Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa
File:                     3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          uMyrrNvQSHXCaIKeb7YHUJzsiyYMgIhzsvfO2xxvbt8=
Subject key identifier:   9F:D9:21:32:34:C3:60:18:26:68:BD:FC:D5:56:9D:8B:78:EA:10:9C
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       24C9D2EB839DB0883B338F4551491C71CA58D59B
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa
Signing time:             Mon 01 Jul 2024 01:03:29 +0000
ROA not before:           Mon 01 Jul 2024 00:58:29 +0000
ROA not after:            Mon 30 Jun 2025 01:03:29 +0000
asID:                     38150
IP address blocks:        180.214.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 06:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c9:d2:eb:83:9d:b0:88:3b:33:8f:45:51:49:1c:71:ca:58:d5:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Jul  1 00:58:29 2024 GMT
            Not After : Jun 30 01:03:29 2025 GMT
        Subject: CN=9FD9213234C360182668BDFCD5569D8B78EA109C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:40:95:34:c1:5c:73:a0:2b:89:07:f0:cb:
                    43:5b:76:f2:b3:ae:f2:7b:d5:ba:b3:a6:3a:25:78:
                    f4:09:13:60:04:78:e2:eb:6d:c1:be:f8:6e:6b:a2:
                    66:7e:b8:38:aa:46:17:b8:d5:9c:50:4d:e5:c8:ec:
                    1e:73:12:eb:6d:50:5d:9b:86:3e:cb:f3:ab:7b:8c:
                    ee:62:d3:df:96:6b:37:69:e4:00:5c:3d:97:01:1f:
                    c4:1e:a7:60:5b:e0:89:11:7c:7c:01:f3:2f:8c:ec:
                    35:cf:89:5c:31:c4:44:7a:15:4e:47:e6:47:fe:ec:
                    ed:74:08:fc:0b:47:79:b1:da:4a:9f:df:03:ab:05:
                    54:b8:ad:c9:ad:46:2d:23:25:28:a7:bc:76:70:10:
                    b7:33:5d:17:0e:8d:84:f0:cc:67:bb:ad:4b:d2:13:
                    43:ab:c2:1a:88:dd:e4:b0:b6:6f:69:62:b9:b5:a8:
                    6e:65:df:2e:11:b4:3f:7c:15:82:db:da:2e:de:bd:
                    be:42:62:f2:64:ed:4f:7b:4c:45:4b:c5:d8:c0:1f:
                    ac:d4:61:05:d2:51:7c:a0:05:fa:df:bf:78:b3:36:
                    0c:3f:f3:b8:98:cd:76:1b:95:f8:4d:53:75:da:a0:
                    b5:11:ba:d1:c7:81:6e:18:22:9a:d9:46:f4:f7:83:
                    7f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D9:21:32:34:C3:60:18:26:68:BD:FC:D5:56:9D:8B:78:EA:10:9C
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:6c:e6:12:e1:ce:27:2e:50:fe:0e:7c:20:9b:43:45:f9:f0:
         14:6c:12:7f:96:5a:35:ab:f1:f9:c2:92:1f:a3:2d:02:25:da:
         ab:db:78:ac:d5:09:1f:fd:ad:7c:b3:3f:14:6f:80:cc:0e:0f:
         ee:6f:a7:2b:a6:9c:e5:ef:52:0e:2d:58:d6:bc:1f:5d:33:fe:
         1a:a1:cb:96:80:61:ae:37:c4:68:1c:1d:cf:cf:05:c9:9e:05:
         c3:2c:f7:a6:3f:75:f7:d6:50:51:87:a3:31:8c:f0:d8:11:ca:
         ae:09:34:71:1a:0b:04:d1:88:30:6a:6d:bc:38:ed:bf:ca:63:
         75:e3:e6:1c:90:b3:35:cf:94:73:ef:fe:75:12:8b:18:28:1f:
         3e:fd:d8:c8:2b:1c:34:a6:53:6d:23:d4:29:50:14:e4:cd:63:
         25:86:c9:fe:f1:fe:96:6f:2b:85:91:f9:43:33:0f:f0:39:dd:
         16:cf:0b:e3:c7:6e:e7:be:c8:c2:dd:1e:79:2c:88:6a:40:91:
         9e:c0:b0:9d:b7:13:e1:24:4a:66:10:74:14:45:72:f3:fe:3b:
         a9:a8:a5:ab:bf:b6:7a:30:89:a3:c7:7f:5c:3b:89:0b:7a:42:
         d5:83:e5:3e:be:0e:67:d4:6a:d8:63:0e:11:80:e8:3a:a7:d1:
         d4:41:2e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:37 2024 by rpki-client on console-ams.rpki-client.org