Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131322e37382e39362e302f32312d3234203d3e203338343936.roa
File:                     3131322e37382e39362e302f32312d3234203d3e203338343936.roa (raw, json)
Hash identifier:          udh2Wk1AcSyKTduoqYAmM1No1OG8lS+ebNjpr+DnhtY=
Subject key identifier:   03:8A:87:7E:48:FF:F8:8C:45:C5:7F:B0:76:D9:A4:FE:38:54:6A:45
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       589E39287EA61447653B38F45BE61776A4213598
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131322e37382e39362e302f32312d3234203d3e203338343936.roa
Signing time:             Mon 01 Jul 2024 01:05:31 +0000
ROA not before:           Mon 01 Jul 2024 01:00:31 +0000
ROA not after:            Mon 30 Jun 2025 01:05:31 +0000
asID:                     38496
IP address blocks:        112.78.96.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:9e:39:28:7e:a6:14:47:65:3b:38:f4:5b:e6:17:76:a4:21:35:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Jul  1 01:00:31 2024 GMT
            Not After : Jun 30 01:05:31 2025 GMT
        Subject: CN=038A877E48FFF88C45C57FB076D9A4FE38546A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:f9:8d:f4:c6:1f:46:cd:9a:52:29:f5:6e:
                    57:09:ce:9b:68:07:b9:27:53:64:fb:be:16:3f:f5:
                    30:7d:77:19:7d:48:9b:dd:aa:02:8d:ab:45:0f:c5:
                    ba:6f:c0:cd:c5:c8:8c:a7:ac:ea:ec:34:8d:5f:06:
                    aa:2b:5e:da:e1:7e:06:58:59:2e:fd:51:76:ed:b4:
                    0e:4d:02:17:bc:a0:db:42:7c:97:0c:ee:04:e2:cc:
                    03:08:14:31:dd:c1:8c:9c:a2:34:eb:ca:a6:ce:f9:
                    96:84:9d:4b:08:03:d3:56:a0:8d:9a:6e:13:6d:b5:
                    77:6e:b7:24:48:fd:ff:b0:09:0c:6b:c7:b4:5d:17:
                    75:d5:d7:8e:cc:71:af:51:2b:9c:ac:8d:72:58:c8:
                    87:3f:2c:71:a2:d7:61:88:02:b9:35:46:40:d3:29:
                    c7:cc:6f:2e:36:28:e0:69:e2:83:d6:20:78:1f:24:
                    cc:a6:b9:b3:78:7b:61:cc:dc:df:37:76:33:00:8e:
                    b4:93:5e:d8:15:3b:ee:18:e1:4b:d4:53:d4:75:51:
                    ee:9c:64:c4:e3:15:1e:95:47:67:87:4f:9a:ae:e5:
                    27:62:50:57:89:bd:ae:55:81:6d:e2:03:2c:72:98:
                    d4:fa:de:f4:20:4c:ed:44:ad:dd:5e:ca:42:d2:62:
                    f0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8A:87:7E:48:FF:F8:8C:45:C5:7F:B0:76:D9:A4:FE:38:54:6A:45
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131322e37382e39362e302f32312d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:7e:55:14:e2:4f:b1:1a:33:61:93:c7:df:c1:7e:93:6b:1b:
         07:0d:f4:4d:6a:2f:86:9d:b8:03:4e:81:4e:8e:78:8d:2a:72:
         e5:71:a5:37:31:61:45:2f:24:e2:fa:e0:b6:93:51:eb:b2:c1:
         95:e6:58:2d:f6:8e:53:b5:d2:57:03:19:f3:db:53:a1:4a:d5:
         3f:e4:81:e9:8c:13:4d:94:cf:3d:8a:de:ab:77:33:97:a5:4c:
         5c:05:bc:e2:4f:36:08:d9:9f:41:4c:e5:c2:47:84:a2:21:ee:
         d9:9d:6b:75:fa:58:bf:a1:f9:87:8c:4e:0a:04:16:7a:ca:a7:
         ee:aa:d9:4d:ed:70:dc:b8:39:96:ee:37:dc:8c:ea:25:9e:d2:
         e1:c5:ae:e2:16:b9:09:8b:8f:05:96:1f:75:53:6c:73:bc:25:
         df:20:f9:c5:51:85:c6:84:4f:63:82:4b:33:49:df:46:7e:4f:
         78:cd:b4:35:ff:82:91:1e:89:a9:47:76:7e:6d:28:b0:62:8a:
         da:aa:6d:b0:d3:e4:88:2f:e0:78:93:81:63:46:33:b1:3e:fb:
         95:46:02:ac:bc:3e:97:d9:17:a8:35:43:f9:fd:31:cb:39:92:
         9f:24:dc:45:13:6b:82:a7:d6:55:60:47:bf:dc:cf:00:de:2c:
         fb:3c:a9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org