Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34322e302f32342d3234203d3e203338313635.roa
File:                     3131362e31322e34322e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          rArgMkrHT55Nu6lyUqcwFJv6uFBmDT5efs29CwHf5Z4=
Subject key identifier:   65:E4:C4:3B:E6:28:72:2A:13:14:B9:A5:39:52:EA:78:96:2E:E3:CE
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       40D33ED0BB18B03E3A1BD4AEEB21AF87D9C25954
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34322e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 26 Feb 2024 01:57:13 +0000
ROA not before:           Mon 26 Feb 2024 01:52:13 +0000
ROA not after:            Mon 24 Feb 2025 01:57:13 +0000
asID:                     38165
IP address blocks:        116.12.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d3:3e:d0:bb:18:b0:3e:3a:1b:d4:ae:eb:21:af:87:d9:c2:59:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Feb 26 01:52:13 2024 GMT
            Not After : Feb 24 01:57:13 2025 GMT
        Subject: CN=65E4C43BE628722A1314B9A53952EA78962EE3CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f0:c9:d6:3e:b2:bd:8a:ba:dd:05:2e:39:99:
                    3c:63:c2:f3:51:7d:24:05:47:f3:92:87:ac:11:fd:
                    60:06:59:6b:f4:b7:ac:f5:12:34:c2:47:a0:d4:32:
                    f9:8d:c3:5f:5c:4a:ad:a7:09:3c:15:4b:eb:cd:d3:
                    99:35:73:9e:4b:41:a8:a4:02:30:bd:28:41:f5:ef:
                    32:c9:ba:ae:6a:17:7d:47:1a:87:6b:ff:ee:f4:db:
                    87:73:9f:45:25:6b:07:69:66:c0:35:06:1c:a3:be:
                    90:5c:f5:28:02:0b:12:15:49:48:12:0a:56:8d:14:
                    7e:c9:c5:16:9a:f5:1c:f4:c3:ad:59:cb:04:17:52:
                    37:ef:d9:92:48:1f:6d:ce:08:81:9a:cb:c7:b8:bb:
                    25:a2:c0:a1:dd:5c:58:68:fa:4d:10:4c:a1:0b:fc:
                    53:b8:ee:ff:f9:e6:56:21:4f:67:b1:ab:b4:86:6f:
                    e8:0e:c1:d3:a8:3c:a8:02:a5:1d:c6:ae:a4:b2:fd:
                    77:01:2d:c0:c1:03:13:59:26:8a:67:b3:11:22:c8:
                    60:3d:d1:bd:a4:12:d6:de:c1:ef:7d:81:8f:c6:e5:
                    5e:d9:b8:ed:43:1d:f1:b1:be:2b:84:37:e7:7e:36:
                    c7:6f:3f:d1:ee:ea:7e:f3:a5:4d:65:a6:01:07:c1:
                    aa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E4:C4:3B:E6:28:72:2A:13:14:B9:A5:39:52:EA:78:96:2E:E3:CE
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34322e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.12.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:21:83:4b:b0:33:c3:82:c0:c3:1c:5e:ac:7d:0d:74:e0:92:
         a4:67:65:1b:6e:25:f4:94:03:61:90:26:da:e8:fd:04:86:46:
         54:02:87:45:9a:d9:0e:ef:31:8e:d0:b4:18:77:65:5a:50:a0:
         96:93:d2:c0:d9:fc:b3:68:7a:07:5f:47:97:32:47:73:f4:be:
         68:7a:91:f8:b4:67:0d:36:e6:d8:4d:88:02:81:e8:8e:9b:0a:
         c6:ae:fd:de:ea:30:00:8e:b4:58:76:03:cd:b1:15:05:88:8f:
         42:7e:d7:8b:af:50:ff:74:57:c5:11:a6:67:d1:67:db:cc:17:
         87:ae:ab:6b:23:61:18:4f:8b:79:4f:80:66:e3:6b:87:9d:00:
         03:62:86:fa:53:a6:23:38:54:eb:56:04:3a:26:85:a9:10:12:
         72:35:1e:82:5c:f8:22:1b:e9:77:2d:57:f7:ff:7f:f6:77:05:
         bb:82:e7:38:19:57:1c:7d:64:c4:98:0a:3a:ca:20:41:8e:85:
         31:a8:f9:aa:25:0e:4a:89:bd:5e:17:30:80:41:dc:a5:0d:df:
         7c:f0:e4:c0:16:69:24:3f:4d:b5:27:88:9d:a8:9d:af:eb:c1:
         9a:8b:03:2d:ed:b2:08:c1:8e:70:b3:25:6c:5b:1f:1e:d8:26:
         b1:41:70:64
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUQNM+0LsYsD46G9Su6yGvh9nCWVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDMjI0MTRCRjA4RkMwOEIwQUVCRjQ0RkFGODVBODU5
NzlEMTA1MzAeFw0yNDAyMjYwMTUyMTNaFw0yNTAyMjQwMTU3MTNaMDMxMTAvBgNV
BAMTKDY1RTRDNDNCRTYyODcyMkExMzE0QjlBNTM5NTJFQTc4OTYyRUUzQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr8MnWPrK9irrdBS45mTxjwvNR
fSQFR/OSh6wR/WAGWWv0t6z1EjTCR6DUMvmNw19cSq2nCTwVS+vN05k1c55LQaik
AjC9KEH17zLJuq5qF31HGodr/+7024dzn0UlawdpZsA1BhyjvpBc9SgCCxIVSUgS
ClaNFH7JxRaa9Rz0w61ZywQXUjfv2ZJIH23OCIGay8e4uyWiwKHdXFho+k0QTKEL
/FO47v/55lYhT2exq7SGb+gOwdOoPKgCpR3GrqSy/XcBLcDBAxNZJopnsxEiyGA9
0b2kEtbewe99gY/G5V7ZuO1DHfGxviuEN+d+NsdvP9Hu6n7zpU1lpgEHwarhAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUZeTEO+YocioTFLmlOVLqeJYu484wHwYDVR0j
BBgwFoAU8sIkFL8I/Aiwrr9E+vhahZedEFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NzQ0OGMxMS1mOGQzLTQ1N2QtOGUyMi04NDg4N2FiMjJhMzAvMC9GMkMyMjQxNEJG
MDhGQzA4QjBBRUJGNDRGQUY4NUE4NTk3OUQxMDUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjJDMjI0MTRCRjA4RkMwOEIwQUVCRjQ0RkFGODVBODU5NzlE
MTA1My5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3NDQ4YzExLWY4ZDMtNDU3ZC04
ZTIyLTg0ODg3YWIyMmEzMC8wLzMxMzEzNjJlMzEzMjJlMzQzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB0DCowDQYJKoZIhvcN
AQELBQADggEBAJ4hg0uwM8OCwMMcXqx9DXTgkqRnZRtuJfSUA2GQJtro/QSGRlQC
h0Wa2Q7vMY7QtBh3ZVpQoJaT0sDZ/LNoegdfR5cyR3P0vmh6kfi0Zw025thNiAKB
6I6bCsau/d7qMACOtFh2A82xFQWIj0J+14uvUP90V8URpmfRZ9vMF4euq2sjYRhP
i3lPgGbja4edAANihvpTpiM4VOtWBDomhakQEnI1HoJc+CIb6XctV/f/f/Z3BbuC
5zgZVxx9ZMSYCjrKIEGOhTGo+aolDkqJvV4XMIBB3KUN33zw5MAWaSQ/TbUniJ2o
na/rwZqLAy3tsgjBjnCzJWxbHx7YJrFBcGQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org