Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa
File:                     3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (raw, json)
Hash identifier:          OwGVX4uDsFx+BfSDv1qnIHIR7bY2X0pI7Wmkb/eOX/M=
Subject key identifier:   3A:4E:57:FF:FB:F4:29:3E:00:EF:DE:42:F0:7D:66:9E:E4:7E:64:C1
Certificate issuer:       /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial:       5571EA41D0C77EA06B39BEC9379C608A084704FB
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa
Signing time:             Sun 02 Jun 2024 04:00:02 +0000
ROA not before:           Sun 02 Jun 2024 03:55:02 +0000
ROA not after:            Sun 01 Jun 2025 04:00:02 +0000
asID:                     18004
IP address blocks:        115.178.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
                          rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:71:ea:41:d0:c7:7e:a0:6b:39:be:c9:37:9c:60:8a:08:47:04:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
        Validity
            Not Before: Jun  2 03:55:02 2024 GMT
            Not After : Jun  1 04:00:02 2025 GMT
        Subject: CN=3A4E57FFFBF4293E00EFDE42F07D669EE47E64C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9a:75:0c:b6:77:19:5c:a7:1a:d7:e3:e4:e1:
                    ff:c2:0f:4f:4b:d1:d3:67:dc:e0:01:39:d5:ae:9f:
                    a0:69:57:29:58:0e:61:f0:2d:e9:30:67:2c:a6:bf:
                    40:71:1b:bf:f4:4c:dc:74:4d:03:74:51:69:7c:36:
                    be:35:11:cf:19:e4:43:9f:58:aa:83:35:2e:bb:30:
                    64:8e:11:57:8d:4c:10:02:d0:16:50:aa:29:1c:c5:
                    5c:61:9b:01:b5:fd:63:c8:82:51:b4:c0:68:7d:87:
                    b4:4b:dd:90:56:f9:65:70:38:33:68:2c:f7:8e:3c:
                    f7:d2:9d:b0:1a:45:b6:bb:42:f9:e3:3e:38:b3:86:
                    a1:97:d4:7a:0a:20:13:aa:c8:37:99:1d:85:7e:95:
                    73:bf:18:62:3b:6b:8e:f3:66:7b:be:0e:1c:3b:3a:
                    15:36:62:94:7d:6e:53:25:e9:a2:04:a8:1d:44:1d:
                    f5:e8:61:18:36:8b:c6:49:b8:1a:d4:db:c4:79:89:
                    c6:76:04:77:9d:a6:fc:b7:98:43:55:1f:53:e9:6b:
                    89:23:09:ab:8f:a7:9f:ea:df:d6:ca:56:5e:bd:e8:
                    df:0e:15:13:0e:37:fd:ab:08:e8:14:f5:72:ad:6d:
                    88:1c:09:3c:06:59:f9:ae:d0:a2:90:c4:3c:bd:d1:
                    20:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4E:57:FF:FB:F4:29:3E:00:EF:DE:42:F0:7D:66:9E:E4:7E:64:C1
            X509v3 Authority Key Identifier:
                keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         70:36:14:92:13:e4:24:94:45:3c:30:f3:48:13:49:36:c7:f2:
         6a:75:ae:46:8a:55:84:9c:d1:50:e5:a3:e6:d3:ad:3a:b9:13:
         d3:6d:2b:22:37:bd:7c:f8:3c:de:40:24:7b:bd:5f:c4:42:9b:
         18:9e:7d:5f:0a:45:5e:eb:1c:58:38:b9:33:b0:d9:d7:eb:77:
         e6:af:b4:fd:b1:7d:6b:fe:91:ff:ab:95:c5:40:03:1c:8f:f3:
         3d:dd:92:fe:1d:a0:ad:80:75:ea:33:91:30:59:4d:31:9d:7f:
         e6:80:73:83:49:c5:b7:ee:41:8e:da:04:a8:e8:f2:5d:a9:ff:
         1a:13:ce:83:ea:73:3b:56:95:5e:90:54:b5:a7:73:26:7d:22:
         b7:e9:f7:de:42:52:26:a2:54:7a:fb:e6:e9:3b:36:b3:29:cb:
         38:1a:bf:a7:7d:33:d7:f1:8d:69:2a:10:35:92:08:c0:c6:fa:
         81:05:f6:8e:c4:dc:83:14:20:11:7c:89:63:27:d3:83:de:d6:
         fb:88:96:37:03:ae:b3:90:95:11:fd:03:a3:2d:93:d9:65:e3:
         a8:5c:a1:71:f1:e9:2f:4f:35:de:98:20:bd:7d:55:51:92:7f:
         00:86:76:9e:49:49:1d:02:e0:17:db:24:8e:44:86:11:6a:e7:
         56:3c:d0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:08 2024 by rpki-client on console-ams.rpki-client.org