Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa
File:                     3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (raw, json)
Hash identifier:          idMKUHBnKt6k1jBFlM7bD08Zb2WyvDKyTWd5Apmy5DU=
Subject key identifier:   3C:82:22:E7:E2:64:31:8D:03:F9:D7:4D:78:D8:6B:B9:A6:6D:3B:3D
Certificate issuer:       /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial:       0A5780ED26A923C4287692B91FBBC6FAB66EF1EA
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa
Signing time:             Sun 02 Jul 2023 03:00:02 +0000
ROA not before:           Sun 02 Jul 2023 02:55:02 +0000
ROA not after:            Sun 30 Jun 2024 03:00:02 +0000
asID:                     18004
IP address blocks:        115.178.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
                          rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 07:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:57:80:ed:26:a9:23:c4:28:76:92:b9:1f:bb:c6:fa:b6:6e:f1:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
        Validity
            Not Before: Jul  2 02:55:02 2023 GMT
            Not After : Jun 30 03:00:02 2024 GMT
        Subject: CN=3C8222E7E264318D03F9D74D78D86BB9A66D3B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5b:5c:70:64:9b:21:1e:17:30:cc:14:9e:2b:
                    a6:60:7a:67:87:87:86:42:1f:9c:51:ff:ac:18:b7:
                    36:47:4a:85:49:04:4d:5a:d3:71:56:49:da:d4:a6:
                    bd:cd:67:d4:49:48:1e:01:99:8a:10:3d:d7:10:7f:
                    51:91:88:26:16:31:fe:11:ac:ea:89:c6:23:aa:40:
                    39:cd:96:ba:23:ab:be:74:64:94:48:58:3f:ae:19:
                    6f:19:5e:be:af:29:6f:73:32:8f:16:e7:2c:14:48:
                    54:7b:ab:ae:e5:b8:b5:36:e5:83:10:1d:a6:32:62:
                    07:d5:d8:e1:93:3c:72:b5:6c:f5:39:fd:fa:67:40:
                    bd:8a:7d:56:df:00:fb:ac:e0:18:eb:b4:01:af:cd:
                    fa:81:c7:76:e4:7a:24:4d:13:b0:21:33:82:1e:7b:
                    8c:96:b8:5e:71:6b:10:fc:32:56:8e:a5:44:f9:ba:
                    7b:5b:77:d5:52:b2:79:6a:b8:17:4b:2c:b9:e6:75:
                    20:ef:4b:be:11:19:fb:bf:c5:06:6e:74:76:00:54:
                    47:a0:d3:7f:4a:f0:44:03:62:af:3b:b1:27:92:27:
                    a1:c0:8b:86:d5:07:55:63:8f:ef:ec:c0:84:ef:bb:
                    a5:bb:96:d7:26:64:67:96:46:33:cf:f9:74:75:f7:
                    f7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:82:22:E7:E2:64:31:8D:03:F9:D7:4D:78:D8:6B:B9:A6:6D:3B:3D
            X509v3 Authority Key Identifier:
                keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:08:9d:26:e1:ff:35:9d:d8:13:16:9e:a8:0e:0d:4d:68:f4:
         91:db:95:0b:31:5f:52:50:b6:1d:19:f6:9d:dd:f5:c0:d9:a0:
         f2:2d:e2:35:a3:24:3a:c1:1e:ed:04:c9:bc:94:42:70:8e:85:
         0d:ad:99:6b:1c:a5:da:c1:7c:5a:d2:e5:26:8b:8a:67:db:ce:
         f2:43:07:8d:65:68:aa:3b:8a:79:10:14:e8:0e:b6:80:55:25:
         b5:02:8c:37:ad:0a:ea:63:9d:b5:a8:44:28:2f:30:ad:80:49:
         7e:1c:75:5b:1c:1c:9c:5d:38:87:65:3d:d7:d8:8c:91:c3:bd:
         3b:b7:b2:29:f6:b5:ef:7e:c2:7c:05:c9:10:e1:ed:8d:bc:5d:
         ea:14:0d:c9:1e:e5:cc:70:e5:39:5b:5b:fa:39:75:f2:a3:db:
         3e:db:83:f7:f8:77:a9:68:be:e7:46:ac:09:9b:0b:da:3d:37:
         ee:28:6c:9c:42:ac:be:86:92:96:69:21:39:00:f1:c6:29:54:
         26:ec:14:48:7e:dc:b2:fe:ee:db:a3:45:58:0e:69:78:64:fc:
         69:f1:16:b1:6f:55:1e:46:cf:5e:84:48:34:e6:6f:bb:5a:9b:
         91:1c:54:7f:e4:bc:26:9e:ce:07:27:cb:ab:41:11:a5:98:f7:
         38:53:38:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:06:09 2024 by rpki-client on console-fra.rpki-client.org