Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131352e302f32342d3234203d3e203338313536.roa
File:                     3230332e3139302e3131352e302f32342d3234203d3e203338313536.roa (raw, json)
Hash identifier:          sdFAYt2pOIQzsW67BlFmik6lJdf5DQoHi9pfL1Zb2qg=
Subject key identifier:   7A:B5:92:A7:0A:AA:AC:23:5D:64:11:82:C2:0C:E5:2B:6A:15:A0:CD
Certificate issuer:       /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
Certificate serial:       6CBEA77720674CABF4B357DF7BD942C765F0680C
Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131352e302f32342d3234203d3e203338313536.roa
Signing time:             Mon 01 Jul 2024 01:05:09 +0000
ROA not before:           Mon 01 Jul 2024 01:00:09 +0000
ROA not after:            Mon 30 Jun 2025 01:05:09 +0000
asID:                     38156
IP address blocks:        203.190.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl
                          rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 14:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:be:a7:77:20:67:4c:ab:f4:b3:57:df:7b:d9:42:c7:65:f0:68:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
        Validity
            Not Before: Jul  1 01:00:09 2024 GMT
            Not After : Jun 30 01:05:09 2025 GMT
        Subject: CN=7AB592A70AAAAC235D641182C20CE52B6A15A0CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3d:c3:8b:90:43:0c:19:01:e2:66:b6:e6:17:
                    eb:4c:33:c1:d2:0b:70:43:c9:51:60:69:f7:95:70:
                    34:b2:8d:33:03:4f:71:10:68:ee:3f:dd:e4:ef:d0:
                    84:1f:a1:7a:12:aa:ac:01:66:1d:6f:63:bc:59:4f:
                    47:09:5f:50:13:14:0b:ce:43:d9:9a:a1:47:80:13:
                    e3:eb:e5:4a:a2:af:99:2b:00:aa:0e:b3:06:2a:65:
                    1f:3b:85:48:a7:b0:bb:99:37:27:c7:e0:48:20:b9:
                    f7:ff:46:02:1d:f1:4d:b5:23:9f:0e:f6:46:37:69:
                    99:36:ff:5d:34:7d:8a:e0:65:46:ae:87:25:69:d5:
                    f9:af:8d:a6:af:2e:98:cd:14:7d:f9:a7:6f:09:22:
                    2c:3b:33:58:16:34:b8:9f:3d:8c:d9:ba:6f:ed:3b:
                    0c:c7:81:a0:11:d5:1e:00:94:34:96:a2:00:25:42:
                    86:32:75:20:d1:1f:11:f0:e0:a8:37:a7:9e:fa:0c:
                    46:17:82:64:83:80:25:db:87:31:2e:af:1a:ba:6e:
                    b2:58:f9:6b:d7:18:0b:62:5d:b8:b8:92:20:40:a3:
                    da:6c:89:b1:a0:e7:1f:a7:92:ee:3c:fe:cd:64:3a:
                    c5:30:bd:4d:3b:88:51:2e:c7:8d:53:f3:41:52:fd:
                    bb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B5:92:A7:0A:AA:AC:23:5D:64:11:82:C2:0C:E5:2B:6A:15:A0:CD
            X509v3 Authority Key Identifier:
                keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131352e302f32342d3234203d3e203338313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.190.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:31:32:0c:b0:de:d8:e6:b6:5a:8e:76:97:ae:bc:05:58:e1:
         7f:61:b1:f5:7e:bc:1e:3a:94:d5:6b:8e:3e:ff:0f:f7:e2:31:
         cc:18:ec:3b:0c:af:b7:af:34:be:09:2c:3e:17:e9:8d:55:89:
         e6:11:e9:5d:d2:f2:5b:ea:50:3f:b0:48:bc:f6:c6:e6:51:d6:
         94:68:2c:37:94:d0:a5:76:51:bc:cd:b5:ee:39:09:52:1e:10:
         39:d1:11:c0:ec:ac:bd:38:3f:8a:98:c5:ff:f4:33:0f:05:13:
         1c:a1:ca:df:a3:7a:82:79:88:ed:48:cd:40:b3:64:ab:e7:40:
         7d:05:10:14:a5:6d:74:7f:b2:bf:96:eb:1a:cf:df:e8:71:ea:
         c7:a5:92:12:a7:3c:1a:4b:42:57:81:0b:e4:87:c4:b2:2e:b1:
         63:79:6f:7e:e1:6b:13:db:68:fe:12:33:10:be:97:3c:bd:4a:
         23:86:5a:a7:f4:2d:e6:17:12:46:0c:f3:6e:d7:75:05:fc:0e:
         48:a6:49:cb:dc:84:31:59:aa:ac:79:72:fe:12:04:95:64:05:
         8b:43:d3:2a:cc:86:40:31:26:c3:71:82:4c:7a:65:67:51:29:
         3e:9b:a4:3b:05:75:cc:46:8c:08:1e:de:be:a3:ae:84:a1:f1:
         16:f2:a7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:18:32 2024 by rpki-client on console-ams.rpki-client.org