Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230312e302f32342d3234203d3e203338343936.roa
File:                     3131362e36362e3230312e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          FTMvRmjPYdwuZbswZs/du33DM4pYm+o6agB+rsqes9g=
Subject key identifier:   81:0F:85:86:9E:24:FD:27:90:5C:FB:93:5C:25:03:09:76:0D:62:60
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       6BC3591954FEF237D1A357374CA9C9D62801A2D8
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230312e302f32342d3234203d3e203338343936.roa
Signing time:             Fri 24 May 2024 04:00:02 +0000
ROA not before:           Fri 24 May 2024 03:55:02 +0000
ROA not after:            Fri 23 May 2025 04:00:02 +0000
asID:                     38496
IP address blocks:        116.66.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c3:59:19:54:fe:f2:37:d1:a3:57:37:4c:a9:c9:d6:28:01:a2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: May 24 03:55:02 2024 GMT
            Not After : May 23 04:00:02 2025 GMT
        Subject: CN=810F85869E24FD27905CFB935C250309760D6260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:92:53:5f:3d:2d:35:ad:30:03:13:6b:be:62:
                    45:b0:0e:1f:b7:b0:4a:e0:30:a8:e4:9e:cf:e9:81:
                    be:c6:8d:ed:4a:74:a3:fb:3e:50:2a:11:71:7e:70:
                    78:de:93:9f:59:83:dd:21:67:91:98:5d:ad:86:52:
                    cf:a9:e2:b9:85:2d:42:f1:df:5a:af:d7:e0:66:0c:
                    26:54:09:6d:1b:9b:6d:40:e4:48:d9:af:8a:9a:33:
                    52:28:36:d0:e8:4d:19:6e:01:54:9d:6f:60:c8:79:
                    27:05:bd:31:9f:58:97:c8:5d:73:e3:02:2c:30:4a:
                    f5:28:75:a4:78:6c:16:c0:f8:12:e1:d5:46:f9:d2:
                    b4:3c:1b:6a:06:ef:65:4c:b0:6c:32:d4:f7:df:44:
                    36:48:ce:15:8c:a9:27:03:da:d0:8e:18:6b:9c:34:
                    06:b6:8d:37:f2:bc:ef:24:19:c3:e8:3f:5e:c1:31:
                    0f:79:50:57:6e:b1:94:af:a6:c4:ee:a9:68:dc:7b:
                    99:77:6f:69:97:3e:5d:94:67:f9:2d:e8:7d:7c:b7:
                    09:f1:ab:d6:06:5c:28:cc:57:30:88:55:0c:2b:60:
                    03:a7:49:69:3a:ce:b6:9d:6e:f5:3b:e8:ac:8d:e6:
                    33:3a:c3:1a:8e:02:9b:fb:d4:0b:50:be:bf:e6:19:
                    a6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0F:85:86:9E:24:FD:27:90:5C:FB:93:5C:25:03:09:76:0D:62:60
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230312e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.66.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:e4:b8:59:76:87:a3:36:86:3f:f2:fc:87:4c:f3:4b:ff:4d:
         47:25:54:7c:cc:2b:78:9e:c1:1e:ce:c0:56:dd:fb:36:df:17:
         72:10:c3:89:96:fd:22:07:e7:cf:3a:25:c7:9a:b5:ce:b7:74:
         e2:6f:dd:33:d3:76:9c:59:57:92:c2:4d:71:84:d0:b4:f4:3f:
         ca:fc:20:2a:f8:bc:54:d7:0c:3a:25:23:6d:5d:f1:a2:d0:43:
         69:49:d5:3f:40:b7:80:1c:d8:e4:1e:42:5a:9d:b9:0a:36:4c:
         7c:98:43:0b:82:5c:b2:00:2c:af:9f:33:37:fd:92:2e:34:d8:
         cd:0e:3b:2d:94:2a:31:ea:b3:1e:81:94:3b:0a:50:1d:63:75:
         f3:85:0f:bf:e2:63:9c:0f:67:f9:1c:a6:d9:44:74:28:0f:a7:
         df:33:46:9f:62:1e:24:f0:6f:47:db:80:df:d4:d6:30:4c:1b:
         51:40:38:8c:d8:8b:e4:ab:c3:14:58:0b:fb:19:a4:bd:61:e8:
         17:2a:04:c5:59:7b:ab:5a:08:97:8d:d5:5d:3e:be:18:bc:e1:
         0c:ff:32:0f:0b:72:08:8a:3d:30:e5:4b:35:08:08:1b:96:5d:
         6b:ed:b5:41:59:82:10:3d:08:8f:38:fa:9c:0b:7c:bf:a7:63:
         54:68:30:55
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUa8NZGVT+8jfRo1c3TKnJ1igBotgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yNDA1MjQwMzU1MDJaFw0yNTA1MjMwNDAwMDJaMDMxMTAvBgNV
BAMTKDgxMEY4NTg2OUUyNEZEMjc5MDVDRkI5MzVDMjUwMzA5NzYwRDYyNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeklNfPS01rTADE2u+YkWwDh+3
sErgMKjkns/pgb7Gje1KdKP7PlAqEXF+cHjek59Zg90hZ5GYXa2GUs+p4rmFLULx
31qv1+BmDCZUCW0bm21A5EjZr4qaM1IoNtDoTRluAVSdb2DIeScFvTGfWJfIXXPj
AiwwSvUodaR4bBbA+BLh1Ub50rQ8G2oG72VMsGwy1PffRDZIzhWMqScD2tCOGGuc
NAa2jTfyvO8kGcPoP17BMQ95UFdusZSvpsTuqWjce5l3b2mXPl2UZ/kt6H18twnx
q9YGXCjMVzCIVQwrYAOnSWk6zradbvU76KyN5jM6wxqOApv71AtQvr/mGabdAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUgQ+Fhp4k/SeQXPuTXCUDCXYNYmAwHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h
OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzEzNjJlMzYzNjJlMzIzMDMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHRCyTANBgkqhkiG
9w0BAQsFAAOCAQEAR+S4WXaHozaGP/L8h0zzS/9NRyVUfMwreJ7BHs7AVt37Nt8X
chDDiZb9Igfnzzolx5q1zrd04m/dM9N2nFlXksJNcYTQtPQ/yvwgKvi8VNcMOiUj
bV3xotBDaUnVP0C3gBzY5B5CWp25CjZMfJhDC4JcsgAsr58zN/2SLjTYzQ47LZQq
MeqzHoGUOwpQHWN184UPv+JjnA9n+Rym2UR0KA+n3zNGn2IeJPBvR9uA39TWMEwb
UUA4jNiL5KvDFFgL+xmkvWHoFyoExVl7q1oIl43VXT6+GLzhDP8yDwtyCIo9MOVL
NQgIG5Zda+21QVmCED0Ijzj6nAt8v6djVGgwVQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org