Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa
File:                     3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa (raw, json)
Hash identifier:          iMfSSinGtDPKsnUITF8ucJ6Jhn1US8MkEsGsTfwFNZs=
Subject key identifier:   7B:1A:4A:94:1B:59:A1:70:6E:8E:43:F2:AE:20:E5:A0:3E:87:5F:F4
Certificate issuer:       /CN=B247FB55BE5739FCE4EBBD20B84542267C15D192
Certificate serial:       391D2967985235FB4C5FD7139402D6CFC5336544
Authority key identifier: B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa
Signing time:             Sun 13 Oct 2024 01:00:01 +0000
ROA not before:           Sun 13 Oct 2024 00:55:01 +0000
ROA not after:            Sun 12 Oct 2025 01:00:01 +0000
asID:                     149344
IP address blocks:        103.176.98.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl
                          rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1d:29:67:98:52:35:fb:4c:5f:d7:13:94:02:d6:cf:c5:33:65:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B247FB55BE5739FCE4EBBD20B84542267C15D192
        Validity
            Not Before: Oct 13 00:55:01 2024 GMT
            Not After : Oct 12 01:00:01 2025 GMT
        Subject: CN=7B1A4A941B59A1706E8E43F2AE20E5A03E875FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0d:e1:22:ab:36:41:10:ed:6d:2f:db:80:b8:
                    52:74:0c:17:4d:b8:74:f5:58:a6:6a:49:4e:d0:63:
                    b0:fe:07:1a:f9:69:22:db:f3:47:cb:64:f6:51:bf:
                    c4:0c:9a:8f:ec:f1:85:87:45:77:65:89:27:a5:ea:
                    55:a7:7a:77:0f:fb:42:54:e1:e2:3d:c9:8a:34:0b:
                    99:97:20:20:6a:5c:42:f5:8f:1d:2b:02:27:6c:cd:
                    f4:8c:dc:3f:57:0c:5c:5a:88:a8:0e:a1:3c:8f:6e:
                    11:4c:33:40:e8:3e:c1:b1:4f:38:64:df:bd:10:c3:
                    7d:c3:c9:d5:52:fd:ec:e4:07:39:18:3f:67:7b:6f:
                    e5:d9:a9:9b:32:80:b7:51:ed:b3:fc:99:82:e0:b4:
                    46:5e:fc:83:49:4a:58:25:55:0d:39:75:1a:2c:f8:
                    2a:71:ee:24:3b:a9:fc:e1:31:6c:a4:77:d3:2a:95:
                    df:15:01:ed:a3:a4:b9:a2:de:31:4c:99:04:5c:fe:
                    d8:fb:ff:e6:71:76:19:da:41:ce:ff:7e:10:65:00:
                    ca:31:3f:21:31:ce:bd:5e:10:bf:eb:d6:57:2e:46:
                    d8:bf:bf:0e:b5:06:d5:bf:7f:e4:22:ea:7e:e9:42:
                    9f:14:39:54:f7:c7:81:96:92:fb:3d:75:8f:64:50:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1A:4A:94:1B:59:A1:70:6E:8E:43:F2:AE:20:E5:A0:3E:87:5F:F4
            X509v3 Authority Key Identifier:
                keyid:B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:76:4e:16:b0:eb:5a:42:c4:a9:da:dc:9f:37:e4:7d:c1:1d:
         fc:fb:d7:b2:00:b9:0a:6c:fa:7e:88:24:1c:b9:88:96:b8:40:
         11:c7:08:f6:8d:eb:3a:a9:5e:a6:b7:e0:b2:8a:62:03:9f:ff:
         b7:94:e2:eb:36:93:15:c8:ac:29:23:24:f9:56:19:f5:85:f1:
         4c:d7:30:a4:f7:b7:c6:ed:1f:da:ce:ee:3b:6a:ee:82:2f:77:
         40:16:cd:65:49:9d:05:ba:11:ee:7c:63:09:83:15:8c:d9:a0:
         56:ad:87:6a:5d:c6:41:0a:5c:72:02:2e:e4:6d:43:92:6d:ef:
         c1:90:e7:7b:4d:78:3f:9c:f7:d0:9d:2f:1c:f0:00:66:b0:98:
         53:22:3b:64:0f:f4:e5:30:c3:90:7d:36:23:f8:f4:95:a2:58:
         04:15:e6:2b:a7:1e:93:1b:2d:10:d5:28:0a:22:bd:07:02:9a:
         b4:79:5c:4b:13:80:00:51:20:7f:a5:d6:73:2b:4e:91:79:82:
         c1:0a:61:71:d3:d1:92:05:88:47:36:0e:bc:45:a5:8b:e3:ef:
         44:9a:b4:21:64:d8:48:8c:ec:21:02:9a:52:62:c7:34:7e:4e:
         6d:25:f3:3a:21:ba:84:1d:51:bb:86:8f:83:5d:db:b4:54:23:
         48:a0:48:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:30:28 2024 by rpki-client on console-ams.rpki-client.org