Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa
File:                     3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa (raw, json)
Hash identifier:          P8eOAenP4pRLprM6dIS9jwJ2kWmUKLBnJOvn2ZWUV8s=
Subject key identifier:   41:87:80:41:24:AA:21:C2:E2:6B:BF:1B:FC:D7:6E:65:DF:88:9E:42
Certificate issuer:       /CN=B247FB55BE5739FCE4EBBD20B84542267C15D192
Certificate serial:       05433A9D90310AD771CFB235079CBE4CE01A293D
Authority key identifier: B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa
Signing time:             Sun 13 Oct 2024 01:00:01 +0000
ROA not before:           Sun 13 Oct 2024 00:55:01 +0000
ROA not after:            Sun 12 Oct 2025 01:00:01 +0000
asID:                     149344
IP address blocks:        103.176.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl
                          rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:43:3a:9d:90:31:0a:d7:71:cf:b2:35:07:9c:be:4c:e0:1a:29:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B247FB55BE5739FCE4EBBD20B84542267C15D192
        Validity
            Not Before: Oct 13 00:55:01 2024 GMT
            Not After : Oct 12 01:00:01 2025 GMT
        Subject: CN=4187804124AA21C2E26BBF1BFCD76E65DF889E42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cb:3e:71:52:8c:08:68:4a:77:2e:af:5d:02:
                    0a:8f:63:ec:25:de:73:dd:3d:73:78:c2:12:a5:eb:
                    9b:04:62:3a:61:8d:c6:ea:a4:81:5b:9c:dd:ba:0f:
                    99:bf:2c:f0:84:6e:87:9f:97:6d:1d:54:51:bf:f6:
                    c9:0f:ad:7e:23:7e:7d:96:63:85:81:b4:c4:c5:4f:
                    6a:56:eb:a5:87:00:2f:1e:57:2e:ed:24:2a:1e:af:
                    f0:69:ab:82:63:33:f1:df:f6:60:0b:24:a6:15:fd:
                    19:7a:3c:84:5f:e0:79:46:0e:a7:4e:a2:b2:d9:70:
                    7e:da:8d:44:0b:f7:c2:d7:d8:a5:17:45:64:a9:14:
                    4a:5e:c6:79:17:a4:a3:0a:40:7a:b5:e5:99:0e:c3:
                    c8:cd:2e:83:8e:b5:5b:2d:f4:45:e2:73:1b:6e:8a:
                    d0:05:d7:a0:ca:66:45:c7:f0:dd:f8:3a:ec:3a:c1:
                    29:bd:7f:06:f7:36:7c:ae:32:28:04:a6:8e:a0:7c:
                    f0:ad:d7:59:20:09:44:50:5e:8e:4c:2d:ea:70:63:
                    03:52:35:f3:25:ec:c1:63:ed:7c:f7:c7:e4:e6:00:
                    49:16:4f:59:a4:05:d0:79:9c:be:60:36:fe:8a:96:
                    af:7d:d9:49:fb:1b:ca:26:a4:ef:61:6d:f4:70:de:
                    8a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:87:80:41:24:AA:21:C2:E2:6B:BF:1B:FC:D7:6E:65:DF:88:9E:42
            X509v3 Authority Key Identifier:
                keyid:B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:ce:86:92:da:fa:58:8d:f9:4c:3d:cd:81:66:9d:0c:8a:1f:
         38:26:33:b8:0d:57:96:ec:25:62:09:07:f7:f3:3e:a7:44:0a:
         d4:9c:2e:d3:b8:eb:8b:dd:63:84:8b:54:e9:78:02:53:d9:8c:
         5b:e6:fb:57:e3:9c:7b:be:b0:68:bb:c5:34:7c:47:ab:28:5c:
         2e:85:93:13:de:63:00:74:8e:7f:db:87:de:5b:6c:7a:2e:2e:
         51:dc:54:3f:7d:8a:ca:4c:38:61:a8:35:bc:83:33:0b:2a:fd:
         d2:3e:90:e6:60:fe:f8:ea:49:17:d2:34:85:e6:a6:29:83:69:
         d9:6d:04:9c:57:9e:ae:0d:cf:9c:85:82:c5:48:09:2d:26:f1:
         0a:0a:26:66:4c:a4:57:a9:65:2a:13:44:28:d5:77:18:af:65:
         cd:97:3a:7c:b1:89:cd:af:8f:8e:f4:17:d2:66:06:28:54:9e:
         e9:5e:fb:7a:b9:52:2d:1b:32:1a:7e:77:d2:c5:2f:56:a6:7f:
         75:ef:88:cd:60:c8:45:5d:f2:c9:4b:6d:70:a8:24:e0:2a:3c:
         61:68:3c:e0:36:2f:47:05:0c:57:4f:bc:08:e0:d1:a9:07:c3:
         87:b0:b6:ca:5f:f3:85:23:80:80:35:5b:d6:a3:8e:ef:9e:f6:
         c4:9e:ef:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 23:38:09 2024 by rpki-client on console-fra.rpki-client.org