Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133302e302f32342d3234203d3e2039373934.roa
File:                     3131352e3137382e3133302e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          bbCos4S4dBkB0hazWsvxPBAT4Xh+hnf+q62HJzFDguk=
Subject key identifier:   80:38:13:A0:D7:A4:55:35:A3:98:B4:44:18:6D:87:E7:97:A3:3A:0A
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       031CDB2369DF30B827CD92B6346B7A6915E9CE69
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133302e302f32342d3234203d3e2039373934.roa
Signing time:             Mon 01 Jul 2024 01:03:02 +0000
ROA not before:           Mon 01 Jul 2024 00:58:02 +0000
ROA not after:            Mon 30 Jun 2025 01:03:02 +0000
asID:                     9794
IP address blocks:        115.178.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1c:db:23:69:df:30:b8:27:cd:92:b6:34:6b:7a:69:15:e9:ce:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jul  1 00:58:02 2024 GMT
            Not After : Jun 30 01:03:02 2025 GMT
        Subject: CN=803813A0D7A45535A398B444186D87E797A33A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8d:a8:d4:86:09:73:5c:72:66:cc:6a:4b:19:
                    b8:15:81:34:dd:fa:d6:23:97:96:57:44:42:df:cf:
                    ea:ba:1c:b7:a5:9b:70:60:b1:91:d7:8b:05:82:c1:
                    fd:88:86:95:64:61:a3:8b:fb:97:2a:8d:05:9e:1d:
                    20:e2:f8:fb:c0:19:0e:b3:3b:0b:35:93:88:54:1c:
                    89:d0:32:d9:d1:af:58:1e:37:bb:b7:06:04:66:cc:
                    da:74:73:fb:90:0b:0c:1d:4c:a6:d8:cd:70:3d:40:
                    70:af:88:da:0f:c8:33:13:59:73:94:4e:27:da:58:
                    e8:1a:45:50:d2:3e:b1:db:72:d9:20:fb:86:95:bf:
                    59:13:03:0f:99:9b:2d:43:63:d7:0c:20:b1:97:f4:
                    96:f3:43:68:a6:a7:86:4e:37:b8:97:07:15:4b:98:
                    3c:8b:10:6f:f5:a5:6e:64:3f:42:dc:45:f3:c9:d1:
                    6d:0d:e6:9d:6a:5f:f0:f4:63:ef:09:2c:bb:1e:e7:
                    3c:4f:f1:0c:54:09:97:3c:8e:a4:94:ea:c5:01:c2:
                    4f:5d:37:a7:a0:a7:9c:27:7c:53:2f:3f:00:30:14:
                    fd:45:2b:fe:fb:fa:c4:3a:98:f4:e9:6b:56:37:2a:
                    07:8a:02:c9:17:42:aa:91:4b:6b:cf:a8:2b:a1:28:
                    38:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:38:13:A0:D7:A4:55:35:A3:98:B4:44:18:6D:87:E7:97:A3:3A:0A
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133302e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:4e:fd:b3:4a:ae:64:89:e1:ab:ae:0f:45:a8:c9:f8:72:a2:
         91:d3:81:ae:59:54:c2:98:2c:7d:0c:2e:96:ac:50:81:f7:5f:
         76:70:95:fd:db:21:c5:a2:60:8f:c5:8f:4d:f2:9e:0b:a8:dc:
         36:c4:af:b2:dc:b8:89:eb:2b:c1:f1:68:10:0d:b7:29:f2:32:
         37:a9:c2:59:d4:f9:81:34:93:79:3c:e7:9c:53:63:80:c2:fc:
         b4:e8:9b:ae:9c:8b:bc:97:2b:9d:75:36:99:4e:5c:57:1f:c8:
         2a:1a:bc:ad:d6:77:6e:45:f1:4c:3e:63:de:b7:66:ab:b8:65:
         16:6d:e3:8a:68:9f:58:94:d6:01:4f:01:1f:f7:c5:51:61:47:
         b5:24:ab:80:c0:d7:a4:ee:d0:90:57:e1:f0:7d:bd:44:ad:8d:
         0d:a0:5f:01:4e:fb:52:94:d0:96:33:9d:dc:3a:68:5b:b0:b3:
         7c:4d:0b:22:d8:38:b0:a8:f1:44:86:cc:ed:f1:51:da:cf:3d:
         07:42:89:0a:98:a9:30:ac:74:07:2c:8b:bc:cf:64:c5:79:90:
         05:47:3c:40:fc:34:e8:5d:12:db:b7:45:46:a7:2b:bb:d7:d6:
         12:58:8b:be:a4:27:d5:6d:96:3f:30:43:59:51:9c:c0:b6:42:
         95:9b:90:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:43 2024 by rpki-client on console-fra.rpki-client.org