Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131322e37382e33382e302f32342d3234203d3e20313439373436.roa
File:                     3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (raw, json)
Hash identifier:          XsokazWYyrH8hmyykS91vIf9A8hAZD2XExNJhM3r7Sg=
Subject key identifier:   5E:49:2B:79:52:98:C6:95:69:E8:11:51:C7:2B:84:8A:38:A5:1F:36
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       4CB20820C1227887B605E72FFA8B7844C7606F57
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131322e37382e33382e302f32342d3234203d3e20313439373436.roa
Signing time:             Sat 20 Jan 2024 17:08:57 +0000
ROA not before:           Sat 20 Jan 2024 17:03:57 +0000
ROA not after:            Sat 18 Jan 2025 17:08:57 +0000
asID:                     149746
IP address blocks:        112.78.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 05:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b2:08:20:c1:22:78:87:b6:05:e7:2f:fa:8b:78:44:c7:60:6f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Jan 20 17:03:57 2024 GMT
            Not After : Jan 18 17:08:57 2025 GMT
        Subject: CN=5E492B795298C69569E81151C72B848A38A51F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:ba:2a:4a:9e:14:c1:75:26:4d:35:ba:f9:
                    3d:61:6b:42:82:05:d0:55:74:56:39:00:05:90:ec:
                    56:b5:94:ac:13:ce:c4:25:51:c8:68:2c:aa:bf:fe:
                    3a:3e:cb:a7:b4:49:58:43:4b:b1:44:9b:65:88:bf:
                    8d:df:1b:44:a6:96:76:81:9c:3b:d7:0a:0a:45:20:
                    2d:5a:d4:19:80:a2:37:5c:17:3b:7b:0f:67:3d:98:
                    5f:7b:33:80:a3:19:b1:cf:81:3e:22:57:6c:66:68:
                    43:da:34:43:42:e8:a6:41:e8:fc:53:31:7a:b5:43:
                    86:ad:be:3b:15:d7:bc:55:02:da:c2:16:53:00:c1:
                    8a:8a:cf:77:80:ab:15:fd:b8:b5:f7:b5:fe:b5:49:
                    50:3f:b7:83:be:3f:e5:f7:e6:22:64:82:2b:06:b3:
                    e9:6e:2c:6c:2a:09:97:97:0c:b4:ba:cb:4a:cd:c3:
                    0b:ca:da:00:3f:98:d5:3d:3c:23:eb:b9:8d:1f:a1:
                    3b:bf:22:36:59:25:08:ff:10:d2:1f:0f:b7:82:f6:
                    ff:cd:18:fc:9f:02:0d:72:9e:65:fd:2b:73:28:b3:
                    dc:c5:9b:6d:7a:da:32:8c:83:de:28:cd:df:32:52:
                    ad:c7:17:6e:07:00:46:f6:a1:a4:4b:91:7a:08:79:
                    7d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:49:2B:79:52:98:C6:95:69:E8:11:51:C7:2B:84:8A:38:A5:1F:36
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131322e37382e33382e302f32342d3234203d3e20313439373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:50:f0:78:7b:91:a9:71:f8:43:6e:80:b7:b5:16:4f:fc:4d:
         b1:91:86:a8:4a:54:e6:1a:c2:bc:8a:02:7a:00:14:0f:89:56:
         f8:06:bc:fa:e3:d5:15:c0:44:fc:8a:d0:09:77:13:ac:70:9d:
         3c:46:ad:0a:03:35:d4:16:87:37:1d:68:5b:01:4e:95:68:00:
         46:10:6a:96:e2:29:e1:ea:94:6b:b7:f4:13:4b:3c:d7:71:4c:
         b6:57:e6:4e:47:99:4e:c1:2e:31:e7:12:a7:f7:5f:7e:51:cc:
         9d:55:cb:2b:c7:b2:19:73:18:73:bc:29:72:43:2e:5a:3e:7d:
         64:d7:a5:bd:8c:4d:6f:5b:0e:8d:b6:17:2c:23:81:19:32:0b:
         c8:f4:df:88:d9:37:df:66:c7:ea:6c:9a:7e:54:c2:ae:20:a2:
         b1:9f:56:0f:f2:01:87:b7:07:77:9b:74:0f:b1:f8:77:90:7b:
         d8:83:4c:60:68:d2:bb:c5:11:c0:ba:da:6f:92:69:b2:d1:b2:
         7c:79:e8:79:5b:50:f8:4f:0d:16:32:ed:07:63:33:ac:03:83:
         e8:75:7b:2e:9b:2c:f0:42:cd:88:75:41:9d:2b:ba:f1:ce:c3:
         ef:76:ed:61:32:d2:90:7f:b6:71:9e:e6:15:3a:6d:ed:03:20:
         78:3c:bb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:49 2024 by rpki-client on console-ams.rpki-client.org