Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa
File:                     3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          o3DnACARiXk8MGsB09WCoJv54QU42+msRc7JDYFmXrc=
Subject key identifier:   FB:86:18:62:71:FC:D3:CF:32:02:5A:0A:C9:3A:85:B8:C7:5C:49:F8
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       04C1E1E18551E132006242157741F6E728B1D92C
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa
Signing time:             Mon 31 Jul 2023 00:05:08 +0000
ROA not before:           Mon 31 Jul 2023 00:00:08 +0000
ROA not after:            Mon 29 Jul 2024 00:05:08 +0000
asID:                     38150
IP address blocks:        180.214.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c1:e1:e1:85:51:e1:32:00:62:42:15:77:41:f6:e7:28:b1:d9:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Jul 31 00:00:08 2023 GMT
            Not After : Jul 29 00:05:08 2024 GMT
        Subject: CN=FB86186271FCD3CF32025A0AC93A85B8C75C49F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:a0:93:f6:30:d0:2e:bc:f8:f4:e1:39:11:90:
                    da:d5:2c:34:20:e0:21:6d:50:4a:7c:0d:cd:0e:aa:
                    5a:2a:9c:a3:33:ce:02:90:52:d2:94:75:f9:8a:4b:
                    c1:8b:41:2f:8a:3a:02:72:27:96:33:87:25:a2:fe:
                    d6:9e:7c:ec:12:d0:d0:e3:78:2d:c1:9b:8f:3a:ec:
                    cc:c9:09:40:e8:95:10:3f:15:fa:5a:48:44:7b:37:
                    ad:a8:16:7b:78:5d:fe:48:9f:cb:99:5b:30:a8:28:
                    11:df:15:5e:d8:e3:3f:ea:ad:67:0b:3a:f2:35:46:
                    22:7b:d5:f7:e4:1d:ae:c2:3b:5c:b1:6e:00:64:12:
                    26:bf:1a:da:9d:b4:14:78:15:7f:5e:5a:d9:24:3c:
                    f4:e7:2b:11:f3:02:14:4e:0e:b7:d7:8a:57:60:69:
                    7d:04:e7:7b:25:b0:ef:ed:53:53:c4:3d:3f:36:b5:
                    9e:b4:82:9b:d7:b8:93:ca:cb:2f:3f:6d:2a:4d:77:
                    36:e3:9d:fa:19:56:3d:56:e7:13:7b:d2:cc:f6:46:
                    fd:10:0c:f9:61:27:32:65:35:ec:0d:b3:df:fd:31:
                    5c:0a:5c:7e:8c:de:a7:0b:c4:b5:71:2f:ad:e5:83:
                    3f:d1:10:be:ad:ca:02:4a:b3:10:d6:5f:58:8a:2b:
                    ea:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:86:18:62:71:FC:D3:CF:32:02:5A:0A:C9:3A:85:B8:C7:5C:49:F8
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:11:43:39:21:ee:c2:56:9e:e1:88:59:2d:35:f7:bf:1b:86:
         56:0a:7c:2e:b4:49:89:3e:b1:3c:e9:49:0f:7d:3f:45:33:2e:
         4e:f6:ac:eb:18:41:6b:e1:af:8c:8c:ef:0d:67:26:a7:b7:75:
         47:1f:0b:10:dd:4f:ff:a3:b3:95:42:ab:ad:7c:cf:bc:b0:d0:
         25:ea:3c:f8:96:44:4a:f9:d9:b2:85:d6:cf:6e:0c:b3:1b:6c:
         8b:71:18:38:de:bf:52:bc:6a:4e:95:60:00:3b:20:e7:ce:a1:
         b1:2a:87:d0:50:19:95:1c:74:0f:39:3a:49:cf:36:01:66:3a:
         e1:08:a7:a2:79:01:4e:da:f6:a8:24:8a:60:6f:6e:32:04:47:
         89:53:11:20:14:ad:14:cd:1c:b5:ea:70:64:0e:c1:1c:7e:51:
         8d:ef:c2:15:22:5c:39:40:e2:f4:bf:49:8a:4c:95:9d:1e:56:
         86:10:39:12:3f:19:2f:17:67:ad:8a:66:b6:2d:01:a3:b3:ae:
         08:43:1b:d7:69:67:34:53:8b:10:1d:b7:5d:e5:90:25:36:34:
         e5:f0:f5:2c:8b:af:24:76:25:02:7f:d7:6a:29:02:d4:0e:32:
         f5:11:72:17:c9:f8:5c:6f:12:a5:a5:38:94:b7:7b:3a:13:4f:
         ed:55:18:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:30:50 2024 by rpki-client on console-fra.rpki-client.org