Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133312e302f32342d3234203d3e2039373934.roa
File:                     3131352e3137382e3133312e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          7Lz3XE8hjgh4CpZ192hpE55JVTd/u2MzMwGY/65MBb0=
Subject key identifier:   3D:5A:06:B5:17:AD:0F:66:C4:8C:24:FA:01:65:28:F0:50:1E:9B:F0
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       53C8111824E24011CCD83B872A09D0420E717D89
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133312e302f32342d3234203d3e2039373934.roa
Signing time:             Thu 08 Aug 2024 10:00:00 +0000
ROA not before:           Thu 08 Aug 2024 09:55:00 +0000
ROA not after:            Thu 07 Aug 2025 10:00:00 +0000
asID:                     9794
IP address blocks:        115.178.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c8:11:18:24:e2:40:11:cc:d8:3b:87:2a:09:d0:42:0e:71:7d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Aug  8 09:55:00 2024 GMT
            Not After : Aug  7 10:00:00 2025 GMT
        Subject: CN=3D5A06B517AD0F66C48C24FA016528F0501E9BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:17:c8:a6:39:e0:79:9f:de:67:72:22:e4:
                    74:ec:c3:28:b0:f1:aa:47:c2:b0:b0:b5:0d:d9:be:
                    fe:fd:cb:17:64:5e:be:25:d1:5b:68:04:29:15:84:
                    be:51:c7:cc:ab:6a:cc:3c:52:23:35:f5:5f:d2:81:
                    eb:7d:d3:12:50:c4:1b:5f:a0:86:cd:c0:5c:6f:48:
                    48:1f:ea:f1:ef:67:6e:22:a8:ea:a6:97:5f:30:a9:
                    67:b9:eb:17:69:0e:a9:b9:f2:c6:2b:eb:4c:d3:35:
                    a1:f3:75:82:17:92:3f:1c:a4:37:7d:e5:64:8e:9f:
                    dc:98:54:27:69:00:1b:6d:12:f0:2e:fe:d2:29:bd:
                    ed:c6:69:9e:52:c3:60:ca:6c:93:19:6f:96:5d:7c:
                    45:bc:f5:e2:33:d5:c7:76:c1:59:90:c2:8c:0e:33:
                    62:05:98:79:3e:80:39:d0:f5:fb:77:18:45:30:85:
                    d1:1e:b9:dd:fa:72:90:b5:36:3e:58:37:cd:4e:58:
                    28:7c:f0:5b:bf:65:1a:24:06:9c:99:11:59:e5:52:
                    11:c3:fa:8e:73:0b:60:38:51:9f:d3:16:fa:f5:47:
                    78:51:26:a7:af:69:49:ec:b1:94:06:3b:02:ce:fa:
                    aa:e1:d5:30:0a:73:a2:b8:94:a0:d4:7e:3c:85:7a:
                    29:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5A:06:B5:17:AD:0F:66:C4:8C:24:FA:01:65:28:F0:50:1E:9B:F0
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133312e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:ce:00:bd:5b:6d:9b:23:58:23:ab:ed:07:64:e0:36:2d:e7:
         73:d0:59:f0:ae:f6:5c:98:19:c1:db:0f:02:a1:51:8a:7b:66:
         7b:a9:e2:67:79:ef:7a:ee:72:ae:d9:99:e1:5d:51:ce:6b:d1:
         4c:63:1b:55:df:92:a8:62:e5:e9:c5:a9:53:3b:e5:47:a8:3c:
         47:6f:02:ba:88:fd:be:1f:be:ae:11:16:75:6b:b8:72:89:37:
         47:85:44:d4:7c:b1:98:6d:4a:a8:f9:41:a7:d2:27:cd:51:de:
         d5:83:2e:fe:77:c5:75:a5:5a:82:5b:d8:06:65:9d:ae:5c:b7:
         45:02:56:80:06:25:65:5a:d4:40:91:ba:92:63:ec:5a:77:fb:
         7a:7c:53:d2:41:a9:c3:9b:cb:04:30:15:a4:7d:29:3c:c2:12:
         2d:3c:43:e1:c4:a4:73:d7:ac:0a:bf:26:be:38:f7:07:02:71:
         cd:59:c5:75:5a:32:67:10:0a:a8:29:fd:e6:89:03:d3:be:27:
         f6:d8:28:e5:8a:ba:2f:c8:62:22:94:48:5a:ee:61:2a:61:41:
         99:00:89:01:70:b0:53:8b:8f:4a:9a:61:4f:60:41:e7:00:6c:
         9e:ee:49:49:b0:e3:bf:ad:b7:b3:fb:9d:34:1e:28:41:b3:d4:
         73:d6:e1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:01 2024 by rpki-client on console-ams.rpki-client.org