Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f31392d3139203d3e2034373837.roa
File:                     3137352e3135382e33322e302f31392d3139203d3e2034373837.roa (raw, json)
Hash identifier:          oT2OowlAV3JFpxVJV1ObFxo2pVML588pYLgJHcYQLoE=
Subject key identifier:   90:F6:62:D3:87:86:54:38:E1:65:D8:5E:7A:AF:D3:CA:5E:F5:28:87
Certificate issuer:       /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
Certificate serial:       3151A8DDB643A8AFB5AE170868AD32FDE44CCF5E
Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f31392d3139203d3e2034373837.roa
Signing time:             Mon 01 Jul 2024 01:05:41 +0000
ROA not before:           Mon 01 Jul 2024 01:00:41 +0000
ROA not after:            Mon 30 Jun 2025 01:05:41 +0000
asID:                     4787
IP address blocks:        175.158.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl
                          rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:51:a8:dd:b6:43:a8:af:b5:ae:17:08:68:ad:32:fd:e4:4c:cf:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
        Validity
            Not Before: Jul  1 01:00:41 2024 GMT
            Not After : Jun 30 01:05:41 2025 GMT
        Subject: CN=90F662D387865438E165D85E7AAFD3CA5EF52887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:76:15:89:29:fd:73:c7:fa:de:de:c5:9b:
                    7a:ec:10:b2:b9:04:8f:c2:5b:5c:85:de:ca:6b:06:
                    38:6f:a8:d2:19:a7:ad:2c:02:24:44:fc:4a:58:41:
                    4b:01:80:73:c7:a8:6b:fd:73:57:74:35:49:2e:57:
                    c9:10:c4:32:1d:76:20:e8:6c:35:95:17:4e:be:b3:
                    f9:5f:98:21:09:76:04:b9:7a:3f:01:ad:91:cf:6f:
                    ce:6b:7c:e5:2c:04:fb:62:8a:31:e9:ed:51:67:4c:
                    21:3a:ec:f7:92:53:3f:ec:64:e7:ac:ce:0d:4b:34:
                    05:14:db:2a:09:32:1a:8e:27:05:83:25:09:40:0d:
                    6f:84:db:6a:cf:48:7a:48:84:10:e4:ab:5f:d9:fc:
                    d0:2e:1a:b1:f8:c1:8d:21:47:96:92:b8:2e:12:8a:
                    94:f0:ce:30:e7:99:25:3a:36:c9:22:f0:68:d8:b2:
                    1d:6c:a6:8c:39:b7:f0:12:d8:ef:f3:93:fc:0a:f9:
                    2a:bd:fa:57:7f:4a:58:98:df:3d:47:70:6b:15:d4:
                    61:a0:01:93:de:b4:17:93:20:68:79:c9:25:b0:77:
                    3e:d1:5f:ef:83:0b:89:a2:9e:e9:34:70:a7:00:6b:
                    74:f0:e7:5c:58:97:3f:56:b3:87:cb:8c:61:77:9b:
                    08:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F6:62:D3:87:86:54:38:E1:65:D8:5E:7A:AF:D3:CA:5E:F5:28:87
            X509v3 Authority Key Identifier:
                keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f31392d3139203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.158.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         97:a0:92:74:35:8d:2d:2f:a4:f6:db:4d:fb:43:9c:91:f5:af:
         de:21:7d:29:ac:84:47:c2:d9:d7:21:c4:af:3b:f7:d4:3d:0a:
         46:cb:e2:8e:33:d6:84:94:81:2f:7f:8a:49:02:4e:27:36:0f:
         62:a6:dd:c9:29:f9:ce:2c:9c:b6:ef:dd:56:34:e5:97:fc:2c:
         47:2c:74:cb:f7:b7:50:31:c8:88:29:21:dd:6a:81:f7:60:31:
         1e:d4:9b:2d:58:87:86:7f:35:e4:af:51:7a:9f:79:e6:09:90:
         0d:b0:36:f4:50:fb:55:cc:49:83:d1:43:bf:06:a7:c8:78:4f:
         53:e1:7c:82:4c:8c:a7:f5:2b:d7:e5:36:64:0a:fe:ad:60:b6:
         18:81:a0:57:1c:60:b0:6f:ed:34:28:ac:45:fa:12:6a:97:17:
         49:0e:ed:51:19:31:61:0a:8a:4a:71:86:a9:6b:52:16:49:ec:
         da:1a:34:1d:0d:47:b8:be:55:48:9c:8d:30:2f:67:dd:d3:5f:
         b7:10:f8:ed:e8:12:b6:f0:86:37:c2:7e:79:dc:c7:30:20:15:
         83:3b:b8:5f:17:06:e6:c6:1b:41:a2:d0:23:fc:85:ac:07:b2:
         01:de:76:7a:ac:91:83:9b:a0:8a:d2:fe:af:b9:85:4c:29:08:
         23:87:36:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:28 2024 by rpki-client on console-ams.rpki-client.org