Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3132392e302f32342d3234203d3e2039373934.roa
File:                     3131352e3137382e3132392e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          olFag344Mbu9xagNam8jX5Je8jp+auEjlRyUnMI6sr4=
Subject key identifier:   85:09:95:A3:73:77:29:EC:2F:73:10:85:52:61:3D:80:84:AC:96:DD
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       6BF99802465AC70C3D9AFB5FBEAFCB577A324098
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3132392e302f32342d3234203d3e2039373934.roa
Signing time:             Mon 31 Jul 2023 00:03:47 +0000
ROA not before:           Sun 30 Jul 2023 23:58:47 +0000
ROA not after:            Mon 29 Jul 2024 00:03:47 +0000
asID:                     9794
IP address blocks:        115.178.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f9:98:02:46:5a:c7:0c:3d:9a:fb:5f:be:af:cb:57:7a:32:40:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jul 30 23:58:47 2023 GMT
            Not After : Jul 29 00:03:47 2024 GMT
        Subject: CN=850995A3737729EC2F73108552613D8084AC96DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1c:52:8f:e5:06:a8:2a:61:9c:73:c4:67:3d:
                    24:f0:38:32:a8:e2:58:20:32:68:3d:cf:fe:5c:5c:
                    cb:d5:9b:30:a3:03:fb:98:7e:5e:b4:a5:7d:94:ec:
                    41:9c:d6:2a:53:5a:6e:8a:9d:f0:c9:62:37:57:1b:
                    d6:b6:7a:3b:a4:60:b4:e0:81:d3:89:b6:dc:66:cd:
                    ef:9b:2b:97:2b:5d:5f:75:e4:44:d5:63:c9:b5:aa:
                    ad:eb:3a:f0:7d:cf:fb:08:84:98:1a:f5:31:b5:37:
                    38:0f:17:cc:46:08:6c:c8:c1:6b:e8:6e:b9:94:96:
                    6b:72:3d:b4:fd:46:ca:81:63:08:02:54:69:12:dd:
                    2b:42:06:28:3a:93:57:5f:dc:b0:66:15:28:ca:0a:
                    af:50:fa:a6:b6:7c:82:04:2c:e7:81:e0:65:1c:c7:
                    19:57:21:6e:28:a8:47:f1:2c:2b:a8:01:96:12:c8:
                    0c:b3:f1:8e:f9:4d:b2:3d:43:99:6c:27:c5:eb:b1:
                    ae:3a:81:3d:b4:76:8e:de:5e:85:3c:88:6d:ea:2e:
                    72:72:db:ae:33:26:4b:7e:a4:a1:8d:c8:3d:da:92:
                    ca:9e:8b:7f:89:9a:71:1a:a1:f4:4e:c1:21:71:6b:
                    9e:ca:d9:cf:b9:2d:f6:b2:ea:e4:60:4c:02:97:35:
                    85:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:09:95:A3:73:77:29:EC:2F:73:10:85:52:61:3D:80:84:AC:96:DD
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3132392e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:db:27:2e:51:d3:16:ae:60:cf:1b:f8:6b:57:68:23:73:eb:
         54:f2:18:aa:ef:eb:f2:54:e8:50:a4:96:51:b2:3a:3e:b1:19:
         cd:bf:52:f2:b1:da:a3:c6:c8:c0:5f:a8:82:86:d3:7d:dc:11:
         39:2c:89:b0:63:e8:d2:88:e3:d9:40:a2:91:25:cc:42:d2:62:
         e4:98:82:6d:db:91:d2:a4:44:e0:bf:e4:0f:ab:17:7d:35:e2:
         c9:34:42:ef:e0:81:bf:fb:6b:9b:5b:6f:91:8c:da:09:b1:37:
         21:40:cb:0a:6d:36:1e:0a:11:19:ec:d7:ca:b7:a6:db:c1:89:
         0d:18:32:d3:81:73:e1:9d:5f:e9:ce:44:94:62:b0:7c:f2:8d:
         ce:ba:d1:ba:7b:9f:fa:29:23:a0:b5:bf:dd:c4:d2:6c:46:2a:
         7e:18:ca:f5:c4:64:b7:a2:90:78:71:56:0b:0f:f5:e8:b3:dd:
         05:40:a8:af:52:d8:7a:d3:36:d3:19:e9:bf:91:08:0f:b1:96:
         ea:4d:fc:8e:5f:ae:fc:f0:93:8a:04:b2:fe:6e:71:c1:93:03:
         a4:6e:8c:35:9c:dd:fd:b4:b9:1f:34:16:e8:6a:af:40:82:2d:
         e3:6d:ec:68:f1:05:ae:8f:9a:4a:2f:83:06:c2:aa:dc:36:67:
         25:1f:04:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:26 2024 by rpki-client on console-ams.rpki-client.org