Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34332e302f32342d3234203d3e203338313635.roa
File:                     3131362e31322e34332e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          7mBwjFPQZFgzyHfGpkK7KtwqMFVFV2Jic6WmbXZnUN0=
Subject key identifier:   EF:CF:52:45:2E:01:80:0F:6D:75:8E:D1:0D:05:85:A8:AD:61:DC:D1
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       68331776325BEF3588205A435BAFF980ED153709
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34332e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 26 Feb 2024 01:57:27 +0000
ROA not before:           Mon 26 Feb 2024 01:52:27 +0000
ROA not after:            Mon 24 Feb 2025 01:57:27 +0000
asID:                     38165
IP address blocks:        116.12.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:33:17:76:32:5b:ef:35:88:20:5a:43:5b:af:f9:80:ed:15:37:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Feb 26 01:52:27 2024 GMT
            Not After : Feb 24 01:57:27 2025 GMT
        Subject: CN=EFCF52452E01800F6D758ED10D0585A8AD61DCD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7d:29:54:af:17:bf:b8:fb:d1:42:9a:d4:64:
                    b6:b5:de:5f:2d:4c:10:3d:37:ce:72:f3:c7:8e:80:
                    c9:ff:88:11:60:18:7d:56:25:1b:1d:e5:28:d4:57:
                    5f:e5:4e:5a:0e:48:28:e1:41:4f:a3:08:19:b5:6e:
                    d4:f8:34:ea:88:ca:90:cd:ed:6d:6d:cb:cc:72:f4:
                    d4:0d:46:f6:b0:63:33:e7:42:2a:cd:d0:2d:5a:62:
                    49:38:83:f3:03:61:4b:36:87:9f:6d:f1:22:1d:4b:
                    cb:5b:3e:4b:35:36:dd:06:f4:85:dc:b9:d7:6d:d6:
                    30:44:a4:94:da:d1:98:9d:14:39:ee:f1:84:76:3f:
                    ff:ea:94:c5:e5:56:7a:af:5c:09:1d:c9:e5:0b:d9:
                    38:09:c3:83:81:b9:76:3d:9e:4e:ca:fa:ec:b1:e0:
                    e4:76:06:57:be:0c:7c:13:fc:72:16:46:a4:f9:64:
                    17:d3:48:d4:a1:2e:ff:1c:9d:44:5b:47:e5:49:ff:
                    0e:c9:40:23:49:21:7e:31:5c:83:ff:9f:bb:ce:d1:
                    62:5a:cf:58:97:f5:ea:1d:1e:c3:90:92:5e:9a:e1:
                    90:29:8f:91:df:10:c0:0d:0b:68:21:79:15:1e:bb:
                    54:b8:97:c9:30:b7:70:c2:45:92:8a:e9:aa:42:f8:
                    af:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CF:52:45:2E:01:80:0F:6D:75:8E:D1:0D:05:85:A8:AD:61:DC:D1
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34332e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.12.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:78:89:1e:f6:ea:39:a5:a0:a8:31:19:c7:b1:b2:00:0e:43:
         51:59:90:07:2b:b0:54:47:9a:c1:4a:2a:d5:65:f8:15:66:e6:
         73:e1:70:18:85:18:38:c9:8f:b0:78:4a:80:10:30:51:6a:49:
         d1:3c:58:f3:cc:33:a5:d5:31:4d:fe:db:3f:34:cf:c6:2c:4e:
         a0:c5:f8:6e:02:e7:5e:9c:26:75:4c:8e:3d:43:6b:f3:50:9e:
         24:f4:b2:4d:8f:b2:40:88:fd:c9:67:06:bf:5f:51:e2:83:9e:
         85:cd:a0:44:48:96:00:39:9c:cb:1f:61:f7:3e:aa:d1:21:49:
         d8:73:59:c1:55:25:f5:9f:32:6d:c2:3f:35:92:c6:87:21:03:
         27:5f:3e:b1:4d:cb:ec:ac:e5:59:3d:c3:e3:a5:69:4e:5c:0d:
         c3:0d:e9:b8:a6:69:79:92:72:db:f7:3b:d6:62:4d:89:f6:51:
         72:b9:9a:1d:8a:58:cc:fb:fb:28:18:22:15:04:27:4f:dc:79:
         ab:42:b8:05:6a:e9:e4:62:e1:e1:4c:88:5c:a4:c9:27:da:ab:
         1f:c2:10:e9:4a:af:c2:88:41:23:3e:d0:e9:db:df:3c:9c:16:
         0d:53:ec:5a:dd:fc:ea:8b:2e:3a:9d:2d:a8:a1:5d:5c:b5:49:
         9a:94:51:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org