Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34392e302f32342d3234203d3e203338373833.roa
File:                     3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (raw, json)
Hash identifier:          isINXQLKIC1dEiiAoWDEseWdjl997XY6+RtHzF8UKMk=
Subject key identifier:   92:75:BA:1C:2F:FF:F1:1F:15:32:CA:B5:0A:F2:77:BC:67:F9:19:73
Certificate issuer:       /CN=B605E2C01C5BDC6CEE49545C80501360234DC910
Certificate serial:       5ADA787F027C9A8301ADC950520F3E5C8AB0AD33
Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34392e302f32342d3234203d3e203338373833.roa
Signing time:             Mon 02 Jun 2025 02:03:45 +0000
ROA not before:           Mon 02 Jun 2025 01:58:45 +0000
ROA not after:            Mon 01 Jun 2026 02:03:45 +0000
asID:                     38783
IP address blocks:        115.178.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl
                          rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 00:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:da:78:7f:02:7c:9a:83:01:ad:c9:50:52:0f:3e:5c:8a:b0:ad:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910
        Validity
            Not Before: Jun  2 01:58:45 2025 GMT
            Not After : Jun  1 02:03:45 2026 GMT
        Subject: CN=9275BA1C2FFFF11F1532CAB50AF277BC67F91973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:34:a6:52:28:b4:1c:98:1c:99:a3:67:75:3c:
                    f5:6a:fe:42:13:0b:ad:a0:23:fe:dd:3e:7f:ce:25:
                    8d:2e:75:05:0c:04:2b:9b:94:da:07:6e:74:18:06:
                    7d:20:a5:82:1e:c9:2e:2f:e5:5b:43:53:24:02:48:
                    7c:e9:76:bc:7a:81:45:90:a6:53:6d:51:ed:74:5f:
                    ac:7e:79:88:e0:b7:0c:07:cb:d3:36:a3:d2:52:a0:
                    8e:96:79:e3:32:68:a9:c1:4d:ad:06:72:41:62:f3:
                    ed:d1:fe:ff:39:ae:f3:a0:f3:25:ff:67:c1:fb:6d:
                    a2:6c:a9:93:5b:84:a5:ba:f3:3b:4e:d5:55:62:0a:
                    53:a4:a8:99:65:44:d0:52:9a:92:06:75:48:4c:59:
                    d8:ef:04:f3:64:16:68:b4:d1:82:6e:03:78:69:01:
                    c3:9e:d1:75:f4:b5:6a:14:4f:77:65:c9:ea:02:bd:
                    6f:60:b9:92:b5:2f:a1:80:6a:b8:b4:d7:ab:fe:16:
                    f5:3a:d3:92:fe:90:b0:6a:68:9d:57:e8:4d:4b:07:
                    1c:ff:d3:3e:91:8c:0d:5f:08:b7:0e:30:8d:9f:a5:
                    f1:61:e0:3f:4a:8a:7a:ee:0d:56:48:29:7f:b0:dd:
                    35:23:96:99:1f:64:9c:6e:3b:a7:d0:0b:bd:1a:41:
                    b6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:75:BA:1C:2F:FF:F1:1F:15:32:CA:B5:0A:F2:77:BC:67:F9:19:73
            X509v3 Authority Key Identifier:
                keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34392e302f32342d3234203d3e203338373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:3e:d2:bf:ad:6c:97:57:fa:32:f8:8e:7d:26:47:b7:e0:18:
         ae:0e:51:fa:7a:2d:23:71:9f:35:1d:0c:d1:41:c1:d8:d6:c5:
         b4:bf:b2:86:0b:0c:8c:34:fc:28:9d:8b:fd:ff:1b:20:09:d7:
         50:cd:53:6d:85:c7:12:ee:3d:a2:d9:f7:38:ba:b1:2a:e2:5c:
         a3:f2:fa:62:5f:91:96:91:98:a0:2f:9d:b7:cc:7f:06:14:94:
         fe:e1:ab:e1:f0:50:a6:cd:64:86:9b:01:05:ce:7c:17:75:33:
         b3:fc:37:19:73:b7:ac:2a:6a:47:a6:e0:99:42:7e:7d:11:a3:
         7c:53:92:c2:c6:15:b0:27:be:77:99:79:28:4e:23:2d:3d:09:
         f9:56:ef:82:b4:d4:74:c8:f0:66:2d:a7:cd:f8:7c:ef:fd:89:
         eb:f3:5b:b2:ab:e3:b4:ba:b3:12:49:43:00:09:56:3d:14:a8:
         5d:39:95:d8:e9:01:c2:1b:cc:fa:9f:ee:71:45:fa:e5:b1:b6:
         81:ef:ae:10:97:73:78:16:51:44:6d:5d:c4:5c:77:d7:fa:65:
         d1:b3:7e:04:b9:64:56:23:5f:12:47:9a:77:00:00:ad:ee:3c:
         57:a2:e2:80:8f:64:e9:ea:3a:7c:ee:b4:48:10:7f:a3:7a:59:
         9c:78:a2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:18 2025 by rpki-client