Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133302e302f32342d3234203d3e2039373934.roa
File:                     3131352e3137382e3133302e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          9NGorpd4vC3cpixMq43tzFleWod6S7kTBD5mLiRTH2k=
Subject key identifier:   4A:FC:3F:D8:9D:E1:BD:C5:AD:30:0D:69:08:79:BE:EB:31:57:2F:11
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       0BF22AD3E038CF830F617FB541BF4F9B05BF0B73
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133302e302f32342d3234203d3e2039373934.roa
Signing time:             Mon 31 Jul 2023 00:03:45 +0000
ROA not before:           Sun 30 Jul 2023 23:58:45 +0000
ROA not after:            Mon 29 Jul 2024 00:03:45 +0000
asID:                     9794
IP address blocks:        115.178.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f2:2a:d3:e0:38:cf:83:0f:61:7f:b5:41:bf:4f:9b:05:bf:0b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jul 30 23:58:45 2023 GMT
            Not After : Jul 29 00:03:45 2024 GMT
        Subject: CN=4AFC3FD89DE1BDC5AD300D690879BEEB31572F11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:16:e7:b1:e7:17:60:70:e3:23:16:1d:fc:b1:
                    60:5e:f1:fe:42:3a:a6:65:a7:6c:a1:e2:c3:59:2b:
                    11:77:2e:28:f2:f2:48:5e:25:19:e4:93:23:7e:45:
                    87:ea:2d:ee:3f:53:09:c6:ef:20:e5:e2:5a:d1:65:
                    c0:e8:e5:a1:44:1c:83:57:0c:4a:31:c6:25:5b:e0:
                    fe:6a:f8:8d:f4:52:c0:74:d2:7a:13:e0:9e:81:15:
                    e3:e5:ec:77:71:30:56:6a:ee:53:f9:91:df:53:55:
                    b1:5d:a7:e2:f2:6a:3b:f6:cc:e4:b2:6d:5c:09:8a:
                    67:56:45:4a:9d:47:b6:09:89:6f:00:e4:5c:06:39:
                    ca:b5:7f:ed:9e:fc:c9:5b:1e:2f:af:d9:1b:f6:b6:
                    06:e8:d4:2a:70:1b:f3:0f:34:be:d7:da:b7:45:d0:
                    15:d3:54:72:14:82:84:26:54:ea:7a:0d:2e:4b:6c:
                    45:f1:0a:4b:f6:6e:eb:01:62:53:da:4f:13:8f:4b:
                    da:dc:04:f4:8e:82:a8:a8:71:7e:90:e0:cd:f4:5a:
                    ec:8d:26:a4:31:fb:c5:5e:4c:21:af:8c:24:36:56:
                    e3:5a:a3:a0:cc:d1:82:e0:b7:6d:fe:5b:4c:cb:69:
                    c6:0d:ff:45:0f:7b:db:07:36:f1:0f:0c:93:77:71:
                    a3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FC:3F:D8:9D:E1:BD:C5:AD:30:0D:69:08:79:BE:EB:31:57:2F:11
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133302e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:2e:1c:fd:f6:eb:db:b1:2b:a7:0d:f7:5a:ec:bc:4b:64:2c:
         7e:39:45:e4:df:62:af:ca:cb:bd:8e:6a:3d:c8:fd:6b:75:0a:
         16:be:98:c8:65:f7:8d:3b:b7:c0:4b:01:41:63:8d:a0:ed:49:
         73:be:ed:38:03:d7:fa:84:e2:00:14:d1:99:2a:78:90:59:56:
         b9:fd:b5:60:6b:37:51:f5:8c:db:fc:75:b0:0a:05:47:c7:a9:
         16:ec:c5:b5:5e:75:b1:1e:da:8c:f5:f6:b7:60:e1:62:07:f2:
         90:db:af:d3:d8:17:0c:55:97:53:60:fe:49:55:01:3b:23:a9:
         f9:9b:37:f0:8d:67:7a:0a:3d:7d:94:0a:bc:87:63:a0:d5:ff:
         71:ba:48:cd:2d:a1:1e:32:d5:b8:23:9d:01:4a:bd:1c:cc:31:
         f8:48:bb:e9:c4:c4:9d:5e:d9:55:d9:4a:55:5f:df:8a:1c:4c:
         36:56:79:40:9c:c6:b8:a4:d9:0d:c1:33:d0:6f:7c:a6:07:42:
         92:bf:8f:f4:6d:f2:06:dc:07:46:a9:09:9b:50:e3:43:2c:4f:
         93:2c:cc:60:e9:4f:8c:34:2d:27:dc:aa:cc:d7:ef:b1:c9:ba:
         19:8a:6a:06:aa:45:10:1e:a9:17:76:4c:05:7b:e8:e1:56:9c:
         55:7c:28:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 18:54:28 2024 by rpki-client on console-fra.rpki-client.org