Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/3131352e3138372e33312e302f32342d3234203d3e203538333639.roa
File:                     3131352e3138372e33312e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          eSDeohW1AIrtqkyx+N42CigZjVYBQYQN7zrX2JowEv8=
Subject key identifier:   75:32:7C:75:58:DE:AA:27:40:72:62:2B:55:A3:76:E6:8A:47:BF:76
Certificate issuer:       /CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5
Certificate serial:       1F10AAF9C633CCCC8ACAD31D80380A3AFC168B54
Authority key identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/3131352e3138372e33312e302f32342d3234203d3e203538333639.roa
Signing time:             Tue 22 Oct 2024 09:00:01 +0000
ROA not before:           Tue 22 Oct 2024 08:55:01 +0000
ROA not after:            Tue 21 Oct 2025 09:00:01 +0000
asID:                     58369
IP address blocks:        115.187.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl
                          rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 15:43:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:10:aa:f9:c6:33:cc:cc:8a:ca:d3:1d:80:38:0a:3a:fc:16:8b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5
        Validity
            Not Before: Oct 22 08:55:01 2024 GMT
            Not After : Oct 21 09:00:01 2025 GMT
        Subject: CN=75327C7558DEAA274072622B55A376E68A47BF76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ec:75:8a:03:ac:35:96:22:3c:e4:8d:66:e0:
                    79:6a:8a:37:73:15:ce:69:75:00:fb:58:83:9b:c8:
                    b1:73:8a:77:ea:a5:a8:8d:da:a2:74:b0:a8:1b:57:
                    5b:9b:9e:11:c6:1e:b0:25:8b:a7:f7:7e:47:2e:55:
                    0f:9b:f1:75:42:c0:5a:2f:d9:5a:8e:9b:d0:0e:10:
                    25:be:bf:3d:88:3e:e4:36:25:30:5f:2e:2b:c7:2f:
                    78:ec:45:b9:4a:45:63:2f:7e:01:1e:60:bc:73:46:
                    29:5b:a2:30:94:94:80:83:1e:77:84:3f:65:80:ea:
                    d7:a9:79:44:42:bc:bb:82:6b:45:31:bc:81:61:8d:
                    df:e3:28:b0:2b:31:9f:4f:2c:38:86:73:49:f3:17:
                    83:a4:ae:41:0b:fc:3a:6c:3d:3d:f2:e6:27:91:3a:
                    88:46:51:f7:7e:1d:a9:4b:ce:ef:a8:bf:2b:da:73:
                    0e:4d:5c:6c:18:14:69:ce:46:cd:95:d9:f3:f0:8c:
                    25:73:83:3b:ec:53:4b:dd:83:21:ee:e6:45:51:f1:
                    82:52:b8:01:ee:a1:32:0a:1e:77:07:b6:ae:0e:84:
                    1c:3b:eb:36:23:38:eb:92:81:77:45:a6:8e:e5:bc:
                    20:9e:9f:03:8f:73:ac:b9:5c:2a:49:61:6e:3e:98:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:32:7C:75:58:DE:AA:27:40:72:62:2B:55:A3:76:E6:8A:47:BF:76
            X509v3 Authority Key Identifier:
                keyid:46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/3131352e3138372e33312e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.187.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:ed:7d:a8:5f:a7:8c:ec:b4:f9:94:7d:a4:26:ac:b9:78:05:
         67:58:51:25:a2:b4:b2:de:f4:ff:c7:81:79:14:04:b1:18:68:
         c7:3a:81:3d:37:b2:18:70:45:f2:bc:57:8d:ce:3b:df:2b:ec:
         96:13:78:93:c9:8a:cc:3c:12:d1:6c:b7:0c:10:fd:82:34:71:
         11:7a:a0:2b:ce:8c:c1:eb:bd:6e:a7:85:67:b1:0b:2e:c9:b1:
         a8:eb:0e:19:b1:00:c9:86:4a:69:48:fa:47:78:ec:fc:e3:04:
         63:98:89:eb:ae:5f:25:e7:63:87:42:99:12:a6:05:06:f4:43:
         63:c1:ee:cc:ed:e9:00:a2:33:45:8d:1e:12:ab:2f:a5:39:7b:
         27:b7:85:dd:a7:98:e1:44:4c:9e:9f:13:4d:bb:69:e7:97:5c:
         b9:0e:bf:0b:02:f3:ad:b8:d7:25:ab:62:0b:1a:f3:95:b9:99:
         18:9f:14:de:3f:3c:3d:6e:01:64:72:fd:05:42:67:76:b0:90:
         ea:33:0b:13:95:7c:48:8e:77:69:81:7e:cf:3e:29:53:58:8c:
         48:74:d3:2d:28:09:a8:7b:cb:79:d6:cf:19:8c:b5:1a:50:4d:
         82:3d:6c:9c:6e:70:25:aa:6f:76:38:e5:85:5f:6a:10:cb:8f:
         f6:df:93:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:57 2024 by rpki-client on console-ams.rpki-client.org