Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa
File:                     3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa (raw, json)
Hash identifier:          3xgpPf4YAqaADbs/UZTLq/18odwLGmvVH5X/9szIIKo=
Subject key identifier:   A0:93:EA:1E:CA:4B:09:16:13:59:6C:CD:97:9C:AE:7A:7F:69:FA:22
Certificate issuer:       /CN=C6F736EFBEBD1A0143DB0A57A143545915A18B33
Certificate serial:       2B833029C494A18B89BF9E146905B9EE6454AC38
Authority key identifier: C6:F7:36:EF:BE:BD:1A:01:43:DB:0A:57:A1:43:54:59:15:A1:8B:33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa
Signing time:             Mon 01 Jul 2024 01:02:37 +0000
ROA not before:           Mon 01 Jul 2024 00:57:37 +0000
ROA not after:            Mon 30 Jun 2025 01:02:37 +0000
asID:                     55693
IP address blocks:        116.254.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.crl
                          rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:83:30:29:c4:94:a1:8b:89:bf:9e:14:69:05:b9:ee:64:54:ac:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F736EFBEBD1A0143DB0A57A143545915A18B33
        Validity
            Not Before: Jul  1 00:57:37 2024 GMT
            Not After : Jun 30 01:02:37 2025 GMT
        Subject: CN=A093EA1ECA4B091613596CCD979CAE7A7F69FA22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:80:e4:05:c7:c4:6e:df:04:10:df:f4:1d:
                    18:8e:db:4e:c9:63:7f:de:74:08:25:87:d9:71:73:
                    c0:fc:21:3a:00:a3:11:e9:ab:f1:a2:3f:a0:fa:67:
                    03:ef:c0:72:fe:5d:5b:be:3d:32:1e:d8:75:0c:34:
                    c6:ea:30:6f:97:07:18:5d:14:35:81:a2:c4:ca:dc:
                    f0:57:f9:d5:39:05:48:98:83:53:b9:cf:0c:8f:d7:
                    28:ef:6c:1c:e3:73:72:bc:71:06:dc:7d:d4:5d:ed:
                    29:6e:eb:30:b6:3d:14:26:94:52:4c:04:3e:82:b1:
                    35:1b:49:8e:e4:e2:f6:4b:a3:ca:4c:8a:d7:93:c3:
                    af:75:09:10:bb:4c:6e:b2:ef:cd:c0:c5:b8:26:b5:
                    17:0b:f0:19:da:46:ee:94:95:c7:14:cd:76:90:69:
                    03:8d:49:b5:dc:12:f0:39:d1:73:df:97:ae:1f:32:
                    29:02:2e:51:ba:d9:26:d8:2e:11:62:f4:a7:81:ae:
                    0e:1c:4e:a3:3c:f5:8e:9f:6a:ce:e4:b4:c8:71:97:
                    0b:0b:ca:24:0a:2c:29:07:0d:74:14:f3:37:ae:62:
                    11:b0:f1:10:ad:02:4a:99:28:f7:3f:53:ca:26:a4:
                    dc:0d:54:9d:21:25:09:8b:cf:28:16:3d:69:78:be:
                    e2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:93:EA:1E:CA:4B:09:16:13:59:6C:CD:97:9C:AE:7A:7F:69:FA:22
            X509v3 Authority Key Identifier:
                keyid:C6:F7:36:EF:BE:BD:1A:01:43:DB:0A:57:A1:43:54:59:15:A1:8B:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.254.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:2f:47:f4:e7:0c:a5:11:25:b1:05:3d:f8:53:22:5f:f2:e9:
         e6:cc:58:b9:94:69:18:df:c0:ae:2b:82:9d:98:43:a8:dd:24:
         9a:f8:e9:bb:6a:99:e7:1c:46:e5:28:07:c7:6a:e8:3e:f9:aa:
         67:64:16:54:b0:13:ae:b5:d4:46:ef:31:7f:14:3b:6a:bd:ec:
         01:29:2a:9e:49:70:2b:3e:8b:a8:8d:02:4c:f5:ed:5c:74:f1:
         8c:54:97:9f:4c:c8:9e:94:b8:a6:a2:52:60:5c:46:14:10:79:
         c5:1e:45:29:05:f7:2f:92:4e:be:dc:d9:e0:2b:45:96:ee:a3:
         c6:56:0a:c3:d7:bb:70:13:25:04:2d:ca:da:3a:d7:41:5d:3e:
         6d:a9:b6:e7:90:49:d2:35:e6:be:f6:cd:a3:73:ff:bb:99:fd:
         fb:54:7d:1c:35:75:83:72:26:a6:6c:2a:dd:98:54:5d:a9:8d:
         cb:42:57:59:1c:6b:db:cb:c7:18:89:0d:36:ec:ed:32:4e:ba:
         88:c2:91:3d:eb:89:be:b6:38:1f:56:cc:d1:d4:52:ea:25:4c:
         92:05:f6:97:fe:aa:6d:f4:80:3d:53:71:f8:81:21:9b:53:94:
         f3:af:17:bb:64:a1:2a:e3:6c:a8:e6:d5:12:d3:fd:f3:96:a6:
         c5:57:f1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:15 2024 by rpki-client on console-fra.rpki-client.org