Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa
File:                     3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          QNOScV9kvLXfJ4ZvrZSU6WwTkajrzvaS7q6+eyoaI+A=
Subject key identifier:   E1:D3:4E:12:96:69:1B:59:D7:47:42:4B:94:3C:4F:63:B0:DA:D2:88
Certificate issuer:       /CN=B605E2C01C5BDC6CEE49545C80501360234DC910
Certificate serial:       4D1578BD647A6E8E192F6788C3021EDE1AD3DB4D
Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa
Signing time:             Mon 19 Aug 2024 18:00:01 +0000
ROA not before:           Mon 19 Aug 2024 17:55:01 +0000
ROA not after:            Mon 18 Aug 2025 18:00:01 +0000
asID:                     131717
IP address blocks:        115.178.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl
                          rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:15:78:bd:64:7a:6e:8e:19:2f:67:88:c3:02:1e:de:1a:d3:db:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910
        Validity
            Not Before: Aug 19 17:55:01 2024 GMT
            Not After : Aug 18 18:00:01 2025 GMT
        Subject: CN=E1D34E1296691B59D747424B943C4F63B0DAD288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ef:aa:31:05:c9:72:1b:bc:17:f4:6b:27:ae:
                    be:6e:92:68:45:c6:12:6e:01:28:d8:8a:aa:75:96:
                    f4:0d:54:a1:9d:01:37:0a:e6:91:1d:30:81:f5:eb:
                    6c:5b:20:2f:e8:37:76:96:c4:ca:8f:d8:7f:93:73:
                    31:20:1f:1c:ef:b6:91:da:34:1a:f5:2e:fe:93:e3:
                    5a:45:1e:17:5d:c3:01:d8:5a:0e:67:5c:8f:cb:d4:
                    fa:51:16:ff:a9:b8:74:84:73:3c:5a:20:66:a7:00:
                    d7:19:27:92:88:66:d8:3c:03:4e:de:8f:b2:62:5a:
                    67:5e:50:0c:64:da:d1:76:1a:8b:1b:c3:6a:51:d3:
                    64:b4:52:ba:10:47:09:3c:b1:b2:18:9a:4e:09:8e:
                    af:e2:cf:0e:0b:f1:fe:c1:a3:34:60:f0:4a:34:8b:
                    40:f6:48:fc:b1:2d:bf:a4:40:3e:52:57:f4:bc:7a:
                    a2:63:46:2a:d2:97:d2:dc:5c:3a:b5:b6:cd:be:cd:
                    41:68:5b:d5:95:e2:a8:8c:2d:a2:96:c7:91:39:44:
                    2f:3f:79:d6:87:93:dc:b6:7d:5f:bb:e2:58:cc:7c:
                    c4:6d:53:92:f2:d6:91:d2:74:19:26:60:95:96:c3:
                    4f:a7:b4:76:7d:38:30:82:00:e0:b4:2a:6b:7b:d0:
                    95:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D3:4E:12:96:69:1B:59:D7:47:42:4B:94:3C:4F:63:B0:DA:D2:88
            X509v3 Authority Key Identifier:
                keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:00:4d:e4:ce:13:60:4f:7e:7a:8e:89:24:e0:83:10:e5:82:
         bf:ce:ab:6e:dd:e9:fe:3f:ae:6d:93:0c:f5:41:db:2a:60:56:
         e6:ad:e8:09:46:5f:72:6c:84:0b:70:50:10:e2:90:0e:8b:b0:
         47:68:b7:60:95:8c:83:40:99:62:b1:55:52:52:f1:1f:2b:a2:
         bf:a7:b2:b1:18:d4:e7:86:8e:84:53:02:75:57:c1:35:a2:21:
         e9:81:e2:69:53:54:85:94:79:59:db:8c:2a:dc:1c:c6:da:81:
         0a:8f:e5:e2:19:76:2b:cc:9f:2f:96:65:36:92:02:9c:e9:45:
         46:95:7c:c0:7e:6d:bf:01:ff:4b:b8:77:e9:1f:64:bf:cb:21:
         7b:98:49:f4:93:c2:bf:79:23:3c:9e:70:cd:87:94:38:94:1b:
         b6:41:ce:53:f0:4f:f4:ba:e8:39:f0:b3:1a:de:98:74:50:9d:
         96:4a:51:5d:17:98:48:2b:fa:ff:9d:20:ec:2f:de:49:b5:f4:
         76:f9:a8:e9:49:53:de:66:d8:1f:45:a4:c3:b1:a5:03:a1:c5:
         95:1d:75:4f:65:2c:22:46:40:fc:cc:64:59:01:8f:43:af:7c:
         75:e4:10:1d:2f:ee:4f:ee:ab:8e:03:07:77:ba:3c:48:3a:a0:
         f7:54:9b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org