Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa
File:                     3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          MSzljIuYQfz1eIyPrxVgE2dh+zA9wOeElTFbm36ZtIg=
Subject key identifier:   3B:89:46:F4:A8:81:B9:2F:21:29:8E:B0:7E:9C:35:EB:4C:A0:D3:4E
Certificate issuer:       /CN=B605E2C01C5BDC6CEE49545C80501360234DC910
Certificate serial:       366A2CE8E6FBC508A50C3254EE1DD2C7E4BE77B7
Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa
Signing time:             Mon 01 Jul 2024 01:04:39 +0000
ROA not before:           Mon 01 Jul 2024 00:59:39 +0000
ROA not after:            Mon 30 Jun 2025 01:04:39 +0000
asID:                     131717
IP address blocks:        115.178.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl
                          rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6a:2c:e8:e6:fb:c5:08:a5:0c:32:54:ee:1d:d2:c7:e4:be:77:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910
        Validity
            Not Before: Jul  1 00:59:39 2024 GMT
            Not After : Jun 30 01:04:39 2025 GMT
        Subject: CN=3B8946F4A881B92F21298EB07E9C35EB4CA0D34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1c:50:c8:93:12:ff:79:23:40:55:00:d6:a3:
                    30:5f:cf:81:69:d7:e8:ba:2c:49:fd:1b:5f:8c:95:
                    d1:fc:53:ea:fe:fa:75:2b:9b:86:ff:27:05:d2:a0:
                    eb:9e:7c:9d:4d:fc:00:34:87:4c:ed:22:59:c8:1a:
                    fe:0a:70:01:2d:27:18:39:b1:be:53:8e:45:db:cb:
                    46:37:9a:bb:75:fc:6e:06:66:52:21:f8:86:ac:75:
                    0d:21:98:f0:f5:1a:69:a1:33:37:3e:c7:00:29:28:
                    fe:c9:d4:6d:e8:a0:9f:13:7d:c8:34:c6:8c:e2:a0:
                    0e:c3:f8:30:02:5b:36:91:08:82:21:e9:ae:c0:fb:
                    a3:36:06:36:10:55:10:f6:64:40:49:4a:46:df:64:
                    97:8c:14:69:b7:c9:bd:33:e0:6d:c5:66:29:01:70:
                    3c:9f:8a:05:cc:29:c9:d2:da:23:dc:a2:15:92:ba:
                    97:45:58:3f:50:fb:a9:ca:87:40:88:a5:69:c5:c1:
                    ce:7a:d8:28:33:36:b0:ba:65:64:65:fb:81:72:b0:
                    7c:c7:14:31:a6:4d:17:60:e6:95:22:a5:c9:d8:b7:
                    bb:ca:f7:c3:16:aa:6d:50:5f:9c:d3:d0:24:46:22:
                    72:95:8f:ae:13:3f:7d:b5:8a:9e:2a:49:79:1f:56:
                    05:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:89:46:F4:A8:81:B9:2F:21:29:8E:B0:7E:9C:35:EB:4C:A0:D3:4E
            X509v3 Authority Key Identifier:
                keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:9e:6b:55:13:e4:1a:65:d6:cb:c2:b1:a1:80:24:5e:11:77:
         1f:f4:2c:85:75:2c:13:49:f0:c6:47:c3:2e:cf:94:98:a0:77:
         99:42:0c:f9:38:8f:02:f6:aa:12:3e:2a:71:b9:3b:33:20:57:
         43:14:db:1d:58:83:9c:22:9a:e5:65:76:ab:75:0b:f6:c9:84:
         90:be:62:88:f0:32:da:87:cc:a4:3e:af:7b:dd:6e:8f:00:41:
         98:6a:b0:ff:d7:97:d2:98:d1:4d:e8:e5:0f:02:5a:ce:d8:5a:
         60:81:e4:41:59:ef:0d:63:ad:47:37:dc:58:cf:2a:b5:94:e6:
         d6:37:3d:f9:27:02:f0:29:7a:9a:40:fd:31:00:fb:2f:f4:e8:
         21:19:b8:7c:60:95:33:2e:c0:43:a9:15:95:1f:26:97:54:2b:
         2c:53:a8:1f:a4:23:81:72:11:bc:dc:b5:59:c0:11:87:de:95:
         e5:0d:a7:f4:60:1e:41:75:16:fd:26:92:b3:78:7b:7e:9c:5a:
         dc:39:82:15:2a:9d:35:fd:17:72:04:f1:73:ad:07:73:da:55:
         19:89:b6:21:5d:81:99:25:9d:c7:ab:49:de:28:68:70:82:21:
         3f:54:59:b5:f2:db:21:d7:bf:86:ce:8b:53:47:58:83:0a:83:
         bc:dc:6f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:21 2024 by rpki-client on console-fra.rpki-client.org