Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa
File:                     3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          cgag9plQwiQQy3TioGPrVnpZw4hHPKwl88VGTzJ+6sU=
Subject key identifier:   F6:89:EA:64:67:9C:D1:38:3A:1C:07:67:8A:13:0A:45:A5:54:83:9D
Certificate issuer:       /CN=B605E2C01C5BDC6CEE49545C80501360234DC910
Certificate serial:       5CD24C66A611D19E15770912DCD507FC1800BB59
Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa
Signing time:             Mon 18 Sep 2023 18:00:01 +0000
ROA not before:           Mon 18 Sep 2023 17:55:01 +0000
ROA not after:            Mon 16 Sep 2024 18:00:01 +0000
asID:                     131717
IP address blocks:        115.178.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl
                          rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d2:4c:66:a6:11:d1:9e:15:77:09:12:dc:d5:07:fc:18:00:bb:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910
        Validity
            Not Before: Sep 18 17:55:01 2023 GMT
            Not After : Sep 16 18:00:01 2024 GMT
        Subject: CN=F689EA64679CD1383A1C07678A130A45A554839D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ee:00:7b:83:a4:0d:f4:05:58:e9:3d:95:da:
                    7b:74:dc:d1:46:7c:74:77:1a:ad:6b:f2:d3:54:3d:
                    dc:89:e7:9e:7c:09:e0:d1:17:86:9d:d0:ab:ba:71:
                    7c:cd:a2:fd:05:d9:d2:50:46:9e:37:e5:db:8c:5f:
                    9f:fd:fb:5a:88:76:5f:03:36:59:26:32:7a:3c:e3:
                    f5:f0:42:29:9a:f3:d0:4a:1b:d6:77:f3:eb:85:6a:
                    75:f3:d2:c4:55:5e:3b:21:e4:e5:71:97:67:29:4b:
                    40:2d:b1:12:62:f3:e3:74:b2:87:d8:03:0e:d7:61:
                    ca:1b:c0:67:72:a6:fc:bf:70:47:41:b2:6b:00:85:
                    07:87:de:cc:23:70:6d:b3:38:f9:a5:70:fe:2a:f7:
                    71:2c:dc:42:4a:fd:eb:7d:3c:10:ca:e8:da:71:5e:
                    5a:cc:95:4c:b8:e2:b2:9e:ff:3e:4b:f4:f8:50:d2:
                    e8:e5:e4:c9:ff:3f:bf:b2:16:de:20:42:ff:7a:58:
                    b4:88:15:e7:2f:23:74:f5:44:14:9f:32:95:ea:e2:
                    e3:1a:e6:9c:ea:8c:19:42:99:3e:e2:72:ae:c9:33:
                    87:d9:ab:d2:a9:47:ce:4b:50:53:43:73:85:6a:fa:
                    a2:17:01:93:e2:84:8a:55:74:2d:0e:e1:38:66:bc:
                    9d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:89:EA:64:67:9C:D1:38:3A:1C:07:67:8A:13:0A:45:A5:54:83:9D
            X509v3 Authority Key Identifier:
                keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:b5:28:2c:4e:94:34:3c:c1:6e:5e:da:72:92:43:95:93:59:
         38:e8:84:0e:47:78:ff:cb:36:12:e9:c1:f5:e7:99:16:d4:fa:
         84:3a:ff:07:c2:a5:be:35:ef:17:ef:c5:74:2f:bf:35:c0:a6:
         ea:99:fc:80:ac:01:02:9b:04:98:0f:bc:1d:23:3b:f2:cb:46:
         db:65:b8:b3:44:f0:b1:41:49:fd:97:7c:86:67:93:87:f9:f6:
         0f:2a:3f:98:9f:81:fe:be:b1:e0:8e:ba:8a:e6:27:63:36:c0:
         5c:48:32:c0:e5:a9:19:64:f9:46:12:e0:04:db:ba:36:c4:9d:
         4d:f0:d4:d5:00:0c:cf:42:0d:7f:c6:24:c1:c6:06:b1:4b:80:
         16:a5:26:b9:80:37:f3:73:36:cd:fd:3c:c9:c1:a5:7f:81:3e:
         68:14:19:05:e3:85:b9:08:1a:33:39:8d:69:28:91:52:2a:f2:
         76:d6:9a:f3:de:0c:e8:70:fc:de:18:c7:f0:88:09:14:38:8d:
         9b:1b:89:4f:4a:ea:ac:d6:d9:76:95:62:8c:7c:26:4f:11:a3:
         f7:04:ce:31:c2:c2:0e:32:b9:67:5a:ce:43:0e:9a:e1:09:6d:
         bb:a8:72:a8:89:c6:c3:45:94:8f:fe:09:7e:0b:3a:69:06:d1:
         32:5e:f8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:29:16 2024 by rpki-client on console-ams.rpki-client.org