Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/3131352e3138372e33312e302f32342d3234203d3e203538333639.roa
File:                     3131352e3138372e33312e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          WeEXMYE71ZTjJ77V6qQLIYeWulLA7qPCjz20myYsW/8=
Subject key identifier:   43:58:AB:F7:71:1E:15:CD:7F:9B:AE:95:12:AA:F4:79:DB:B5:6F:3B
Certificate issuer:       /CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5
Certificate serial:       1CC9CFEF7D88D6B5753B91032F2401D1B031E05D
Authority key identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/3131352e3138372e33312e302f32342d3234203d3e203538333639.roa
Signing time:             Tue 21 Nov 2023 08:34:56 +0000
ROA not before:           Tue 21 Nov 2023 08:29:56 +0000
ROA not after:            Tue 19 Nov 2024 08:34:56 +0000
asID:                     58369
IP address blocks:        115.187.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl
                          rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 18:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c9:cf:ef:7d:88:d6:b5:75:3b:91:03:2f:24:01:d1:b0:31:e0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5
        Validity
            Not Before: Nov 21 08:29:56 2023 GMT
            Not After : Nov 19 08:34:56 2024 GMT
        Subject: CN=4358ABF7711E15CD7F9BAE9512AAF479DBB56F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c5:1d:6a:a4:d7:fc:62:c3:79:0e:47:69:11:
                    67:1e:44:b6:78:55:ba:5e:fb:81:2b:71:47:ea:11:
                    3f:8c:31:b0:e2:dc:0a:ed:1f:df:84:06:8b:0a:0f:
                    2d:c4:1d:13:86:8b:b2:b8:5e:7a:3c:6f:c3:a9:c1:
                    a2:d0:e5:a5:dc:43:28:dd:5a:8c:b1:89:a1:a9:ef:
                    b0:01:c0:d7:4c:a9:23:9c:5c:a3:4e:d1:1b:d0:4b:
                    27:1c:d0:4c:ed:38:8a:ff:46:ea:92:90:5e:25:41:
                    a2:0f:7d:d4:80:33:17:8c:49:da:56:a5:fb:e8:9c:
                    55:4a:0b:39:28:b8:cb:71:8c:40:df:d4:44:ec:be:
                    5f:3c:49:d0:74:4e:5d:9b:3f:76:34:53:56:08:e5:
                    13:ad:74:bf:fc:f3:25:18:07:4f:4f:30:2d:5a:78:
                    f6:41:55:da:e0:ff:b5:4a:99:c5:90:75:fd:f3:d4:
                    f1:29:37:9a:36:07:42:ce:3d:d5:d4:fd:7e:4f:4b:
                    c4:ab:2c:49:24:07:f1:fb:da:c1:5e:fb:b6:08:eb:
                    0d:27:39:38:a8:bf:9f:26:80:ca:6a:0c:57:c2:f9:
                    34:dc:7f:20:30:7d:10:eb:7e:d2:d7:3a:26:69:1c:
                    5e:74:47:b5:82:13:4c:10:7d:fa:c5:08:b5:ff:be:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:58:AB:F7:71:1E:15:CD:7F:9B:AE:95:12:AA:F4:79:DB:B5:6F:3B
            X509v3 Authority Key Identifier:
                keyid:46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/3131352e3138372e33312e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.187.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:74:54:df:48:c2:ac:91:20:16:d6:b7:3a:33:14:96:64:7a:
         fb:dc:71:ee:c3:b6:ab:90:2f:d8:46:ad:16:87:0c:6d:21:0c:
         78:8f:e7:cb:72:d2:d8:a2:be:30:90:74:60:7e:9c:ad:78:11:
         4b:46:6e:0d:13:79:37:07:fe:b9:62:5e:90:54:91:b3:b9:a2:
         2a:e5:00:3f:44:75:22:c0:86:78:d0:55:bf:a9:82:ef:68:38:
         34:b6:51:64:cf:f9:11:14:1f:db:60:ac:f6:3a:5b:37:3d:da:
         08:ce:1e:35:2d:7a:3e:34:25:81:32:98:c5:9e:c3:14:79:dc:
         0a:e3:fb:15:1a:da:af:99:3a:f3:70:ed:90:2a:3a:0a:a1:9c:
         27:4c:ec:13:87:03:7c:27:8e:15:93:82:3b:3a:ab:2a:76:e3:
         c0:d5:58:3f:88:38:c9:b4:a0:d8:5f:22:70:82:bc:8b:f5:6c:
         b8:46:0e:56:57:39:24:09:b7:e9:f6:cf:72:ba:5c:4f:4d:cd:
         91:26:8f:63:ed:7e:6e:6c:66:d9:5b:5f:b9:12:5e:35:12:c8:
         6a:5d:8d:68:21:b2:38:42:b6:35:6c:c3:26:d4:bf:e7:14:33:
         9e:fb:f0:aa:7f:04:14:de:b1:1d:6d:6c:ab:a4:36:ad:46:6d:
         df:af:7b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 17:46:52 2024 by rpki-client on console-fra.rpki-client.org