Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39332e302f32342d3234203d3e203435373232.roa
File:                     3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier:          RQ8qS3znXvVJvNtPWPBA0wk2ih45H6PiyFCH7LH26So=
Subject key identifier:   37:7A:41:49:C0:11:B0:EA:BA:C4:CC:E6:89:62:92:79:85:31:0A:13
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       4878CBCB414ACAEB65547CA42BB36E4507CB7BEF
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39332e302f32342d3234203d3e203435373232.roa
Signing time:             Mon 01 Jul 2024 01:03:49 +0000
ROA not before:           Mon 01 Jul 2024 00:58:49 +0000
ROA not after:            Mon 30 Jun 2025 01:03:49 +0000
asID:                     45722
IP address blocks:        180.178.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 21:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:78:cb:cb:41:4a:ca:eb:65:54:7c:a4:2b:b3:6e:45:07:cb:7b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Jul  1 00:58:49 2024 GMT
            Not After : Jun 30 01:03:49 2025 GMT
        Subject: CN=377A4149C011B0EABAC4CCE68962927985310A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a3:29:84:07:7d:75:a5:80:c6:3e:d1:46:f2:
                    09:ef:14:34:4b:d3:47:92:a8:5b:c5:a0:92:c8:85:
                    f3:ee:a8:5e:45:09:bd:22:37:be:fb:6a:1e:14:23:
                    54:8c:1f:ca:73:18:c8:8c:55:93:6a:90:5a:fc:a6:
                    e8:e3:24:34:ac:bd:27:ca:3b:f2:07:e4:aa:ea:54:
                    8f:9f:e5:6b:bd:16:e4:aa:09:74:76:6d:16:58:9d:
                    4a:bc:45:1d:01:da:5e:09:7d:1c:ee:2d:97:e6:41:
                    5c:dd:2b:d4:e2:9e:30:7c:12:21:4f:c9:e8:ba:5e:
                    53:93:46:58:d9:e1:07:a5:b6:75:1e:9f:6a:cf:c0:
                    de:5b:0b:34:37:99:03:f7:17:93:69:29:1e:38:ec:
                    14:e3:9b:b7:31:35:c6:b4:c9:ec:dc:02:04:53:f0:
                    65:09:eb:43:c2:08:b5:26:6e:00:48:d8:f8:d9:25:
                    22:fc:82:78:c5:62:c4:f9:65:0d:45:bd:7b:29:be:
                    a4:b4:e5:37:2e:e1:c9:49:97:32:7e:01:ac:d4:0b:
                    c8:ab:65:1a:31:5e:b4:18:77:0d:f5:b9:a9:d8:be:
                    12:7c:48:33:bd:7c:c3:da:70:75:ef:72:45:6d:c2:
                    6a:6a:77:d6:f0:72:9d:03:85:2e:fe:15:fd:9a:39:
                    7d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7A:41:49:C0:11:B0:EA:BA:C4:CC:E6:89:62:92:79:85:31:0A:13
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39332e302f32342d3234203d3e203435373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:70:23:e8:0b:94:02:3f:8e:a3:b1:27:0b:36:b7:f7:8e:7a:
         05:86:92:7c:09:12:fb:81:a8:07:12:e3:a7:e3:4b:76:23:b2:
         d1:58:17:a8:da:d0:c2:68:3b:25:58:ee:b7:ca:21:1b:e8:fb:
         6e:f9:2c:2d:98:da:d1:fa:40:d4:cb:6b:41:e0:39:97:de:1b:
         ec:7c:c9:32:39:42:bd:d7:a0:e4:17:81:82:27:1b:59:bc:88:
         59:d6:1f:27:2d:41:96:02:16:36:8c:ea:5b:c2:d5:c1:03:1a:
         1b:1b:d5:7a:9e:35:6c:a3:a2:b6:e2:fe:21:9f:1a:a6:c5:de:
         3f:62:8a:49:c4:9a:72:35:63:74:36:e8:10:c2:63:f0:e6:db:
         15:1a:5d:43:75:cd:88:04:85:f4:09:e4:d5:94:95:ac:ae:02:
         d6:af:f3:95:c4:af:c2:f1:4c:e3:b6:ca:80:8d:d2:d8:5e:b3:
         55:a3:d1:9b:56:af:8f:c5:05:ca:b6:ac:86:36:8b:98:d1:04:
         89:67:88:cb:4b:39:da:b1:25:99:69:9a:05:e9:ae:4c:94:e2:
         c4:a3:96:3c:82:a2:c0:5f:04:3b:7f:63:9c:12:ff:e1:55:da:
         c2:47:1e:40:0a:e6:58:3a:f8:4e:8e:e5:78:2a:14:7a:c0:d3:
         af:51:24:36
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUSHjLy0FKyutlVHykK7NuRQfLe+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1
REUwRUEwQzAeFw0yNDA3MDEwMDU4NDlaFw0yNTA2MzAwMTAzNDlaMDMxMTAvBgNV
BAMTKDM3N0E0MTQ5QzAxMUIwRUFCQUM0Q0NFNjg5NjI5Mjc5ODUzMTBBMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdoymEB311pYDGPtFG8gnvFDRL
00eSqFvFoJLIhfPuqF5FCb0iN777ah4UI1SMH8pzGMiMVZNqkFr8pujjJDSsvSfK
O/IH5KrqVI+f5Wu9FuSqCXR2bRZYnUq8RR0B2l4JfRzuLZfmQVzdK9TinjB8EiFP
yei6XlOTRljZ4QeltnUen2rPwN5bCzQ3mQP3F5NpKR447BTjm7cxNca0yezcAgRT
8GUJ60PCCLUmbgBI2PjZJSL8gnjFYsT5ZQ1FvXspvqS05Tcu4clJlzJ+AazUC8ir
ZRoxXrQYdw31uanYvhJ8SDO9fMPacHXvckVtwmpqd9bwcp0DhS7+Ff2aOX1dAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUN3pBScARsOq6xMzmiWKSeYUxChMwHwYDVR0j
BBgwFoAUURCnF+/paxLl06R16bIXnl3g6gwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NjA3ZDkyOS00Y2E4LTRmNTMtYTI5OC01ZTMzYmUxZjg2MDQvMC81MTEwQTcxN0VG
RTk2QjEyRTVEM0E0NzVFOUIyMTc5RTVERTBFQTBDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1REUw
RUEwQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2MDdkOTI5LTRjYTgtNGY1My1h
Mjk4LTVlMzNiZTFmODYwNC8wLzMxMzgzMDJlMzEzNzM4MmUzOTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNTM3MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALSyXTANBgkqhkiG
9w0BAQsFAAOCAQEASnAj6AuUAj+Oo7EnCza39456BYaSfAkS+4GoBxLjp+NLdiOy
0VgXqNrQwmg7JVjut8ohG+j7bvksLZja0fpA1MtrQeA5l94b7HzJMjlCvdeg5BeB
gicbWbyIWdYfJy1BlgIWNozqW8LVwQMaGxvVep41bKOituL+IZ8apsXeP2KKScSa
cjVjdDboEMJj8ObbFRpdQ3XNiASF9Ank1ZSVrK4C1q/zlcSvwvFM47bKgI3S2F6z
VaPRm1avj8UFyrashjaLmNEEiWeIy0s52rElmWmaBemuTJTixKOWPIKiwF8EO39j
nBL/4VXawkceQArmWDr4To7leCoUesDTr1EkNg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org