Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34382e302f32342d3234203d3e203338373833.roa
File:                     3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (raw, json)
Hash identifier:          AfAE6Sq3DQxMPZ3iNsBxgnE3MeI91A5NdzSsH6qy25c=
Subject key identifier:   44:4A:CC:0D:97:38:9B:5C:5B:79:03:95:6B:87:B5:A1:F2:31:89:96
Certificate issuer:       /CN=B605E2C01C5BDC6CEE49545C80501360234DC910
Certificate serial:       675FB9472336ACAF6A5C1A39B029BC9BED4FA128
Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34382e302f32342d3234203d3e203338373833.roa
Signing time:             Mon 01 Jul 2024 01:04:38 +0000
ROA not before:           Mon 01 Jul 2024 00:59:38 +0000
ROA not after:            Mon 30 Jun 2025 01:04:38 +0000
asID:                     38783
IP address blocks:        115.178.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl
                          rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5f:b9:47:23:36:ac:af:6a:5c:1a:39:b0:29:bc:9b:ed:4f:a1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910
        Validity
            Not Before: Jul  1 00:59:38 2024 GMT
            Not After : Jun 30 01:04:38 2025 GMT
        Subject: CN=444ACC0D97389B5C5B7903956B87B5A1F2318996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:63:50:35:70:25:f2:a6:18:25:ac:dc:88:
                    92:31:ba:98:84:96:d4:2b:20:0b:7d:4f:18:39:06:
                    76:28:73:f1:bb:5b:46:91:3b:11:50:ae:f4:6a:64:
                    87:3e:42:e0:55:8c:9f:17:8e:a8:ae:fb:6f:8a:79:
                    4c:c7:76:ba:15:01:3b:77:8b:e6:21:0c:0c:7f:52:
                    57:7d:b7:6a:0e:29:9c:1b:f4:5f:ef:00:00:2c:ae:
                    09:a0:b5:d0:e9:7f:45:97:b0:26:d3:a5:61:42:21:
                    d5:c0:ba:7f:85:02:21:8d:49:8a:ba:3a:54:6b:04:
                    16:d5:ae:e2:a8:df:84:a5:fc:82:9c:99:ed:7e:a3:
                    9c:dc:60:8c:1b:72:08:5d:eb:45:43:bb:56:e4:31:
                    84:9e:b7:26:84:fc:61:24:59:49:79:f0:e4:73:bd:
                    71:50:4b:c7:bc:ea:8e:f9:82:f9:fe:38:14:df:65:
                    9f:f9:fd:c8:16:f4:32:c4:de:67:69:03:b4:eb:a8:
                    ff:fd:97:df:3d:35:9a:73:2f:cc:9e:9e:25:4d:72:
                    c4:72:19:94:3d:91:14:e5:a6:8f:ca:4f:21:75:27:
                    52:1d:e7:2f:5b:52:66:67:e8:69:49:e8:0b:83:53:
                    68:02:ef:5b:0f:6a:8c:f1:99:3a:d9:ec:e9:40:d2:
                    e5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4A:CC:0D:97:38:9B:5C:5B:79:03:95:6B:87:B5:A1:F2:31:89:96
            X509v3 Authority Key Identifier:
                keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34382e302f32342d3234203d3e203338373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:64:61:59:11:9d:9c:78:e9:c5:b6:50:74:24:ed:4f:0b:ff:
         2b:7e:3f:b7:32:62:64:e7:27:db:5a:89:df:a8:8d:2a:f3:2f:
         2b:ca:c9:39:49:ab:d1:70:be:53:0b:da:fd:6f:0c:6e:c8:26:
         91:62:c3:aa:ae:85:34:2d:76:57:01:19:a1:f0:a7:2e:d2:49:
         25:12:8f:aa:f6:c4:17:76:b1:f7:72:6e:e7:d5:84:f4:a7:00:
         ba:48:24:8a:b3:ac:84:b0:fb:39:ec:18:57:3f:15:a1:9a:eb:
         60:23:15:16:f5:d1:01:12:9f:9b:7c:49:46:59:68:2b:9b:f0:
         32:73:ca:96:99:22:cd:7c:4b:9b:02:53:e8:75:f7:cb:c8:e6:
         14:7f:7c:b4:85:6c:68:06:70:dc:fe:74:38:35:23:72:7b:6f:
         4b:8a:9b:92:68:27:33:63:75:39:91:99:06:62:d4:d8:05:41:
         22:ee:0b:b2:f7:44:52:0d:e1:13:44:30:17:86:e8:1e:d2:86:
         4c:ac:c5:44:b9:11:18:a2:8f:c7:3d:3b:28:79:db:78:3e:42:
         17:81:c4:65:ce:ac:53:85:f2:38:cd:50:3e:4b:60:16:af:ea:
         35:36:c0:86:b4:b0:81:50:13:ac:58:df:8b:54:6e:32:95:7c:
         48:67:84:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org