Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131322e37382e39362e302f32312d3234203d3e203234353230.roa
File:                     3131322e37382e39362e302f32312d3234203d3e203234353230.roa (raw, json)
Hash identifier:          9LVoSOGxFv28TCDhm9JjFNU99Jx85RHjK485z0TG/xg=
Subject key identifier:   D3:06:AA:5C:27:51:B4:50:EF:BA:92:EB:4F:21:82:BB:92:52:49:3D
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       54EB87111C0ACF98AACAB41230235D94D56615BF
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131322e37382e39362e302f32312d3234203d3e203234353230.roa
Signing time:             Mon 01 Jul 2024 01:05:32 +0000
ROA not before:           Mon 01 Jul 2024 01:00:32 +0000
ROA not after:            Mon 30 Jun 2025 01:05:32 +0000
asID:                     24520
IP address blocks:        112.78.96.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:eb:87:11:1c:0a:cf:98:aa:ca:b4:12:30:23:5d:94:d5:66:15:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Jul  1 01:00:32 2024 GMT
            Not After : Jun 30 01:05:32 2025 GMT
        Subject: CN=D306AA5C2751B450EFBA92EB4F2182BB9252493D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e0:4d:20:8f:dc:42:5a:9b:4e:27:db:d4:ed:
                    01:5d:7b:3a:43:ff:0c:8b:d7:a9:b1:27:1e:f4:2a:
                    a8:7d:d6:da:b1:e9:9a:0a:04:bf:f1:0e:91:cb:dc:
                    00:a2:0f:fb:a5:10:e8:18:5c:3e:bb:26:b5:e6:d4:
                    da:45:88:91:2c:23:25:b2:06:a1:09:4e:fc:a6:7b:
                    3a:19:a6:09:59:dc:4c:c2:51:6a:a2:3e:5d:c2:3e:
                    56:e1:11:7c:c7:0e:eb:84:8d:8f:22:01:90:28:77:
                    3f:6f:e2:a4:f1:15:82:b0:ab:20:fa:08:ce:01:f2:
                    1a:ba:31:25:31:c1:72:61:04:7a:5e:2a:19:7f:d0:
                    4e:13:17:49:0e:a2:7d:f2:5b:f0:cf:4c:f7:de:ae:
                    a6:68:e2:ed:f2:7f:28:e7:45:3c:1a:e8:6a:49:40:
                    b3:9b:bc:cf:b3:cc:b8:ae:da:e8:a4:97:2e:1b:95:
                    11:1e:69:a6:09:7d:ab:09:86:52:44:6d:41:70:10:
                    6c:23:07:69:5b:09:14:28:e2:d9:88:e3:eb:83:eb:
                    30:18:7e:23:19:2d:1e:a6:7a:d5:74:58:b3:3b:fa:
                    68:c2:49:84:cd:02:14:a3:a6:de:ae:dd:91:ac:89:
                    0b:ce:7b:76:2b:04:17:78:35:5d:84:ad:82:b3:35:
                    3d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:06:AA:5C:27:51:B4:50:EF:BA:92:EB:4F:21:82:BB:92:52:49:3D
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131322e37382e39362e302f32312d3234203d3e203234353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:e1:93:00:5b:c6:36:15:53:80:40:37:75:4d:bd:ba:8f:a3:
         99:03:6b:22:e0:16:a5:5c:2d:d4:00:e3:4a:da:9f:f5:63:51:
         31:ee:08:a9:23:cd:ab:3c:70:4a:47:e6:68:85:ce:ee:01:2e:
         84:2f:88:d8:9b:a6:08:b6:d0:c6:41:51:cf:f4:37:9c:15:2c:
         7f:a1:8d:13:8c:64:75:1a:cc:05:eb:1f:c4:92:b5:05:57:f9:
         83:aa:f6:90:60:2b:bb:34:46:50:5d:ea:8d:b3:80:18:62:89:
         d5:98:c8:6a:ee:82:af:92:ad:08:9d:1a:6e:03:20:be:51:61:
         2c:c1:52:02:be:24:3c:7a:73:49:b4:05:c9:9f:34:cb:a4:d9:
         86:94:1b:f6:28:dd:b5:9c:52:44:e5:ea:4e:15:93:13:96:54:
         36:f8:94:aa:b4:21:56:48:91:12:fc:a5:b6:2c:d5:77:bd:63:
         0f:a2:91:48:40:33:6b:f0:73:35:f4:90:41:b2:90:63:3c:5a:
         14:a9:e2:af:37:6e:ee:00:eb:8e:2a:74:7a:66:28:0a:f0:9d:
         7e:66:f4:22:2a:60:a6:d7:95:41:cc:10:7e:c5:16:aa:89:a5:
         75:18:d2:1e:0c:61:7f:25:3e:85:6d:55:b9:53:99:98:e0:b4:
         37:37:25:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 00:14:31 2024 by rpki-client on console-ams.rpki-client.org