Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa
File:                     34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa (raw, json)
Hash identifier:          lgZeud8tEUP81Q7WuvcLNWvZQI8mDWjY+tlobsPLBAo=
Subject key identifier:   1D:43:09:C8:DF:83:CF:4B:16:1E:B1:AF:0B:02:8B:CD:7D:67:EF:F7
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       2F377443CC4069EAA2B076321797FE3845C9D621
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa
Signing time:             Sat 20 Jan 2024 17:04:39 +0000
ROA not before:           Sat 20 Jan 2024 16:59:39 +0000
ROA not after:            Sat 18 Jan 2025 17:04:39 +0000
asID:                     149746
IP address blocks:        49.128.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 05:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:37:74:43:cc:40:69:ea:a2:b0:76:32:17:97:fe:38:45:c9:d6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Jan 20 16:59:39 2024 GMT
            Not After : Jan 18 17:04:39 2025 GMT
        Subject: CN=1D4309C8DF83CF4B161EB1AF0B028BCD7D67EFF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:45:3c:dd:96:5f:65:8c:62:33:37:58:6b:
                    f0:1d:4a:bb:5e:26:70:04:c1:56:21:f7:1d:c5:ed:
                    d7:61:5a:4a:68:43:10:06:04:7f:01:70:f1:ea:e9:
                    5f:18:c3:bd:ba:24:bd:4d:97:4c:bb:a6:14:f7:03:
                    45:57:fa:b0:88:a0:b9:89:f3:ae:ba:d8:16:0d:85:
                    ee:83:2e:75:02:cd:6f:bd:16:84:ae:af:f8:93:ae:
                    9f:1e:55:62:69:04:ad:03:7a:70:af:4f:d0:99:5e:
                    fd:f5:52:d5:78:d1:56:d5:d1:32:b6:bc:74:4a:b7:
                    38:07:49:ad:54:4e:fe:fe:b7:72:a7:64:f2:fd:0b:
                    62:5a:50:6a:4d:f3:58:99:31:d6:91:c4:c1:a0:da:
                    8e:f3:a3:e5:4a:d4:04:17:6f:bd:7f:4e:b0:6c:80:
                    7b:9b:5a:c4:be:98:03:e8:d8:be:a0:11:c7:ce:bc:
                    ec:6b:11:ff:c1:5f:e1:f6:5a:7c:d7:16:fc:ef:ce:
                    c3:cf:b7:7c:8a:90:0b:b1:fe:28:c4:3b:ad:bf:2f:
                    a1:01:6f:a2:dd:6b:b9:de:07:e1:ee:ba:75:87:1a:
                    ee:90:ba:61:2f:77:c3:1c:87:a7:d8:6e:c1:d7:25:
                    8f:b7:11:27:25:40:68:2c:66:47:dc:1d:e4:46:45:
                    27:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:43:09:C8:DF:83:CF:4B:16:1E:B1:AF:0B:02:8B:CD:7D:67:EF:F7
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.128.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:6a:68:bc:e6:48:5f:a2:f1:3a:aa:21:35:3d:4f:db:4f:a5:
         76:01:c4:ad:91:ba:4f:a7:34:e8:8e:b9:9d:e8:c7:b9:1b:26:
         6e:1a:75:05:d6:92:c2:35:37:76:21:0a:8e:a3:fe:12:59:cf:
         f5:90:05:18:ba:17:c9:18:b2:4f:c3:a4:62:eb:c2:4e:bd:cc:
         02:ad:92:8a:42:38:71:95:a0:9c:22:1e:9d:a6:fb:00:1e:1a:
         e7:a6:22:6d:d1:75:ff:57:38:50:0a:3a:01:8c:03:8b:68:35:
         6c:8a:a9:07:f4:63:73:3e:7f:90:66:25:fb:a5:38:89:84:a4:
         9d:b4:68:72:0c:01:fa:11:3b:c3:e3:b7:ed:01:1b:de:ff:0a:
         e5:a5:9b:ac:cd:89:79:56:96:e8:5c:c2:60:5c:ab:96:e2:36:
         ef:d9:7f:94:99:e9:e0:16:b7:67:db:b7:c2:0d:1b:0f:3d:c1:
         4a:60:c7:b0:9f:07:ea:41:86:bd:9d:07:b3:07:47:d2:04:d9:
         7e:4a:58:34:4c:d1:d3:19:06:3e:25:d0:f6:7f:ea:33:b4:7c:
         a7:c9:64:63:90:35:32:d8:06:12:ba:3d:cd:d3:df:ab:98:84:
         14:be:68:8f:67:98:f1:8e:78:c4:27:5e:38:05:a4:41:5c:08:
         cd:c9:a2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:40 2024 by rpki-client on console-fra.rpki-client.org