Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34392e302f32342d3234203d3e203338373833.roa
File:                     3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (raw, json)
Hash identifier:          s2Z9bMWQLiKwFbH9doRdyOIOSB0aQByVuaUp9ml9odE=
Subject key identifier:   0C:EA:FE:50:21:80:90:FA:B2:2D:04:30:0F:13:40:EC:89:9B:7D:BF
Certificate issuer:       /CN=B605E2C01C5BDC6CEE49545C80501360234DC910
Certificate serial:       1BFB6FFB762C6F2AACF6671D0B549865A0A9CBD4
Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34392e302f32342d3234203d3e203338373833.roa
Signing time:             Mon 01 Jul 2024 01:04:38 +0000
ROA not before:           Mon 01 Jul 2024 00:59:38 +0000
ROA not after:            Mon 30 Jun 2025 01:04:38 +0000
asID:                     38783
IP address blocks:        115.178.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl
                          rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fb:6f:fb:76:2c:6f:2a:ac:f6:67:1d:0b:54:98:65:a0:a9:cb:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910
        Validity
            Not Before: Jul  1 00:59:38 2024 GMT
            Not After : Jun 30 01:04:38 2025 GMT
        Subject: CN=0CEAFE50218090FAB22D04300F1340EC899B7DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:01:21:b4:ee:ca:d0:0b:96:42:50:7b:07:de:
                    68:9e:7c:90:73:d6:13:66:b3:9f:1f:10:9c:8f:96:
                    2c:ce:2c:cd:a7:6f:4b:63:da:e2:32:ec:01:c0:a0:
                    d9:72:9f:cd:d6:42:50:41:55:d6:eb:b3:e9:28:cd:
                    d1:6c:d7:17:12:b3:0a:96:42:22:9b:a2:8c:d1:88:
                    3d:a6:95:92:5c:f5:33:ba:fa:29:b4:3f:99:94:ff:
                    8e:34:ff:a1:ab:03:96:11:4e:cf:c2:0e:e1:56:73:
                    45:c3:4d:75:e9:07:06:c9:89:0c:d4:80:b8:a1:56:
                    1c:0d:de:a6:00:10:df:7c:e9:9e:6b:36:c1:5f:5f:
                    56:e9:8e:17:98:83:f3:70:7f:1c:b9:91:da:ce:c8:
                    41:93:64:cf:00:9d:90:a3:01:50:b2:96:c3:f9:c1:
                    1a:67:c8:a9:ad:4b:36:f7:d1:da:ee:04:ed:5c:29:
                    10:7b:e3:39:ba:3e:8d:2d:97:f5:c2:fe:da:de:06:
                    43:90:eb:5d:a0:78:df:da:d6:46:3c:b4:6c:73:92:
                    e5:1b:50:9e:d8:5d:70:51:a9:af:c3:f1:b1:41:80:
                    05:83:75:4a:73:03:22:1c:01:fb:ad:4e:cb:48:ed:
                    4d:3c:6a:2c:b5:16:68:20:71:ee:ee:c8:02:48:84:
                    5e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EA:FE:50:21:80:90:FA:B2:2D:04:30:0F:13:40:EC:89:9B:7D:BF
            X509v3 Authority Key Identifier:
                keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34392e302f32342d3234203d3e203338373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:d1:14:a4:f3:a4:77:22:eb:f5:cd:65:fa:fd:63:9d:24:6a:
         bf:d8:0f:70:64:38:9f:33:4f:4d:25:0e:da:a6:06:b0:17:90:
         ac:73:7d:fa:47:f0:a1:30:19:38:ab:b8:c5:46:71:2b:57:d2:
         20:01:78:5b:c0:05:0b:93:58:ad:f9:5a:54:30:1b:b3:38:84:
         45:da:50:18:92:d8:aa:43:05:2a:84:ef:95:20:6d:86:7f:36:
         07:ec:9a:22:01:92:9b:3e:5e:0d:9c:94:ff:6d:90:43:ec:03:
         97:8c:8a:be:9c:da:47:76:1e:12:83:8c:0a:1e:a9:e6:15:9f:
         6a:7c:9e:b3:9f:b2:45:0a:56:fe:bf:5e:97:f4:29:d7:72:cb:
         bb:a2:0c:89:f2:b2:e1:f0:06:7b:1d:9e:8e:ad:12:aa:12:d0:
         91:4a:57:df:7a:12:ef:07:4b:35:f4:51:f3:fd:f2:6d:d7:27:
         41:bc:c6:b0:74:20:4f:58:89:03:43:ce:93:2f:46:58:b4:5b:
         33:51:83:f4:95:bc:c8:38:5a:fa:88:57:7d:16:2f:e6:72:88:
         ed:be:36:ac:98:53:56:b8:10:3b:d1:2c:83:83:d7:08:c2:f2:
         84:f0:6c:26:ae:68:cd:73:81:c7:0a:c2:98:12:f3:54:c3:7c:
         86:b2:35:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:21 2024 by rpki-client on console-fra.rpki-client.org