Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230322e302f32332d3234203d3e203338343936.roa
File:                     3131362e36362e3230322e302f32332d3234203d3e203338343936.roa (raw, json)
Hash identifier:          RGlZ2fdl3ihFdcw6xx1oKw/a2mEfwRpaxgWzAinaAqI=
Subject key identifier:   C8:12:73:4F:CE:51:D8:84:A9:40:0D:9D:88:0D:98:9C:9E:22:28:1E
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       2390C1F1F708F31834F1534F63905C606359133E
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230322e302f32332d3234203d3e203338343936.roa
Signing time:             Tue 30 Apr 2024 02:39:13 +0000
ROA not before:           Tue 30 Apr 2024 02:34:13 +0000
ROA not after:            Tue 29 Apr 2025 02:39:13 +0000
asID:                     38496
IP address blocks:        116.66.202.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:90:c1:f1:f7:08:f3:18:34:f1:53:4f:63:90:5c:60:63:59:13:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Apr 30 02:34:13 2024 GMT
            Not After : Apr 29 02:39:13 2025 GMT
        Subject: CN=C812734FCE51D884A9400D9D880D989C9E22281E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:fd:66:52:5f:b1:32:80:a6:75:78:e1:42:
                    bc:01:10:74:ba:53:36:ab:ed:eb:a7:34:9c:80:92:
                    4e:31:f8:91:28:31:48:60:1e:d5:18:19:a1:6d:a3:
                    04:96:de:1d:5d:9f:0c:92:82:26:19:59:b0:e0:f4:
                    52:7d:03:7f:dc:79:39:ae:44:10:1c:f7:61:da:09:
                    90:06:e5:f5:2c:ff:91:8a:a8:09:e4:12:6d:8e:3b:
                    7f:6e:33:1f:be:5a:bd:c1:81:4b:d7:4e:89:7e:e5:
                    d7:44:0e:35:26:4e:e0:af:25:c1:22:57:46:e6:32:
                    4b:98:d5:fa:60:f1:02:78:66:d9:16:58:03:cf:9d:
                    75:07:e7:fa:d2:be:2c:78:8e:5c:c2:79:81:ec:07:
                    51:33:0c:69:23:c9:5a:f3:96:cc:98:15:f5:c9:72:
                    b1:fa:a2:13:23:51:81:48:cb:bb:42:1d:7c:dd:49:
                    e7:e7:1e:b6:e6:12:57:f3:b5:0a:d1:a3:2d:c9:07:
                    7e:5d:21:f0:57:43:2c:94:19:ac:37:22:60:9a:f6:
                    e9:85:88:12:05:a6:92:56:7a:01:80:7b:61:c5:d9:
                    71:a9:92:f8:2e:cb:a9:1d:6a:d8:37:9a:96:8c:b1:
                    1f:bb:d1:1c:9a:b0:60:a6:dc:f1:ae:6d:75:cd:c8:
                    ab:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:12:73:4F:CE:51:D8:84:A9:40:0D:9D:88:0D:98:9C:9E:22:28:1E
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230322e302f32332d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.66.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:47:a8:da:48:64:b3:84:13:03:d6:9a:fb:cd:3c:9c:03:63:
         5b:8f:e9:ac:4c:7c:00:50:d6:8a:3c:4c:05:db:9a:1f:a2:88:
         73:53:ec:d5:31:27:cf:54:ef:8f:53:06:66:3b:ad:cf:9b:86:
         20:3a:52:36:90:f1:64:4e:c1:98:9f:bf:6d:fd:08:88:cc:34:
         b7:ff:26:8f:0c:76:50:8c:9d:4e:ea:b5:d9:ea:bc:a3:ea:7a:
         51:3c:54:16:92:dd:d9:9a:02:50:79:9b:66:ea:16:0b:15:0f:
         92:c5:de:93:ab:16:f5:0a:fc:7c:49:12:2d:16:af:90:63:0c:
         6b:ba:e5:ab:ed:a9:fd:50:17:17:10:69:f8:19:5a:e0:03:14:
         50:6f:43:e1:b2:5d:cf:ab:85:06:e1:e4:cd:ce:43:4b:bf:91:
         52:d1:f7:bb:98:74:b2:9e:32:67:90:3c:83:e9:50:3c:f1:33:
         94:3c:cd:8e:83:7a:10:c5:03:a6:93:d6:47:14:7e:62:84:07:
         3c:88:b4:d7:48:85:1c:d0:08:b1:1a:60:9a:c3:fd:cf:5a:af:
         af:13:34:7e:57:74:9b:08:81:50:ff:ad:33:33:4a:a5:48:8b:
         96:2b:27:ab:7d:b4:73:fe:d9:b3:69:88:78:4b:64:19:6d:52:
         fa:ca:43:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org