Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3131372e35342e302e302f31362d3234203d3e2039333430.roa
File:                     3131372e35342e302e302f31362d3234203d3e2039333430.roa (raw, json)
Hash identifier:          bfwKvLNWOU0iLVOcYtU7nDbdgtFAVqrXwERmkZCGmPk=
Subject key identifier:   FC:E7:12:79:4B:B4:F6:9A:D0:CE:03:FA:DA:D9:98:B2:20:B7:AD:C9
Certificate issuer:       /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308
Certificate serial:       1E5210B708CA1B6E8702D1D4E601062B2E28E167
Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3131372e35342e302e302f31362d3234203d3e2039333430.roa
Signing time:             Wed 17 Apr 2024 07:00:01 +0000
ROA not before:           Wed 17 Apr 2024 06:55:01 +0000
ROA not after:            Wed 16 Apr 2025 07:00:01 +0000
asID:                     9340
IP address blocks:        117.54.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl
                          rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 18:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:52:10:b7:08:ca:1b:6e:87:02:d1:d4:e6:01:06:2b:2e:28:e1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308
        Validity
            Not Before: Apr 17 06:55:01 2024 GMT
            Not After : Apr 16 07:00:01 2025 GMT
        Subject: CN=FCE712794BB4F69AD0CE03FADAD998B220B7ADC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:be:83:c8:48:41:c0:fd:b7:f7:51:4d:f5:24:
                    a2:db:f5:73:16:12:71:34:f4:66:e0:7d:b0:12:c1:
                    8c:1c:2b:ca:20:cd:f7:df:77:1a:3e:7c:b1:eb:60:
                    b1:fb:e4:52:1a:2c:5e:af:06:9c:41:9f:c2:82:51:
                    6c:1f:40:2d:cd:b6:a2:7f:6a:47:b1:6c:e2:1a:73:
                    76:2b:7c:6e:89:cd:0c:e6:b1:91:0c:0f:a6:cc:89:
                    cb:63:1f:ce:8c:9b:55:02:d0:cd:c4:41:02:ca:ef:
                    c4:8d:81:f9:b4:2e:78:dd:73:4e:6e:e0:5a:60:9d:
                    b3:43:ed:30:f2:c9:fd:1d:02:f1:76:3a:f4:84:e8:
                    ca:e7:b0:11:dc:5f:68:7a:6e:96:b8:95:12:e5:57:
                    5e:96:52:16:6b:a8:08:f4:74:79:31:e3:ee:8d:b3:
                    6c:6a:03:71:28:66:22:0d:9f:9d:9d:e0:fe:a5:a7:
                    48:0b:ad:fa:52:60:e7:e9:d9:8d:aa:ed:76:69:47:
                    cb:57:3c:35:93:61:b2:0a:70:bd:7c:ec:1c:6a:25:
                    ec:6f:89:fb:d0:67:56:a9:03:6b:f8:1a:83:39:7c:
                    37:8d:7d:79:fa:a3:01:8b:d0:61:e2:7c:f4:88:16:
                    3b:1d:d6:15:42:d9:80:cc:d4:a2:ef:9a:d6:4e:9b:
                    a8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E7:12:79:4B:B4:F6:9A:D0:CE:03:FA:DA:D9:98:B2:20:B7:AD:C9
            X509v3 Authority Key Identifier:
                keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3131372e35342e302e302f31362d3234203d3e2039333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.54.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         93:4a:ff:c4:55:38:0e:74:ce:ca:d5:85:bf:ad:82:08:5e:6c:
         2b:0a:49:aa:e4:95:3b:0c:cd:90:62:a6:83:c6:b9:1d:e3:a6:
         e2:05:7b:66:9a:ae:19:65:b0:be:6d:48:ac:43:fe:8a:c5:11:
         80:12:3e:f4:f1:fc:a0:b8:f3:cf:35:28:e6:2a:1b:40:53:aa:
         82:98:db:ca:95:7e:64:3d:6d:1f:43:84:3c:53:94:99:a7:15:
         4a:14:da:18:40:ff:f8:cb:98:22:9c:cc:28:b4:eb:5d:50:27:
         b8:34:49:9f:7b:36:ae:13:51:c7:56:b7:63:f0:ac:0e:db:06:
         ec:92:77:b6:61:34:6c:4e:40:72:56:0d:30:70:98:d6:b4:96:
         9e:f8:23:84:07:0d:55:ab:cf:c3:87:d6:5e:2c:ce:d9:e7:9f:
         54:d7:ef:51:9f:f4:57:f3:1d:32:1a:18:2d:cc:48:d3:e8:80:
         85:df:fd:48:32:27:02:fd:3f:9c:a7:ae:54:58:7c:2d:07:9b:
         80:70:dd:0a:c5:e7:38:b8:c9:76:31:69:ef:a9:d5:6c:d1:b6:
         62:86:ca:99:c4:d8:fb:c3:0f:5b:26:1a:5c:62:7e:f3:f1:f6:
         df:49:cf:15:8d:3b:d4:79:46:95:d9:04:3b:59:6f:55:9f:a6:
         af:27:f0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:55 2024 by rpki-client on console-ams.rpki-client.org