Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/3131352e3138372e33302e302f32342d3234203d3e203538333639.roa
File:                     3131352e3138372e33302e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          HFThGBdFjmidhJmHMDXCoS6ycnhZcQfS2zGjsOicK3g=
Subject key identifier:   2A:35:68:77:52:EE:96:7C:B4:F7:84:4D:1C:A9:A9:5C:0F:0C:BE:BF
Certificate issuer:       /CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5
Certificate serial:       388894EBA2F0EA02CAF162987734E21844BD325F
Authority key identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/3131352e3138372e33302e302f32342d3234203d3e203538333639.roa
Signing time:             Tue 22 Oct 2024 09:00:00 +0000
ROA not before:           Tue 22 Oct 2024 08:55:00 +0000
ROA not after:            Tue 21 Oct 2025 09:00:00 +0000
asID:                     58369
IP address blocks:        115.187.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl
                          rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 15:43:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:88:94:eb:a2:f0:ea:02:ca:f1:62:98:77:34:e2:18:44:bd:32:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5
        Validity
            Not Before: Oct 22 08:55:00 2024 GMT
            Not After : Oct 21 09:00:00 2025 GMT
        Subject: CN=2A35687752EE967CB4F7844D1CA9A95C0F0CBEBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a4:55:76:96:63:ab:9b:58:f6:eb:00:92:40:
                    b3:4c:12:89:6a:41:60:f4:68:84:06:3a:13:1f:5c:
                    eb:52:1c:20:a4:aa:72:cc:e8:51:0a:28:e6:47:5f:
                    1d:7a:86:16:fc:32:a0:e5:06:a0:2c:2c:4a:53:94:
                    63:2f:04:14:4b:14:00:ef:48:5b:be:f8:f6:88:16:
                    fd:5e:87:cd:33:8a:a9:72:d7:0b:fe:09:5d:19:7e:
                    15:65:8d:55:b0:e3:71:da:48:7e:a6:50:17:5d:7a:
                    49:b9:90:c8:9e:56:3d:fe:02:18:18:52:34:48:53:
                    8b:3a:3e:b4:1f:08:74:09:de:39:03:d3:f6:80:35:
                    8f:c2:e0:ef:4a:04:5e:29:4c:71:ba:d3:5a:10:bd:
                    b7:e2:8a:b6:6e:69:c7:c3:85:0a:95:15:b5:86:f6:
                    0c:70:6c:d5:4d:d0:64:3e:b1:09:56:61:fe:1b:5b:
                    fa:f3:ce:70:f6:1e:2b:2d:2b:21:ce:73:9a:99:96:
                    d4:99:21:1f:ef:ba:d3:b1:57:6a:1b:c1:97:a3:f4:
                    73:0d:c7:f0:bd:00:f5:bf:80:c8:b6:6f:d1:93:f7:
                    c4:c2:d1:14:67:79:63:2c:30:53:64:ab:e5:c9:12:
                    ab:ee:b2:5b:ea:b2:c2:34:0b:ed:61:7d:77:9a:c0:
                    02:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:35:68:77:52:EE:96:7C:B4:F7:84:4D:1C:A9:A9:5C:0F:0C:BE:BF
            X509v3 Authority Key Identifier:
                keyid:46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/3131352e3138372e33302e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.187.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:9c:91:e8:2d:ea:23:86:a6:36:80:d3:0d:dc:14:db:06:88:
         73:00:74:65:ec:0d:90:37:2c:fb:02:bc:a9:c1:e8:6e:3a:f0:
         c1:f7:ba:9d:20:0b:d8:fc:ff:dc:34:49:5a:b9:02:63:e1:37:
         21:3a:e4:a5:b7:5b:3f:85:9c:89:ed:4c:73:c2:5c:61:51:c1:
         c3:f6:01:9d:ff:06:3f:f9:ed:ac:d2:31:36:c0:65:1d:df:40:
         ab:93:21:96:11:8d:0c:75:cd:fd:d8:23:f3:a9:7f:1c:7d:40:
         ae:14:47:7e:50:c4:9c:25:5e:d1:62:f3:68:9e:92:7f:1a:39:
         cf:97:2d:b0:0e:22:e6:e0:8c:b2:b9:b4:6a:58:5b:35:ec:7c:
         bc:b6:7f:de:b1:6e:eb:3c:b8:bb:f4:76:8a:3d:2e:94:47:c1:
         6f:40:77:fa:86:7c:49:e4:65:23:05:e5:22:c8:40:f0:56:2b:
         1d:44:92:de:16:a4:6f:ee:29:22:8a:74:05:d0:93:a0:f7:ad:
         c5:85:e1:16:48:3d:29:44:10:df:1a:67:10:51:57:89:ef:ec:
         0e:66:6e:76:e3:93:9c:4e:2e:12:a0:a7:d7:d3:9c:f4:ff:d7:
         81:65:63:55:56:51:4a:c6:2b:d0:8c:c2:ca:50:b3:5a:fb:86:
         82:23:14:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:57 2024 by rpki-client on console-ams.rpki-client.org