Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa
File:                     3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          hTYce+LbdSPfs/7MfQvDsCa+fGrye/JuzsfasACej3o=
Subject key identifier:   18:9E:21:6F:6A:FB:8E:6C:73:05:D7:43:21:C4:7E:7A:75:B4:6C:24
Certificate issuer:       /CN=1678828C849BDE3472FE846308767F54ED7F8232
Certificate serial:       236DBF5DB6343B1C2B185D116688C5D11EF3EB4B
Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa
Signing time:             Tue 17 Oct 2023 07:52:03 +0000
ROA not before:           Tue 17 Oct 2023 07:47:03 +0000
ROA not after:            Tue 15 Oct 2024 07:52:03 +0000
asID:                     45305
IP address blocks:        103.184.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl
                          rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 19:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:6d:bf:5d:b6:34:3b:1c:2b:18:5d:11:66:88:c5:d1:1e:f3:eb:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232
        Validity
            Not Before: Oct 17 07:47:03 2023 GMT
            Not After : Oct 15 07:52:03 2024 GMT
        Subject: CN=189E216F6AFB8E6C7305D74321C47E7A75B46C24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b4:30:23:f6:b3:c9:ee:5d:d2:cb:30:63:ed:
                    7b:ad:7f:ee:a3:9c:99:cb:cc:c0:d3:48:d8:7f:a8:
                    19:7a:36:14:ed:91:f2:d2:b4:92:64:02:f6:b7:f3:
                    fc:f3:c5:fe:79:d3:ca:58:23:96:dc:e6:0e:e8:cf:
                    d9:a3:fd:91:f7:c6:13:59:b2:bf:50:44:9a:a7:6d:
                    11:4b:bd:bd:4c:04:ee:83:5e:e5:7d:e8:bc:7a:d9:
                    c2:07:69:ba:31:0c:aa:31:4f:46:60:90:b4:34:48:
                    df:73:f5:54:bc:72:eb:d1:cb:8a:6e:5a:b0:26:d5:
                    48:52:80:45:a4:33:88:35:fa:16:bd:d5:dc:88:a3:
                    ec:50:26:60:f6:30:45:e2:04:18:86:0b:f3:26:d0:
                    de:c4:ad:44:6b:18:49:c9:7c:34:ee:0e:6e:e7:f0:
                    64:97:a9:41:92:34:74:e5:1e:13:8f:ec:a4:3f:0b:
                    76:d3:1c:7c:5a:53:9f:4a:79:34:f7:e1:cc:53:30:
                    a9:22:20:7b:16:e6:f4:3e:7a:bb:21:7b:4a:5a:ab:
                    c4:89:f5:3e:6a:14:4e:e6:df:5b:97:cb:27:92:65:
                    20:ef:9c:90:a7:57:d0:3a:00:2d:db:ba:4c:51:40:
                    ec:4f:0b:4f:3f:ee:f9:0c:7f:59:d7:ad:13:c6:42:
                    23:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9E:21:6F:6A:FB:8E:6C:73:05:D7:43:21:C4:7E:7A:75:B4:6C:24
            X509v3 Authority Key Identifier:
                keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:54:6f:6f:d5:82:14:da:cc:4d:64:fd:72:87:c2:4e:ae:58:
         2e:e6:1f:71:b7:56:9c:e2:35:39:64:5f:41:35:51:f7:7c:c4:
         0d:de:bf:83:0a:67:6a:4d:4b:d7:18:07:c7:d0:53:83:3a:5c:
         c3:96:85:a6:2d:c7:57:16:33:c7:6e:10:ac:fe:de:af:e7:53:
         0a:6b:86:e9:da:b4:07:a6:66:1f:25:a5:83:4a:87:5d:2b:d2:
         6d:cf:38:30:27:4c:79:7b:62:80:7f:00:d2:cd:8c:3b:31:c5:
         70:0a:53:2a:bb:31:9f:30:02:24:ba:ad:60:d2:d1:26:1a:35:
         9c:4c:fd:fa:3f:f7:0d:14:3c:48:ad:cf:c8:4c:59:e2:46:b9:
         94:65:27:ce:54:ec:63:00:a9:aa:7c:7b:34:0f:b7:a4:c9:d8:
         21:b3:2a:d0:10:f2:64:44:e2:c1:ad:26:a3:62:2d:31:aa:04:
         0e:52:f4:d5:9b:04:2f:d5:cc:95:fb:ee:7c:44:07:86:55:cb:
         4a:b7:89:a3:3f:6e:9c:9b:9a:e6:82:ee:22:ff:35:cb:71:f4:
         4e:1b:72:60:ab:98:aa:2d:7f:bd:5e:db:31:8a:d5:f4:5c:85:
         1b:3a:bb:2b:cf:1b:50:98:31:7b:5a:38:ac:2d:7c:8e:33:ad:
         da:10:d3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:21:31 2024 by rpki-client on console-ams.rpki-client.org