Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132362e302f32342d3234203d3e203338343936.roa
File:                     3131352e3137382e3132362e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          IZVD6yHMITW21DK5rDHzqPCp5+CW6ErK+sWIN8PhK+k=
Subject key identifier:   73:61:E2:7F:A4:B1:6C:BE:5C:34:81:00:50:1D:8E:61:94:D9:2E:E7
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       5CC2665687BDAF9D4C2BF22201BD9FF68D3C1664
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132362e302f32342d3234203d3e203338343936.roa
Signing time:             Fri 18 Oct 2024 08:43:07 +0000
ROA not before:           Fri 18 Oct 2024 08:38:07 +0000
ROA not after:            Fri 17 Oct 2025 08:43:07 +0000
asID:                     38496
IP address blocks:        115.178.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c2:66:56:87:bd:af:9d:4c:2b:f2:22:01:bd:9f:f6:8d:3c:16:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Oct 18 08:38:07 2024 GMT
            Not After : Oct 17 08:43:07 2025 GMT
        Subject: CN=7361E27FA4B16CBE5C348100501D8E6194D92EE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4e:8e:53:85:58:33:d9:70:69:60:0c:14:2e:
                    1b:8a:89:51:fc:4e:f6:59:2d:0e:87:ca:be:25:15:
                    fc:b6:2b:12:62:94:ac:17:de:c6:89:31:98:f9:f1:
                    54:41:45:7a:75:68:c6:8b:c6:cf:0a:f8:2a:7e:4b:
                    df:37:a1:e8:f8:b0:d8:16:b2:88:ea:d4:35:8b:e4:
                    73:7a:8f:39:27:9b:a4:24:f2:2a:86:16:65:39:a5:
                    6e:31:57:db:cc:ad:45:e5:fd:e3:c5:21:1e:a9:e5:
                    cc:57:9d:94:0f:53:e3:ea:f8:09:6d:21:1a:d1:06:
                    b8:38:da:54:ad:ce:20:55:e3:d6:5a:f8:8c:23:72:
                    bf:39:fc:75:cc:98:2f:e1:63:4f:31:de:dd:a1:b5:
                    84:9c:f9:2e:96:bd:f3:48:30:e2:49:44:75:45:6b:
                    ff:21:4a:6c:1c:55:2a:9f:a8:b4:2e:ac:0f:32:44:
                    8f:bd:d1:7a:fc:bf:53:88:c8:1a:0c:aa:27:5b:d6:
                    25:d7:3b:38:66:b2:c4:b4:ec:fc:b0:85:76:ae:c7:
                    f6:4c:1d:7a:7c:9f:83:4e:b1:cd:26:3d:14:f8:c4:
                    ca:03:d2:41:8f:0a:50:56:24:0b:83:8a:5e:b9:c5:
                    f0:41:2e:89:e8:ff:44:8e:4d:04:25:f7:f5:eb:18:
                    f5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:61:E2:7F:A4:B1:6C:BE:5C:34:81:00:50:1D:8E:61:94:D9:2E:E7
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132362e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:f1:aa:53:72:8b:16:cc:5b:f6:61:55:f1:d2:df:64:0e:31:
         08:1b:74:7c:b4:24:b5:ba:ab:de:0b:e5:e2:9b:2a:7d:4a:22:
         fc:09:6d:f6:da:08:36:13:e7:2b:ff:5e:76:0d:ce:f6:28:0d:
         71:bf:e1:e0:96:bb:50:08:fc:e6:10:a8:dd:02:81:1f:53:97:
         2c:e6:71:85:5a:69:0c:f5:42:26:3c:64:e7:d6:a6:ac:3d:05:
         3f:3a:57:0f:4b:55:f9:3f:4a:51:a3:77:7b:32:66:6a:96:8a:
         60:be:ed:a2:7a:2c:f8:fb:8e:46:30:e1:05:0b:a0:c2:dd:04:
         ee:5c:2f:fe:78:05:ea:b7:6b:a4:d3:90:0e:44:dc:00:4a:f4:
         eb:71:89:12:61:a1:4e:6c:84:6a:0e:c8:a6:db:bb:74:aa:a6:
         f9:6c:79:5d:9e:ac:b9:46:13:c3:27:2b:ec:da:c8:80:9c:d6:
         52:d6:5d:86:b5:7d:82:72:c2:14:1f:dd:6d:51:21:a7:2a:05:
         ae:7d:22:91:f9:43:3b:9c:fa:64:f2:08:6d:72:df:5c:4a:1a:
         d7:70:34:aa:a8:d0:64:50:f6:35:b2:c9:81:5d:e0:c0:71:83:
         4a:d6:a8:fc:fd:97:87:e7:29:8e:93:5f:9c:33:60:d5:8c:39:
         55:87:01:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org