-client.org