Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230372e302f32342d3234203d3e203338343936.roa
File:                     3131362e36362e3230372e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          ujr2Z4IiJJgMw+nx+7avQekt1v1ufO7otfziMB+BjOc=
Subject key identifier:   05:0B:18:84:B6:B1:93:36:54:C9:2D:DD:3D:D0:BB:75:DF:21:12:99
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       50FCDC4F08E037A25FB9703A487D6D0A20344069
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230372e302f32342d3234203d3e203338343936.roa
Signing time:             Fri 24 May 2024 05:02:16 +0000
ROA not before:           Fri 24 May 2024 04:57:16 +0000
ROA not after:            Fri 23 May 2025 05:02:16 +0000
asID:                     38496
IP address blocks:        116.66.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fc:dc:4f:08:e0:37:a2:5f:b9:70:3a:48:7d:6d:0a:20:34:40:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: May 24 04:57:16 2024 GMT
            Not After : May 23 05:02:16 2025 GMT
        Subject: CN=050B1884B6B1933654C92DDD3DD0BB75DF211299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:65:93:46:2e:dc:79:b7:b9:bd:61:9d:a3:32:
                    26:c4:da:ea:7a:4b:5b:d0:6b:0b:22:21:b9:a4:88:
                    fe:aa:44:11:09:a6:dd:c1:c0:b5:1c:27:01:0b:52:
                    7e:ce:63:d2:fe:ac:02:04:37:e9:2f:04:12:0f:15:
                    54:61:25:cb:d3:4b:82:66:63:e0:20:7d:31:fc:6b:
                    52:c6:51:59:90:3b:70:d8:01:d9:9c:32:1d:fa:4e:
                    e8:09:3b:9a:4d:06:e5:d8:d9:6b:4f:df:0b:ee:99:
                    5b:04:ac:35:a9:c9:e6:50:75:30:41:b4:df:d7:01:
                    85:b0:2f:ec:3f:09:12:c6:36:f8:d7:fd:c2:21:63:
                    2f:01:f2:1d:04:f6:b5:3d:e9:43:68:d1:45:27:b6:
                    7b:de:65:0e:37:b2:cd:b7:fd:73:37:bb:c0:95:ea:
                    cd:01:61:b8:d4:13:81:12:1a:f4:78:85:ce:00:7f:
                    6f:f2:99:e4:6c:06:94:70:38:55:a5:06:f8:0b:79:
                    0e:41:82:1b:00:25:58:09:81:da:15:dd:6c:72:54:
                    7f:7d:86:8e:d7:e6:38:97:27:bc:f6:6f:90:ec:0b:
                    bc:ad:5c:c2:f1:76:5a:23:e0:6a:ff:2a:84:39:05:
                    49:de:08:21:c2:0b:78:b6:14:8c:f8:7d:ab:08:ac:
                    32:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0B:18:84:B6:B1:93:36:54:C9:2D:DD:3D:D0:BB:75:DF:21:12:99
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230372e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.66.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:a4:80:fc:2c:54:f8:d5:ed:30:4f:ef:53:86:c6:e6:76:93:
         39:e0:35:e9:e7:1c:28:99:5e:b4:44:c3:f3:c3:ed:12:9d:ba:
         8b:b1:31:6f:3f:ea:c4:ff:5e:5e:1f:de:0d:6f:f6:58:e5:66:
         4c:83:8a:59:5d:7c:eb:fa:a2:39:e4:16:b3:03:a9:72:8b:34:
         70:13:42:ad:65:c8:8c:d2:0f:06:19:6e:c9:8e:e0:27:0b:59:
         43:12:22:bd:da:f9:67:7f:bf:95:8c:24:27:9f:ec:5a:e0:e4:
         3d:f4:ad:7a:7d:a6:09:12:c0:ef:84:18:c3:f1:60:2c:27:55:
         77:f7:e0:fb:4f:25:4f:b3:eb:50:85:01:5a:73:e1:74:27:89:
         0d:3d:36:61:8b:bf:d1:90:ed:45:0d:28:f0:b1:90:58:9d:cc:
         a8:e5:13:bb:71:ab:b1:c2:65:0d:8b:fb:b0:75:b4:10:d2:f1:
         11:3f:24:94:e5:60:85:b1:32:62:19:08:49:77:ee:62:39:d2:
         ce:f3:7c:8c:15:ca:18:e3:79:db:0f:10:f0:85:d9:38:80:c1:
         66:ba:c7:22:32:1d:ea:83:bb:a9:60:ee:5e:d9:11:ca:26:fc:
         4a:4f:ce:f9:b1:72:c6:67:67:ee:a1:a3:9c:1b:e5:61:6b:18:
         a7:6f:97:0d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUUPzcTwjgN6JfuXA6SH1tCiA0QGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yNDA1MjQwNDU3MTZaFw0yNTA1MjMwNTAyMTZaMDMxMTAvBgNV
BAMTKDA1MEIxODg0QjZCMTkzMzY1NEM5MkRERDNERDBCQjc1REYyMTEyOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKZZNGLtx5t7m9YZ2jMibE2up6
S1vQawsiIbmkiP6qRBEJpt3BwLUcJwELUn7OY9L+rAIEN+kvBBIPFVRhJcvTS4Jm
Y+AgfTH8a1LGUVmQO3DYAdmcMh36TugJO5pNBuXY2WtP3wvumVsErDWpyeZQdTBB
tN/XAYWwL+w/CRLGNvjX/cIhYy8B8h0E9rU96UNo0UUntnveZQ43ss23/XM3u8CV
6s0BYbjUE4ESGvR4hc4Af2/ymeRsBpRwOFWlBvgLeQ5BghsAJVgJgdoV3WxyVH99
ho7X5jiXJ7z2b5DsC7ytXMLxdloj4Gr/KoQ5BUneCCHCC3i2FIz4fasIrDI/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUBQsYhLaxkzZUyS3dPdC7dd8hEpkwHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h
OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzEzNjJlMzYzNjJlMzIzMDM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHRCzzANBgkqhkiG
9w0BAQsFAAOCAQEAMqSA/CxU+NXtME/vU4bG5naTOeA16eccKJletETD88PtEp26
i7Exbz/qxP9eXh/eDW/2WOVmTIOKWV186/qiOeQWswOpcos0cBNCrWXIjNIPBhlu
yY7gJwtZQxIivdr5Z3+/lYwkJ5/sWuDkPfSten2mCRLA74QYw/FgLCdVd/fg+08l
T7PrUIUBWnPhdCeJDT02YYu/0ZDtRQ0o8LGQWJ3MqOUTu3GrscJlDYv7sHW0ENLx
ET8klOVghbEyYhkISXfuYjnSzvN8jBXKGON52w8Q8IXZOIDBZrrHIjId6oO7qWDu
XtkRyib8Sk/O+bFyxmdn7qGjnBvlYWsYp2+XDQ==
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:52:58 2024 by rpki-client on console-ams.rpki-client.org