Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34352e302f32342d3234203d3e203338313635.roa
File:                     3131362e31322e34352e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          0BSDUcqVvJeNDkAg3yPAipM/U1rsAcuraYSP8ipf3jI=
Subject key identifier:   B8:05:99:E9:7D:D1:9D:B7:26:1B:1A:19:55:00:0E:91:BB:DF:4C:51
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       72F3E6D2100ED4A23428A84E4F52581CFE104DC0
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34352e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 26 Feb 2024 01:57:54 +0000
ROA not before:           Mon 26 Feb 2024 01:52:54 +0000
ROA not after:            Mon 24 Feb 2025 01:57:54 +0000
asID:                     38165
IP address blocks:        116.12.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f3:e6:d2:10:0e:d4:a2:34:28:a8:4e:4f:52:58:1c:fe:10:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Feb 26 01:52:54 2024 GMT
            Not After : Feb 24 01:57:54 2025 GMT
        Subject: CN=B80599E97DD19DB7261B1A1955000E91BBDF4C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:53:f4:6a:75:1f:d4:39:b7:88:c8:9f:30:4e:
                    19:a7:52:19:dc:7f:21:c0:c2:79:cc:22:39:19:48:
                    35:ba:37:2b:02:af:b6:a9:7b:fc:44:d3:d9:16:43:
                    2b:e7:c9:89:eb:2e:aa:a9:e0:65:3f:79:01:0a:c2:
                    53:e6:b2:77:f8:f7:a0:6b:d8:e0:2b:dc:1d:31:dd:
                    d3:7c:01:67:6a:3c:80:35:c0:af:5c:4f:98:bb:a4:
                    15:a2:a2:a0:5c:40:a7:20:0f:c4:4a:8e:ce:ea:7a:
                    0e:08:2a:93:61:48:e8:c4:b0:ae:4d:6f:7e:f4:a9:
                    0e:a2:1f:c6:08:95:c1:f8:c3:15:8f:b2:5d:f2:9b:
                    c3:f6:12:b3:79:7a:41:fc:3a:2f:40:b7:10:99:68:
                    f9:41:41:f3:e8:ee:ef:04:4a:ee:d1:84:40:8e:56:
                    da:52:9c:f6:8a:13:20:20:1b:bf:0f:8d:09:33:ee:
                    14:e4:29:f0:38:06:53:4e:57:35:28:7f:35:56:5f:
                    6b:46:15:18:c6:96:04:fa:44:cc:05:39:f4:7e:75:
                    23:e9:ed:6d:79:df:b4:1a:47:ea:a8:7c:72:26:9d:
                    98:17:e3:13:d3:52:d3:34:d9:5c:b5:69:5a:05:fb:
                    47:99:cb:03:a0:6e:96:81:93:5b:20:75:d8:ca:b3:
                    f8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:05:99:E9:7D:D1:9D:B7:26:1B:1A:19:55:00:0E:91:BB:DF:4C:51
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34352e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.12.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:cd:67:45:b2:64:79:bd:9f:84:93:89:8d:b4:ec:24:3c:18:
         ef:44:fb:b7:bf:b2:93:c1:ae:5a:11:15:58:93:90:32:68:ae:
         d2:9f:d1:35:ff:9e:68:5c:f2:aa:85:67:32:9c:99:78:54:a3:
         fe:0d:c7:b7:da:5c:a5:b9:70:b5:f7:1e:9a:b2:4b:9a:8f:bc:
         f8:e0:7e:99:88:8c:b3:81:13:0c:33:2e:b3:5c:22:98:a2:a6:
         be:ea:ca:e9:6e:bc:1f:3e:93:cc:56:c7:dd:4f:d9:b8:24:98:
         a1:2c:23:33:11:ec:76:86:9d:80:34:df:64:18:0b:c7:6f:94:
         c0:b1:4c:0d:f9:f2:c1:e3:dd:e1:75:0a:1f:dd:48:47:5f:49:
         55:b0:0b:51:af:69:90:e5:23:94:f6:a0:9e:16:19:17:23:8c:
         87:41:e4:9d:2e:ce:ce:47:ef:51:10:12:f0:4e:5d:a6:3e:cd:
         f7:e4:b8:97:3a:4c:36:f1:22:b9:ab:7c:68:38:bf:f0:41:3f:
         ec:5a:76:d2:7f:41:68:2c:e7:48:05:a2:10:fe:eb:43:4b:d5:
         58:8f:d6:44:0d:26:bc:dd:3a:2e:62:8f:c7:90:eb:20:3a:b5:
         10:21:77:02:8a:c6:d9:4d:f3:f9:d9:9f:38:b3:2f:c7:b1:07:
         2d:a0:87:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org