Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa
File:                     3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          2nesNt4oWdAkHyQxEw62xi3ZAjzFaGioInIZZXdKjCk=
Subject key identifier:   01:08:2B:E8:52:5A:8E:4B:F6:85:F9:D3:89:C6:A1:F7:0E:A3:32:C6
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       51C66A20738AE714169D5285902F6B790D497FAC
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa
Signing time:             Mon 01 Jul 2024 01:03:32 +0000
ROA not before:           Mon 01 Jul 2024 00:58:32 +0000
ROA not after:            Mon 30 Jun 2025 01:03:32 +0000
asID:                     38150
IP address blocks:        180.214.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 06:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c6:6a:20:73:8a:e7:14:16:9d:52:85:90:2f:6b:79:0d:49:7f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Jul  1 00:58:32 2024 GMT
            Not After : Jun 30 01:03:32 2025 GMT
        Subject: CN=01082BE8525A8E4BF685F9D389C6A1F70EA332C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:17:06:9c:30:87:55:28:4c:e6:86:30:3b:
                    3e:5d:46:64:59:4b:e5:58:d6:74:15:9f:67:d4:c3:
                    66:ff:a6:e8:c2:32:d5:93:e9:a8:c7:bd:3f:f3:4c:
                    f3:08:a9:c6:46:53:35:fb:00:01:65:23:f9:cc:0e:
                    78:24:df:c5:7b:24:fe:f9:ab:cb:a5:48:3d:ba:d1:
                    34:49:51:74:d9:24:0f:c1:38:ef:46:b8:c7:b7:4e:
                    c0:7b:21:27:16:a9:cf:89:f6:11:76:b2:5a:8a:d0:
                    68:de:7c:a0:a2:43:68:3a:08:48:9e:8c:39:8b:84:
                    a2:59:23:81:5a:3f:2f:96:17:e6:9a:e4:58:9e:13:
                    38:e1:cf:a6:f4:58:07:be:99:c8:16:cc:11:51:3a:
                    53:16:05:c7:98:29:17:28:13:79:9e:b4:09:8d:88:
                    5f:c5:34:77:5d:e9:4e:e5:07:eb:a8:97:64:04:3a:
                    76:3a:62:d3:c9:71:1b:4b:05:a2:74:89:a0:73:56:
                    07:90:7d:b1:89:37:85:9f:9e:c3:80:4b:2f:cd:3e:
                    49:a9:90:cb:9e:32:ba:f7:c1:7f:39:86:a9:91:a2:
                    f1:04:a4:6a:1f:3f:79:86:e5:94:c1:6e:eb:9d:7f:
                    01:10:11:28:f1:92:68:5a:3e:a0:65:0e:88:e3:1f:
                    48:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:08:2B:E8:52:5A:8E:4B:F6:85:F9:D3:89:C6:A1:F7:0E:A3:32:C6
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:23:09:4e:12:52:3e:cf:29:b9:46:11:61:df:55:27:90:65:
         9e:be:a4:54:a0:bd:40:1a:88:50:ba:95:74:5a:7c:37:2c:b8:
         73:e0:0a:83:9c:85:be:6e:96:89:2e:9a:e5:de:f8:12:d4:38:
         9e:0e:90:88:23:fe:4c:f1:2f:1c:32:77:66:0b:26:6c:e2:60:
         9a:88:45:70:be:bc:96:41:0a:09:ab:6f:74:4b:c0:27:78:6b:
         cc:ab:c7:91:f8:a2:fc:51:78:74:97:8f:a6:7e:c1:8f:f9:c1:
         15:b5:f8:45:10:a8:bd:ea:05:44:6f:dd:dd:b4:46:1d:af:72:
         c3:ea:38:80:49:f8:fe:40:34:e4:3f:12:dc:d9:42:00:33:66:
         20:0c:b7:a6:4d:15:c2:41:d2:91:ad:23:79:ac:a0:2f:f0:39:
         b2:72:16:f3:67:20:e1:db:d5:7b:c9:ba:d3:a4:29:15:9e:03:
         41:62:e9:c9:b4:3a:e3:34:bc:54:02:de:86:02:5f:c1:23:9e:
         7e:c5:76:b1:dd:5b:c4:57:25:b9:dc:dd:a1:20:d3:18:49:63:
         bb:47:81:6c:a1:09:a9:44:94:67:90:99:75:d2:6b:6f:07:3e:
         d6:a0:98:95:1d:0c:a2:95:11:ae:21:65:75:1d:34:b7:c6:93:
         72:44:7f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:50:41 2024 by rpki-client on console-fra.rpki-client.org