Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34342e302f32342d3234203d3e203338313635.roa
File:                     3131362e31322e34342e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          JueqoHfG7FLeVZUaDdXEcApZaz1zJ6cQCSoiVqscyM8=
Subject key identifier:   E9:DD:53:7C:A0:CD:29:38:B2:05:9F:B4:01:57:80:23:D9:40:F6:C8
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       4BAF42F7BA92E259383F931760FD04E5730EE3E4
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34342e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 26 Feb 2024 01:57:39 +0000
ROA not before:           Mon 26 Feb 2024 01:52:39 +0000
ROA not after:            Mon 24 Feb 2025 01:57:39 +0000
asID:                     38165
IP address blocks:        116.12.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:af:42:f7:ba:92:e2:59:38:3f:93:17:60:fd:04:e5:73:0e:e3:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Feb 26 01:52:39 2024 GMT
            Not After : Feb 24 01:57:39 2025 GMT
        Subject: CN=E9DD537CA0CD2938B2059FB401578023D940F6C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f3:2a:a2:47:d8:b2:14:c3:e1:9d:12:a2:5c:
                    19:51:67:ce:6f:99:ec:d9:66:d3:35:6f:5e:c2:4c:
                    0f:78:d7:9a:83:34:f4:d2:66:49:c2:33:46:b0:f2:
                    1f:29:8f:b4:ac:9d:1a:ea:2c:fc:3e:f7:8b:55:67:
                    fc:a3:84:0b:af:82:5c:88:0f:72:d9:b3:84:e9:b8:
                    d3:cb:fe:c8:b2:fc:a6:71:76:38:3c:02:94:6c:5f:
                    af:d9:15:4a:b6:2b:4a:90:3d:7f:bb:f0:62:d8:0f:
                    d4:9c:56:e6:6e:49:c6:99:2b:77:c8:7f:1f:5b:2e:
                    32:ce:c7:de:e6:eb:07:84:b6:21:6a:f0:57:fc:7d:
                    73:da:81:88:35:42:74:53:20:53:85:0b:bb:02:83:
                    35:4d:15:89:f1:74:63:34:b5:0e:df:60:67:22:ec:
                    dc:3b:cd:7e:75:29:ba:e8:e8:0c:cb:67:9a:32:19:
                    51:ba:3c:c7:42:1f:70:7f:a2:ea:2f:c1:87:2d:8f:
                    d2:09:76:6c:85:94:1f:0b:3e:fc:c1:f7:fb:43:e0:
                    ff:2a:e4:3e:04:97:b0:e2:5e:d9:6f:32:69:0c:ce:
                    9e:68:2b:00:37:e4:c7:b7:e1:87:dd:b7:7c:be:d3:
                    a1:d5:f7:4b:2e:1b:30:6b:89:51:7f:e8:d7:a8:1e:
                    05:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DD:53:7C:A0:CD:29:38:B2:05:9F:B4:01:57:80:23:D9:40:F6:C8
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34342e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.12.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:42:ac:5e:66:1e:4b:97:d8:c8:ba:d7:7e:57:a5:92:7e:28:
         81:d2:46:f1:9d:38:63:3a:e7:40:2a:02:95:43:8c:25:1a:ae:
         d6:ae:d3:46:4d:5c:e5:50:2e:82:5d:c1:8e:d9:4c:64:89:e1:
         a6:1d:17:10:ce:16:52:2a:bf:79:e2:c5:ed:a6:1e:78:36:eb:
         a4:47:7a:9c:66:6a:d1:57:51:c1:f8:9b:5a:0f:bf:82:dd:bf:
         2c:a9:5a:17:ba:fe:65:71:23:29:9f:71:ec:d3:78:ec:32:bd:
         aa:1e:4d:e5:4c:52:bc:7b:90:83:8b:4f:68:bc:88:1d:72:81:
         ea:74:a3:7c:9c:a6:68:dc:e7:f4:81:dd:ae:29:be:f2:25:51:
         65:65:ff:1b:20:0b:5d:9a:0c:27:2f:61:36:30:56:6f:c2:17:
         46:3e:b3:a2:79:4c:52:d2:8a:72:8e:4a:c2:bc:bb:9d:bb:3f:
         c0:82:d2:53:eb:89:7b:ac:32:28:c9:b3:0b:40:00:5c:6c:dd:
         85:7d:1c:41:96:e5:75:3f:27:7c:6e:ee:2d:ec:0f:00:62:12:
         85:52:56:39:fa:65:b0:91:44:f5:65:72:f3:fa:2e:bb:0f:90:
         f7:ec:b0:68:fc:22:a4:e2:62:9e:5b:9f:73:5a:07:cf:78:e5:
         8d:d7:31:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org