Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa
File:                     3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          UWJ096mpdu54FxPxWzuSNTx8Vt0UTXATMvPn5/z0OLI=
Subject key identifier:   B6:1A:17:34:8C:B7:08:14:7E:F2:43:AC:D4:C0:F0:50:AE:C4:47:BC
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       783E72EEC992DBE6CA76B263BE017FC09D86E9C2
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa
Signing time:             Mon 31 Jul 2023 00:05:04 +0000
ROA not before:           Mon 31 Jul 2023 00:00:04 +0000
ROA not after:            Mon 29 Jul 2024 00:05:04 +0000
asID:                     38150
IP address blocks:        180.214.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3e:72:ee:c9:92:db:e6:ca:76:b2:63:be:01:7f:c0:9d:86:e9:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Jul 31 00:00:04 2023 GMT
            Not After : Jul 29 00:05:04 2024 GMT
        Subject: CN=B61A17348CB708147EF243ACD4C0F050AEC447BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:05:9a:39:78:11:80:f4:b0:bd:34:00:c7:e1:
                    c0:bc:38:4a:13:25:bb:fa:c2:64:6e:50:e2:fc:76:
                    77:e8:73:7a:33:a6:54:d3:e5:e5:e8:0c:10:e4:4a:
                    c4:34:c2:95:47:b9:08:91:18:a0:81:d3:df:70:1b:
                    c1:06:16:bc:8e:0a:b2:9c:94:90:ca:2b:59:0b:d1:
                    9c:f8:bf:cb:ce:e2:27:24:a7:4b:b1:16:29:54:f4:
                    f7:3b:a9:13:80:bf:bc:70:db:66:e0:3c:62:c8:78:
                    3d:79:0a:6a:04:45:09:7b:2f:3e:89:95:42:2f:46:
                    9d:49:c3:4a:22:cc:ea:9e:10:52:99:92:6a:ab:a4:
                    47:d6:33:10:73:93:18:d8:f3:5f:18:78:32:ee:6e:
                    b7:83:08:fe:47:d5:1f:0a:70:23:03:a4:4b:d9:be:
                    46:55:c4:df:6a:1a:f8:50:d0:a0:d6:6c:86:36:7c:
                    cc:e7:26:dc:da:bd:e6:d9:28:9c:09:bb:2d:66:cd:
                    3a:08:44:f4:27:75:11:b7:4c:2f:d8:2f:99:c5:95:
                    10:71:fd:72:35:df:da:1c:8f:1b:41:2a:18:6b:75:
                    02:c7:77:39:db:cd:ae:0f:77:8b:42:09:47:d7:a9:
                    93:3e:19:19:e7:a0:6b:be:41:c9:0e:34:92:f0:ed:
                    67:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1A:17:34:8C:B7:08:14:7E:F2:43:AC:D4:C0:F0:50:AE:C4:47:BC
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:50:c7:1f:1e:b2:1c:61:6e:fe:c1:81:4b:0d:fa:e6:ee:54:
         fc:4d:6e:5f:11:f8:b8:fe:38:4b:ff:ab:e7:27:f9:09:15:cd:
         21:fc:82:10:e0:e5:16:81:fe:8e:45:51:65:52:7f:7f:ad:55:
         c9:a3:c8:d8:91:6a:f1:b2:92:cf:b8:92:4c:78:e0:d2:47:27:
         83:0f:77:4a:92:af:47:6d:16:ff:92:2d:61:60:4c:bc:f5:88:
         75:c0:ee:aa:fe:7b:ac:59:6f:d1:02:1f:85:3f:b2:49:79:97:
         a3:3a:18:83:91:35:35:fc:dc:3f:5c:f9:0e:2f:e1:ec:31:f5:
         4d:b2:d5:61:cc:cd:57:da:91:8e:a3:13:90:97:07:fa:e7:e4:
         8f:5e:e5:96:73:4b:53:1f:4c:f9:a8:6a:04:46:45:02:6f:74:
         c0:77:0d:8b:21:ad:5d:6a:f0:f2:87:cc:6d:80:ce:c2:c7:2f:
         cd:af:2a:ef:ba:45:9f:2f:8f:f2:23:93:21:4f:6e:1e:8f:56:
         c9:2e:2f:82:7b:03:dd:1e:21:df:12:2b:a9:9f:8d:13:f9:a6:
         06:08:9c:04:e4:ec:97:38:b8:59:0f:a6:ea:08:48:07:84:09:
         0a:93:36:53:e3:0a:79:ef:b2:65:dc:01:97:2d:07:01:09:21:
         30:1a:bd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:30:50 2024 by rpki-client on console-fra.rpki-client.org