Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e3235342e3132302e302f32312d3234203d3e203338343936.roa
File:                     3131362e3235342e3132302e302f32312d3234203d3e203338343936.roa (raw, json)
Hash identifier:          6NWEzLyUrb6Zg0CgrkBJ4zeuKB7xDyx58MSHBY4mQqg=
Subject key identifier:   5B:00:BC:13:EE:C3:6A:6E:E4:C9:B0:27:16:8E:AE:34:01:79:80:E6
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       041716022BB4F6FFD08473D3FD35C6F45E6F2E5F
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e3235342e3132302e302f32312d3234203d3e203338343936.roa
Signing time:             Mon 31 Jul 2023 00:09:34 +0000
ROA not before:           Mon 31 Jul 2023 00:04:34 +0000
ROA not after:            Mon 29 Jul 2024 00:09:34 +0000
asID:                     38496
IP address blocks:        116.254.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:17:16:02:2b:b4:f6:ff:d0:84:73:d3:fd:35:c6:f4:5e:6f:2e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Jul 31 00:04:34 2023 GMT
            Not After : Jul 29 00:09:34 2024 GMT
        Subject: CN=5B00BC13EEC36A6EE4C9B027168EAE34017980E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:53:9c:05:7d:9b:6b:78:87:e4:f7:e6:7f:26:
                    e3:56:b5:af:7a:bd:0d:21:9f:ad:4b:56:4a:6f:79:
                    eb:28:f1:fd:1d:16:ea:e9:2b:66:c9:e7:82:07:c8:
                    3a:a3:03:b2:7c:4a:67:c1:fe:9f:52:c9:a4:7f:47:
                    66:84:d1:97:05:85:7f:77:62:99:69:86:99:18:8c:
                    c6:a8:77:f4:ee:77:f4:dc:96:fa:8e:18:5c:46:86:
                    d3:d1:1b:7d:2d:55:89:12:1b:e2:c6:49:5f:dd:34:
                    78:95:92:e7:39:9e:3e:f4:09:bf:e1:b2:a8:d2:6b:
                    6e:70:a0:22:a1:42:71:37:a6:30:2f:56:ac:fc:21:
                    90:92:46:e4:ef:3d:8c:1e:92:2f:57:13:a0:3b:85:
                    fa:f2:0b:8e:33:ee:ac:a4:3c:8f:fc:19:16:71:4c:
                    dc:9f:16:b8:fd:89:98:23:1c:02:3f:d9:63:c5:19:
                    30:98:19:29:a5:6c:fb:a3:da:00:a7:e8:3c:0b:61:
                    2c:2f:f6:cc:8d:53:bc:88:c6:00:fe:2e:d2:3e:93:
                    12:b8:88:5e:3b:d0:6d:d4:b2:05:3b:10:d5:d9:09:
                    51:ab:9e:ec:ee:fc:cd:b1:0f:68:48:67:ae:8d:55:
                    9b:48:dd:43:e1:1e:ff:e4:4f:59:f6:da:8b:bb:b4:
                    d0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:00:BC:13:EE:C3:6A:6E:E4:C9:B0:27:16:8E:AE:34:01:79:80:E6
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e3235342e3132302e302f32312d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.254.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:24:74:c8:d8:24:07:0e:56:f3:8d:0a:8b:4d:76:97:bd:a1:
         c4:06:02:b2:11:aa:a9:da:f7:82:d9:cf:48:7d:72:71:32:99:
         81:16:74:fd:06:d6:57:e6:b5:cb:3e:31:92:b4:49:f9:91:cc:
         51:a4:65:a2:3c:13:fc:57:33:c2:85:3c:de:a8:0e:7b:c5:2b:
         a5:34:5c:03:4d:3f:f3:0f:cb:03:91:30:b2:d0:84:60:1c:0b:
         e3:49:57:77:c0:96:43:4a:7a:06:89:b3:1b:b1:63:88:84:33:
         a0:eb:d9:9e:1b:8b:a7:e1:62:b6:00:77:42:75:7d:e1:b5:6a:
         d6:f8:30:0e:44:dd:b7:b7:c4:3f:ad:be:f5:d6:fa:79:03:4e:
         d7:aa:71:ee:21:ef:5d:66:d1:b7:d0:33:bb:47:ca:13:8c:99:
         fb:13:ea:68:15:1a:f2:5e:4e:ad:f8:6e:41:eb:1c:e1:34:c3:
         14:65:75:b1:1e:aa:2b:bc:b7:d9:9c:4a:78:b2:80:d9:45:f3:
         c5:5a:ae:ba:2e:e4:dd:7a:6d:d6:1d:9c:44:c8:1b:0a:5e:a2:
         09:3d:78:8a:ae:b3:a1:e0:cf:0b:79:74:e3:80:af:66:f7:ae:
         44:71:23:59:3d:bb:4b:ea:1c:82:31:0b:81:06:90:80:4b:5e:
         11:3b:68:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:52:58 2024 by rpki-client on console-ams.rpki-client.org