Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa
File:                     3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          FpCRPN3/sh87yKc8VhdJ2zd+tYzqklLo+UKit0tTGBI=
Subject key identifier:   CC:0A:6D:B5:31:18:B8:D3:9C:82:2A:2D:9E:EA:8A:C0:3A:3B:C7:E4
Certificate issuer:       /CN=B605E2C01C5BDC6CEE49545C80501360234DC910
Certificate serial:       6EEC23C6FF584D5AE7D4B3D73CA993C1BAFE68A4
Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa
Signing time:             Thu 05 Sep 2024 05:01:15 +0000
ROA not before:           Thu 05 Sep 2024 04:56:15 +0000
ROA not after:            Thu 04 Sep 2025 05:01:15 +0000
asID:                     131717
IP address blocks:        115.178.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl
                          rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Mar 2025 22:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ec:23:c6:ff:58:4d:5a:e7:d4:b3:d7:3c:a9:93:c1:ba:fe:68:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910
        Validity
            Not Before: Sep  5 04:56:15 2024 GMT
            Not After : Sep  4 05:01:15 2025 GMT
        Subject: CN=CC0A6DB53118B8D39C822A2D9EEA8AC03A3BC7E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f3:a8:cc:1d:ee:43:5b:99:60:de:88:99:f1:
                    d9:d1:c5:1c:86:c0:ac:bd:37:24:a3:c8:5d:a2:e9:
                    d1:f4:2a:2c:c9:39:a8:ed:8f:bc:28:c8:40:02:c1:
                    f5:99:ec:42:98:ab:10:c2:6b:a6:b2:5b:bb:b5:6b:
                    a6:b9:ec:96:df:10:de:b3:89:be:43:fc:6e:3e:78:
                    7c:e5:7a:08:86:ed:98:ec:bd:99:4b:32:14:2b:98:
                    6b:cb:9b:5e:2c:5c:8e:1a:3a:71:9b:c6:cb:25:20:
                    bc:56:c4:93:53:b0:13:83:ce:1e:70:05:24:1f:4f:
                    12:44:e4:71:46:fc:cd:2b:33:ab:fa:f8:91:ac:97:
                    8b:e0:af:2b:84:d4:05:2e:19:81:09:03:41:d8:2b:
                    c7:51:3f:db:99:c5:67:d2:24:e3:9f:07:ed:6c:fa:
                    f6:30:71:66:dc:72:8b:55:61:30:20:85:24:1e:1f:
                    48:0c:c5:2f:70:5b:8a:ab:dd:7b:c2:86:86:12:36:
                    2f:69:f1:c9:b3:ec:d0:91:b9:94:48:c2:dd:ea:eb:
                    9b:07:87:a4:86:05:0a:4d:df:47:ff:e3:a6:2b:63:
                    b7:a6:9d:b0:47:3d:c5:b5:d0:d3:72:e1:ea:0e:9b:
                    0c:39:b5:23:b6:22:1e:5f:00:ff:af:73:41:c4:34:
                    22:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0A:6D:B5:31:18:B8:D3:9C:82:2A:2D:9E:EA:8A:C0:3A:3B:C7:E4
            X509v3 Authority Key Identifier:
                keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:a9:e5:46:2d:86:8d:3e:ae:1c:49:fa:2c:54:43:72:01:9a:
         24:c3:a6:29:3e:e9:53:3a:62:86:d4:d2:3e:ab:df:07:c8:7a:
         43:eb:ef:7f:f3:33:c0:12:f8:bf:ea:c3:16:7c:a9:7b:d7:f5:
         b1:a3:3a:ae:1c:ac:25:f3:f4:17:18:d0:b1:1e:72:93:0f:20:
         6f:df:da:cb:9b:73:74:80:fb:50:b9:5a:2d:ab:e9:02:b2:ba:
         0a:0d:b9:88:e1:68:c1:62:cd:a3:1d:f1:de:2e:71:8f:af:f3:
         d8:f0:d6:a7:b5:e6:c1:0a:38:d8:b1:22:ed:d4:41:cf:64:b9:
         a7:5a:b2:7e:2c:25:e8:50:6a:74:78:0a:7a:4d:23:df:13:53:
         33:2f:a0:34:96:f9:58:71:c5:17:0a:b2:10:cb:4f:d6:66:db:
         57:3b:ed:3d:f5:53:90:31:7d:34:16:27:c1:08:09:2e:58:b1:
         61:13:18:20:a4:84:d7:df:3e:b2:91:c3:d2:f9:6c:88:c1:a0:
         13:82:3a:ff:71:13:8e:a7:ac:f4:2f:08:47:af:c0:fa:76:19:
         4b:7f:24:2d:b3:46:d9:a1:09:23:98:80:ed:7a:3c:b8:af:b6:
         4a:0b:f4:d5:1c:ea:25:48:1c:8f:47:f7:cb:b2:d9:84:6a:42:
         be:1e:ec:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:03:23 2025 by rpki-client