Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35352e302f32342d3234203d3e203338373833.roa
File:                     3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (raw, json)
Hash identifier:          jKlwcNnnsnial+/jneL8P/DEDv++vIkR3WSchUhE9yQ=
Subject key identifier:   B4:3A:72:79:76:3A:34:5A:DD:B0:A2:61:11:8F:34:99:65:57:94:D4
Certificate issuer:       /CN=B605E2C01C5BDC6CEE49545C80501360234DC910
Certificate serial:       153DED2B218BBF5766BBA8D707FEF736F29B70D3
Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35352e302f32342d3234203d3e203338373833.roa
Signing time:             Mon 01 Jul 2024 01:04:38 +0000
ROA not before:           Mon 01 Jul 2024 00:59:38 +0000
ROA not after:            Mon 30 Jun 2025 01:04:38 +0000
asID:                     38783
IP address blocks:        115.178.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl
                          rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3d:ed:2b:21:8b:bf:57:66:bb:a8:d7:07:fe:f7:36:f2:9b:70:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910
        Validity
            Not Before: Jul  1 00:59:38 2024 GMT
            Not After : Jun 30 01:04:38 2025 GMT
        Subject: CN=B43A7279763A345ADDB0A261118F3499655794D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c9:3f:37:0a:d2:b7:49:f3:fd:d7:e2:a3:d7:
                    d0:dc:52:43:93:37:6c:1a:fb:c7:df:41:84:83:e5:
                    ee:42:eb:6b:8b:ea:15:68:31:9b:17:d3:96:55:02:
                    43:db:06:9e:20:f2:b3:3f:42:41:24:42:ca:c7:dc:
                    25:21:61:21:5a:4b:91:48:d7:d9:5a:e3:09:93:67:
                    4d:0f:a3:a3:19:f6:77:e1:aa:e6:e4:7f:f4:eb:bd:
                    87:99:2d:77:0b:73:54:d4:f1:8a:72:10:6c:fc:5e:
                    ed:e0:48:b5:a3:91:fb:1a:a3:da:42:c6:70:2c:43:
                    3d:91:8c:e7:6a:a5:95:fb:70:ff:1f:97:cc:7c:64:
                    f8:d0:c4:48:dc:02:ae:1b:a0:a2:a4:32:d1:d1:ab:
                    75:70:70:70:d7:56:68:f5:b1:ce:6f:74:06:32:bf:
                    8f:f8:5e:2a:54:03:75:04:1f:18:0d:bc:fd:8e:c7:
                    38:94:c4:c6:38:d7:85:44:9d:ea:30:31:4a:2f:00:
                    c3:f1:a5:06:22:52:56:af:ae:d0:b2:89:af:dc:9b:
                    63:8b:7f:66:06:fe:e5:27:21:0b:5e:7e:6e:cd:04:
                    7c:48:28:a7:ba:e9:f2:f1:87:ac:27:aa:3f:89:cd:
                    1a:33:ca:9f:be:6c:fd:9b:80:8a:d6:fe:9e:90:ac:
                    11:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3A:72:79:76:3A:34:5A:DD:B0:A2:61:11:8F:34:99:65:57:94:D4
            X509v3 Authority Key Identifier:
                keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35352e302f32342d3234203d3e203338373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ad:f6:c8:c1:39:9f:af:0c:f0:0c:08:bf:ae:06:fd:e2:4b:
         1c:30:16:c5:32:53:53:53:84:57:1f:77:48:74:dc:e5:41:8f:
         d8:c7:45:81:fc:a7:45:0d:bf:70:c5:fd:eb:b1:97:2f:0f:6e:
         81:9c:ea:5a:05:41:9d:65:a6:13:6e:6e:ff:f3:d1:b5:f3:26:
         93:bf:11:9f:a4:56:7e:12:8c:b2:1c:18:4b:da:6b:c5:57:de:
         4c:7e:21:02:c6:e2:03:1c:01:b8:f8:a5:07:c2:a3:10:9a:7b:
         63:a7:61:89:14:5a:4f:43:24:d7:df:b3:ad:f2:89:de:b3:de:
         02:13:66:25:b8:74:44:9d:b7:c7:de:fe:e3:f4:96:b6:9d:4a:
         34:b2:f4:13:ba:28:ea:cf:0c:01:78:dc:56:29:d2:4c:54:2a:
         36:6f:e1:4c:9e:e7:35:fa:2b:dc:76:71:c3:22:ce:32:f9:70:
         94:41:38:17:9f:26:d8:86:78:2a:ef:16:c1:99:8c:f2:7c:1e:
         96:16:ea:8f:4f:57:25:d9:ad:94:d2:80:d1:79:ba:ee:d9:c9:
         24:50:94:53:5f:5a:2c:e3:e5:6f:5a:d9:28:bd:93:b9:2e:3d:
         a1:eb:f2:5e:21:b0:d6:60:7e:c7:ce:a3:a8:ae:bf:e8:ef:32:
         ba:bc:6a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:21 2024 by rpki-client on console-fra.rpki-client.org