Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39342e302f32342d3234203d3e203435373232.roa
File:                     3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier:          I9Hp6K/CDRNehTdF8O+f/ZJdycxgS83zdo7j8mcF/o8=
Subject key identifier:   92:27:1E:3E:9F:B1:DE:F9:D6:5F:22:2C:92:C6:4B:0E:9C:EC:9D:8A
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       01C0DDF8F23C8F32A53D9BA17E00359F89275BFC
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39342e302f32342d3234203d3e203435373232.roa
Signing time:             Mon 31 Jul 2023 00:05:41 +0000
ROA not before:           Mon 31 Jul 2023 00:00:41 +0000
ROA not after:            Mon 29 Jul 2024 00:05:41 +0000
asID:                     45722
IP address blocks:        180.178.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c0:dd:f8:f2:3c:8f:32:a5:3d:9b:a1:7e:00:35:9f:89:27:5b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Jul 31 00:00:41 2023 GMT
            Not After : Jul 29 00:05:41 2024 GMT
        Subject: CN=92271E3E9FB1DEF9D65F222C92C64B0E9CEC9D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:71:fc:2a:0e:94:da:4a:00:af:83:52:ee:
                    29:f3:82:77:5c:6b:0c:71:70:8d:41:b2:4d:e9:ba:
                    42:a6:69:1e:b6:4e:b9:f4:9a:23:7e:66:9b:c9:ed:
                    af:6e:a2:05:c6:c0:8c:78:85:66:3a:8f:01:6b:76:
                    4f:50:fe:a4:ef:74:fe:65:51:7b:01:e5:06:99:29:
                    78:fe:63:23:a9:84:e6:f0:d9:d5:51:0c:4a:11:47:
                    68:9c:76:28:fe:28:25:7d:fd:fa:ac:99:51:d3:39:
                    14:66:0a:68:c6:9a:43:e9:f0:78:c6:c2:60:2f:a9:
                    c2:39:08:0b:1d:de:93:85:fa:9b:e7:75:56:b0:1e:
                    cb:00:f5:47:c4:6a:47:bf:78:a5:56:d4:c6:bb:5e:
                    a7:ba:03:b7:da:03:26:d7:c1:73:7d:17:8e:ad:d4:
                    34:b8:01:21:0f:4e:e6:a2:9d:9b:96:e4:04:f3:05:
                    ad:61:6e:9e:05:67:2a:17:09:48:a7:7d:3b:0f:e2:
                    8e:3d:ea:41:fd:b0:c2:7e:75:d4:b0:b4:f0:c5:c2:
                    5b:ff:8d:ec:a1:2a:0c:5b:b9:5a:7d:9b:04:04:c8:
                    cc:c3:68:39:30:0f:c6:d8:c6:33:c7:3b:bc:4b:f5:
                    53:ca:e4:58:d8:83:d0:f7:3c:4d:e0:75:f1:fd:6c:
                    c1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:27:1E:3E:9F:B1:DE:F9:D6:5F:22:2C:92:C6:4B:0E:9C:EC:9D:8A
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39342e302f32342d3234203d3e203435373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:e6:e5:1c:96:e8:21:b7:12:72:1a:c9:cb:13:e4:f5:af:b2:
         21:2f:40:b6:79:41:33:5a:60:03:01:20:f9:ee:9c:a7:52:99:
         1f:7d:29:62:67:29:2e:61:e4:64:b4:a6:c7:29:5a:53:f9:3e:
         4c:96:20:69:f8:48:39:0f:f0:23:4d:59:dd:33:3b:a1:a4:73:
         c1:0e:8f:55:84:12:82:b5:7a:3f:d4:c2:04:84:94:08:d6:85:
         d4:04:86:f4:97:1b:15:02:ff:cb:c1:94:97:79:b0:09:5b:a6:
         83:b1:fe:f7:c1:7d:bd:0c:f6:c1:eb:9c:0b:53:de:12:ff:4b:
         67:52:f2:3c:de:33:a9:be:c7:1a:d3:7e:d2:9f:ce:55:f2:e9:
         be:a8:a2:1e:02:97:37:d8:fc:fd:4c:4d:e7:04:ea:ce:51:b1:
         58:5a:df:49:fc:39:39:99:a6:17:bc:cc:07:91:20:8f:0e:22:
         f6:f4:88:b1:b1:dc:6d:8d:06:e5:cc:a3:1e:fd:c5:3a:1f:c5:
         4b:45:93:26:97:3c:81:87:8d:07:ec:92:6a:ec:35:91:37:75:
         6c:61:4f:f3:cb:ac:1e:92:75:80:c0:93:cc:ec:6d:69:2a:d7:
         84:ae:8e:e5:08:30:af:d6:cc:d6:68:ba:38:53:31:06:8e:60:
         10:94:28:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 20:00:19 2024 by rpki-client on console-fra.rpki-client.org