Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34392e302f32342d3234203d3e203338373833.roa
File:                     3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (raw, json)
Hash identifier:          +NlmIv+kbVy0YXXWj7nJbG70OmX8j/Qqy/T1NLk7Y6Y=
Subject key identifier:   36:82:01:F0:6C:76:EF:DE:73:A9:D2:99:3B:2D:55:24:BB:C9:0A:93
Certificate issuer:       /CN=B605E2C01C5BDC6CEE49545C80501360234DC910
Certificate serial:       714284E96E9214F7894966369C2C09CB87A5E7A6
Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34392e302f32342d3234203d3e203338373833.roa
Signing time:             Mon 31 Jul 2023 00:07:38 +0000
ROA not before:           Mon 31 Jul 2023 00:02:38 +0000
ROA not after:            Mon 29 Jul 2024 00:07:38 +0000
asID:                     38783
IP address blocks:        115.178.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl
                          rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 14:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:42:84:e9:6e:92:14:f7:89:49:66:36:9c:2c:09:cb:87:a5:e7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910
        Validity
            Not Before: Jul 31 00:02:38 2023 GMT
            Not After : Jul 29 00:07:38 2024 GMT
        Subject: CN=368201F06C76EFDE73A9D2993B2D5524BBC90A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2e:fb:b0:8d:73:97:1f:c7:1b:c4:3c:96:31:
                    c5:77:81:31:06:b1:da:34:09:db:5e:f7:db:bd:7a:
                    b5:2f:7e:5b:27:0d:f3:90:50:ab:71:02:a1:70:6e:
                    64:46:6c:3e:ca:aa:68:c0:90:7e:c2:6a:a1:d6:5c:
                    68:6e:6e:40:cc:ea:fc:1e:9c:d2:f6:36:65:1d:f3:
                    da:2f:20:1c:54:0f:74:09:78:6d:38:82:47:be:ce:
                    5f:1e:67:1f:d7:d5:51:2e:60:32:32:7b:91:97:40:
                    ec:09:06:fc:91:80:25:dc:ef:db:77:e4:53:ed:ea:
                    13:e9:4a:38:ad:6c:3a:92:d2:55:4c:8d:e3:67:a8:
                    08:e8:d4:a8:5f:f0:8c:3b:f1:f2:ef:28:a2:5d:59:
                    0e:f1:d9:90:f3:08:1d:5d:e8:4e:97:cd:e7:30:20:
                    f9:6f:4f:b2:83:a4:14:25:8c:a3:72:96:93:aa:81:
                    96:2e:8d:5c:53:b2:3a:53:3b:f2:c9:02:6f:12:db:
                    4c:30:be:24:d7:14:2a:8a:8a:c5:9e:3a:5e:75:79:
                    74:58:22:71:f8:46:ad:67:0d:16:40:92:a7:11:65:
                    4d:32:13:0d:3e:9b:dd:45:24:81:ff:b6:b1:1f:22:
                    7d:9d:34:99:15:8c:84:62:9d:2a:84:30:c8:19:0d:
                    99:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:82:01:F0:6C:76:EF:DE:73:A9:D2:99:3B:2D:55:24:BB:C9:0A:93
            X509v3 Authority Key Identifier:
                keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34392e302f32342d3234203d3e203338373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:0f:1c:c6:6f:7e:3d:ee:b0:8a:b5:5f:38:24:a2:24:f8:0c:
         3f:fa:09:d4:46:67:f4:a8:3e:c4:27:00:82:bc:bb:fc:d6:2e:
         9e:31:3b:00:e6:1e:a1:3f:16:ac:82:c0:b0:c7:0f:2e:03:ab:
         d6:29:0e:f8:6e:89:b4:66:30:ee:28:98:ae:79:6e:0c:7c:0a:
         a7:1f:10:c0:af:b9:b7:7e:86:24:74:e9:c5:18:0c:68:52:55:
         0c:d8:1b:09:27:5e:a7:d1:a0:ab:30:67:f3:29:42:05:44:ac:
         96:52:3d:9c:9b:f6:0e:ac:09:8b:13:e1:d5:51:37:19:0b:9b:
         fa:32:2e:5d:d4:a2:df:30:51:21:1d:31:83:c9:0e:df:f5:34:
         b3:e7:01:61:29:36:b7:a6:cc:7c:be:1f:8d:82:46:74:4b:2f:
         3f:fa:1a:5a:44:a5:1d:3b:c4:af:0a:52:42:f3:5e:48:aa:ea:
         42:bf:b9:c9:9b:5a:d5:ec:6f:e4:d4:8c:fa:55:d7:a2:3b:c8:
         fc:c6:14:62:9e:1e:f4:7e:f6:85:b7:c5:5f:68:84:d9:64:b4:
         92:a1:50:68:50:6d:db:bc:7e:8d:ec:a8:4a:f5:d4:50:a6:1f:
         4a:dc:62:08:d6:3c:1d:41:39:c3:10:16:6e:6c:11:92:f4:08:
         2a:53:c4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 17:45:40 2024 by rpki-client on console-ams.rpki-client.org