Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa
File:                     3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          S5eSils4d384ioRO036RcDiPVRLOwYYNlnQ8Voe35dE=
Subject key identifier:   BE:2A:A1:22:F5:1D:9E:6B:99:7E:99:70:7F:93:73:B7:08:62:2D:81
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       34A0300AAD9471CBAC7FE3B55E17831BE76310AE
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa
Signing time:             Mon 31 Jul 2023 00:05:05 +0000
ROA not before:           Mon 31 Jul 2023 00:00:05 +0000
ROA not after:            Mon 29 Jul 2024 00:05:05 +0000
asID:                     38150
IP address blocks:        180.214.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 12:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a0:30:0a:ad:94:71:cb:ac:7f:e3:b5:5e:17:83:1b:e7:63:10:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Jul 31 00:00:05 2023 GMT
            Not After : Jul 29 00:05:05 2024 GMT
        Subject: CN=BE2AA122F51D9E6B997E99707F9373B708622D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:12:a9:14:75:9b:e2:32:a8:3b:c2:9b:66:f7:
                    9f:67:a5:81:3f:6c:9a:b6:61:cb:b5:d6:01:bf:27:
                    09:eb:a3:b4:dc:68:35:a5:19:86:d1:1f:73:af:39:
                    f0:ab:a1:5c:fe:10:56:c0:b0:3a:70:93:f3:63:7d:
                    ed:00:ae:56:80:20:c0:04:cb:34:00:92:6b:35:83:
                    8a:e7:20:86:30:83:c2:9f:1e:0d:4b:69:ac:18:b2:
                    fe:26:89:77:1e:50:3d:18:a8:94:1d:4d:82:88:02:
                    68:9b:ab:ac:4e:5a:11:4f:68:67:d7:22:dc:af:65:
                    37:84:ec:c3:c3:f9:e6:4c:19:ac:6c:73:d7:d7:f2:
                    71:81:e3:7c:ca:9e:22:83:0d:8b:b6:04:3f:83:8d:
                    f0:9e:a2:5c:c3:cb:aa:ac:07:ee:13:df:82:79:d6:
                    76:b3:a4:35:1d:5b:2d:72:50:05:e4:e8:48:5d:53:
                    29:93:2f:ff:dc:3b:d7:cf:a6:2c:ab:84:f4:34:32:
                    64:79:c5:16:ed:02:ba:a8:83:71:91:fc:71:b3:61:
                    9f:cb:74:d6:c7:e1:a6:9b:bf:e6:12:89:89:84:88:
                    4f:f2:92:57:96:8f:09:84:fb:a2:1a:50:4a:4a:6c:
                    b5:fc:b0:fe:4c:c4:3b:da:02:a7:5d:59:82:6f:a5:
                    07:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2A:A1:22:F5:1D:9E:6B:99:7E:99:70:7F:93:73:B7:08:62:2D:81
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:7d:a3:6d:d2:b6:fb:b1:0b:9a:c5:c3:ce:62:6b:6d:70:01:
         3b:e7:d4:3f:0c:01:98:95:83:5d:18:e6:8d:96:a4:06:16:1a:
         19:54:59:5a:1f:5c:b5:0f:c5:80:9f:27:75:ed:a8:32:8d:ea:
         33:2b:cc:04:d7:33:fc:ec:3f:b3:ea:c0:b8:79:09:00:1d:8d:
         cd:7a:71:da:71:6b:70:de:a6:32:c6:ac:c5:b6:a8:af:f4:14:
         25:a4:e3:26:1f:74:6a:d4:43:3e:17:06:30:10:34:ba:4b:17:
         66:f6:03:f5:e3:da:93:74:54:e6:1a:08:8e:24:7b:49:77:66:
         5a:cb:74:e1:e7:aa:c8:f2:35:ad:a5:ef:b2:4a:61:0d:fd:0a:
         97:7d:3f:ab:7a:52:44:27:a0:3b:91:38:3a:4b:64:78:dd:a6:
         49:88:b7:9e:ba:2e:1c:04:f5:11:a2:f0:ac:4b:99:c9:b4:33:
         6a:ae:92:49:77:84:10:20:84:0f:65:41:24:dc:6a:d0:bf:9b:
         b0:7d:a9:99:b7:75:a6:7e:b8:1d:20:94:a0:a8:4f:27:d5:b6:
         a0:cd:9a:2e:b2:93:63:d3:e6:b6:bf:b0:1b:9e:80:db:96:f5:
         ac:31:2e:11:5f:a6:ca:14:00:76:c6:7c:27:c9:12:31:81:10:
         ef:1f:49:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:27:33 2024 by rpki-client on console-fra.rpki-client.org