Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133382e302f32332d3234203d3e2039373934.roa
File:                     3131352e3137382e3133382e302f32332d3234203d3e2039373934.roa (raw, json)
Hash identifier:          fph6p4DznFGZjPUOgN8FDvNuvT4RAXLgrVM/yWRkpyY=
Subject key identifier:   D3:E0:0A:FC:88:02:57:8A:22:ED:04:D6:89:7B:F0:EB:74:D4:CE:CD
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       2667FE800927EAAA1A79E5284CAA3EA8F811ACCB
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133382e302f32332d3234203d3e2039373934.roa
Signing time:             Thu 11 Jan 2024 08:00:01 +0000
ROA not before:           Thu 11 Jan 2024 07:55:01 +0000
ROA not after:            Thu 09 Jan 2025 08:00:01 +0000
asID:                     9794
IP address blocks:        115.178.138.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:67:fe:80:09:27:ea:aa:1a:79:e5:28:4c:aa:3e:a8:f8:11:ac:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jan 11 07:55:01 2024 GMT
            Not After : Jan  9 08:00:01 2025 GMT
        Subject: CN=D3E00AFC8802578A22ED04D6897BF0EB74D4CECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:7e:b9:67:7e:0e:0a:4f:c0:73:01:9d:fd:
                    f4:dd:63:f2:4f:c3:06:e3:cf:2f:dc:d8:20:ce:75:
                    18:b3:46:8e:36:0b:65:af:7e:c3:7d:92:e4:55:5d:
                    80:04:ad:f8:1a:9e:72:11:ba:d3:d1:2a:5b:f4:45:
                    37:64:cd:89:b2:38:7f:95:16:b4:9f:5f:5f:10:46:
                    4b:ed:81:43:3d:71:bb:8c:9f:1c:76:b3:19:37:ab:
                    7b:e9:b2:02:a6:f5:ad:ec:24:73:66:22:2b:50:10:
                    03:46:03:ff:ac:da:4c:ed:fe:3b:5d:9c:60:9b:c4:
                    bf:e4:b3:df:ab:8f:ae:47:05:a7:65:8c:6b:9e:f2:
                    5f:5b:21:67:5f:6e:95:02:69:67:10:b2:84:16:59:
                    2c:05:54:e8:82:06:93:0d:bc:82:37:55:80:54:84:
                    17:b0:e4:60:1a:49:7e:82:4a:8d:8c:3e:f9:39:fc:
                    d0:ba:7e:f5:06:25:ba:a4:a7:93:f7:37:76:3a:88:
                    89:2a:42:05:34:be:bc:6f:cb:0c:11:a6:b0:b4:d3:
                    1e:53:46:d3:d6:be:68:f7:c7:08:23:3a:0d:b4:e7:
                    86:7c:23:0f:62:b9:0e:c7:62:86:93:8a:41:ec:ca:
                    ab:99:fc:8a:43:ac:d4:5a:92:c8:6f:c8:ee:22:61:
                    a6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E0:0A:FC:88:02:57:8A:22:ED:04:D6:89:7B:F0:EB:74:D4:CE:CD
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133382e302f32332d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:3f:df:ef:d0:a7:00:6c:14:27:15:07:70:45:45:dd:ba:99:
         40:50:a6:74:a7:57:6b:34:e5:1d:9d:1e:08:db:9b:05:23:fd:
         c4:19:c8:e9:f4:7c:6d:de:da:ec:b6:6e:d4:67:e5:b8:de:4d:
         72:16:f2:75:bf:14:19:25:72:59:bc:20:ee:3f:3b:b6:1b:ad:
         7e:99:44:cd:96:db:83:47:27:eb:9d:7e:b9:fa:0d:f2:71:7e:
         76:16:5b:93:a5:3c:0e:f6:79:e1:61:7c:c3:2c:9b:5a:2d:69:
         4b:7b:55:27:22:6f:48:15:34:be:e6:ca:2b:ce:d8:43:d4:48:
         a6:c3:ac:17:8d:45:e6:95:d5:00:c5:73:2f:e6:06:e3:ee:32:
         02:84:c4:79:9a:bc:97:fe:d9:08:9a:a1:36:0b:8b:23:9f:c2:
         50:ee:51:ab:c9:aa:f9:bd:b1:a2:45:27:03:dc:23:98:30:f0:
         01:fc:8d:d7:4c:a3:d4:98:6c:fc:3a:67:05:2c:ed:a9:a6:7f:
         1b:92:0c:63:a9:ed:bd:6e:81:77:01:f3:b3:90:ce:c4:b7:a8:
         f8:99:46:9a:fd:1f:fe:6e:0d:37:b5:86:c4:3d:1b:7b:21:7b:
         13:a8:f0:24:f9:d3:bd:2d:c6:b7:b3:2e:42:a2:ec:82:07:c9:
         c8:d4:e4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:43 2024 by rpki-client on console-fra.rpki-client.org