Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39322e302f32342d3234203d3e203435373232.roa
File:                     3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier:          QT2s5B9t6PnCCcNGSmiWwWVIE1Y3OmnLse/XbCIYmGE=
Subject key identifier:   E6:0F:66:71:B8:4F:B5:55:60:84:F3:FD:60:85:30:A5:14:2B:7D:92
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       49AFB1C703CB13A2699729DCF6201E113F21950B
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39322e302f32342d3234203d3e203435373232.roa
Signing time:             Mon 01 Jul 2024 01:03:49 +0000
ROA not before:           Mon 01 Jul 2024 00:58:49 +0000
ROA not after:            Mon 30 Jun 2025 01:03:49 +0000
asID:                     45722
IP address blocks:        180.178.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 21:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:af:b1:c7:03:cb:13:a2:69:97:29:dc:f6:20:1e:11:3f:21:95:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Jul  1 00:58:49 2024 GMT
            Not After : Jun 30 01:03:49 2025 GMT
        Subject: CN=E60F6671B84FB5556084F3FD608530A5142B7D92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:89:80:f1:14:ba:79:a2:c5:a7:a9:c5:c6:f4:
                    ca:4c:61:c5:0c:91:a0:d2:46:19:c6:6c:b5:75:71:
                    cd:28:c3:6f:90:54:7f:34:25:07:ec:e5:c1:04:05:
                    eb:b8:07:4a:8f:eb:0c:8f:3e:9d:e4:0a:07:fa:db:
                    9f:aa:81:37:5e:eb:5c:b3:e3:aa:44:ee:c9:8a:3b:
                    64:01:d4:c2:e5:a4:c6:44:9f:fb:17:71:7c:66:8f:
                    e8:cc:e8:bd:64:94:a9:39:50:ef:39:57:59:cc:da:
                    18:a6:d0:01:c8:8b:5c:40:3d:35:74:17:b5:91:1b:
                    f9:53:1f:d3:ca:c1:50:bc:64:3f:c6:83:98:2e:8e:
                    0d:e4:b1:36:08:99:f2:2c:4a:10:4a:a6:d4:1a:b0:
                    57:b4:55:5b:09:03:4c:e1:9b:b2:b2:1a:a7:ad:4f:
                    f2:62:b4:93:31:cc:27:59:98:7c:ef:22:87:70:3c:
                    90:37:19:76:53:c5:c5:dd:16:f6:71:6d:9a:d4:ff:
                    cf:ae:11:ec:0f:3c:1b:f5:25:7c:97:38:c2:51:c9:
                    b3:cd:fc:07:8c:99:b1:76:51:47:f3:12:42:da:15:
                    f9:10:55:0a:69:34:36:6f:e1:84:50:93:a2:3e:f1:
                    f3:95:a3:f5:9d:d3:80:3b:ca:61:3e:3a:42:43:c0:
                    7e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0F:66:71:B8:4F:B5:55:60:84:F3:FD:60:85:30:A5:14:2B:7D:92
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39322e302f32342d3234203d3e203435373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:5a:30:6e:d9:8a:2f:e2:d7:aa:b6:a1:bb:0d:f4:e7:12:20:
         7d:8d:13:ee:4e:0d:a1:31:d5:53:5c:e7:5c:9d:6e:06:00:26:
         72:a8:7d:9e:5a:6a:bb:24:10:51:2b:5d:f6:65:15:d3:83:70:
         78:ae:c5:f1:68:62:e3:59:bc:81:62:96:24:d9:ab:c7:d3:3f:
         5f:04:2c:39:82:3f:d0:9e:07:18:a2:2f:3a:2e:5f:99:65:91:
         fd:2c:76:f5:59:a5:18:9b:91:19:d1:30:c8:51:9a:51:a1:b3:
         23:a2:6f:a1:b5:45:1f:e9:72:34:bd:26:22:66:17:aa:b1:73:
         7d:db:3a:62:93:9a:63:62:f5:e2:3e:c4:8f:5a:58:f6:de:8d:
         71:b3:c4:5a:3b:22:04:b8:01:39:d5:a8:41:23:c3:90:2b:96:
         96:20:dd:53:30:06:46:ad:da:3e:f0:76:67:28:45:e3:07:e1:
         55:69:23:a8:e5:cc:19:c7:40:7b:27:8d:37:d9:59:36:c6:73:
         9c:ce:5e:48:33:7d:9f:8e:a3:c7:3f:46:62:a1:5a:75:35:23:
         ba:18:1d:f1:c0:44:33:00:6d:42:f6:05:ae:61:a7:da:89:c1:
         79:36:35:0d:b2:f5:0a:13:dd:a6:ed:b3:60:8b:a8:6c:52:aa:
         0e:4b:38:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org