Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa
File:                     3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          f/2H82Qaid5o3IMXt4khgRJ2TNCnkFt1IS90BtFG4io=
Subject key identifier:   01:99:EB:81:01:33:1A:03:C8:E1:7A:28:F1:23:A6:8A:42:13:FD:E9
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       4ACCB8263AE1962F5A342C1FDD9F810EAC282001
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa
Signing time:             Mon 01 Jul 2024 01:03:31 +0000
ROA not before:           Mon 01 Jul 2024 00:58:31 +0000
ROA not after:            Mon 30 Jun 2025 01:03:31 +0000
asID:                     38150
IP address blocks:        180.214.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 06:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:cc:b8:26:3a:e1:96:2f:5a:34:2c:1f:dd:9f:81:0e:ac:28:20:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Jul  1 00:58:31 2024 GMT
            Not After : Jun 30 01:03:31 2025 GMT
        Subject: CN=0199EB8101331A03C8E17A28F123A68A4213FDE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2e:8c:73:92:38:f7:28:08:ff:fa:f6:35:50:
                    8c:c5:2e:6c:7e:d0:11:7d:ef:86:09:bd:e7:87:d6:
                    34:7b:30:95:1a:0a:5f:99:7e:21:98:51:c8:6b:da:
                    36:ff:e8:5f:85:47:2f:5e:b2:d9:86:d0:e8:da:2c:
                    3f:ab:df:2c:3a:da:54:fd:34:e5:c1:1d:eb:c0:3d:
                    a0:73:ba:99:cc:a3:46:83:45:e7:51:3c:f1:cb:2e:
                    b8:7b:37:4f:aa:78:53:49:76:de:f1:2e:97:69:28:
                    87:10:6d:53:4a:bc:d1:41:1e:dd:61:fe:0f:69:48:
                    44:9f:45:ca:96:17:f8:ee:0b:2f:44:9d:e8:4c:46:
                    e8:cf:58:e3:89:58:7d:42:45:21:e0:23:33:63:fd:
                    13:b2:5b:b1:4a:84:7c:db:83:00:20:86:0a:22:5b:
                    a2:74:e9:b6:fa:1f:af:c9:2d:90:92:e2:eb:82:35:
                    c1:17:32:86:ed:ca:e1:bc:7a:88:2b:16:5b:34:35:
                    12:d1:ac:e7:26:fa:74:76:36:c5:39:96:28:b1:1e:
                    cc:27:9a:ab:5f:28:2c:a6:08:01:96:11:85:5a:95:
                    09:e5:48:30:98:69:84:87:24:d6:25:0f:75:df:3f:
                    69:c6:f0:dd:18:f4:86:64:13:02:98:f1:8e:e3:80:
                    26:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:99:EB:81:01:33:1A:03:C8:E1:7A:28:F1:23:A6:8A:42:13:FD:E9
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:f2:90:86:9b:a7:ea:b4:42:04:64:84:fb:7c:5c:95:f4:44:
         68:28:de:7c:4a:36:c0:b4:70:ec:bb:88:b7:16:d3:31:7b:59:
         f2:85:f7:e6:58:89:95:b5:4a:90:ed:31:5a:22:40:12:7e:90:
         61:0b:c0:ea:8c:e6:7f:da:8b:5a:40:68:a0:f9:0c:4d:7d:8d:
         8a:23:19:49:57:94:f0:e0:af:6c:08:8a:a4:9f:c7:01:4f:a4:
         7d:89:67:7e:11:8a:1a:aa:be:35:5b:87:ca:bd:ef:2a:25:ae:
         5d:7f:a6:78:91:92:c7:cf:d2:8d:fe:f4:ae:7c:73:65:12:22:
         33:e3:63:ab:2e:a0:b3:98:44:e9:a4:42:9d:56:83:a2:e4:e5:
         53:be:80:10:d7:be:70:6e:f7:7a:4c:3d:8d:02:c4:6b:90:20:
         98:de:e5:95:db:20:5d:52:92:ec:23:7e:db:42:1c:cc:f3:a2:
         77:cd:08:ba:0c:a3:2b:31:be:46:f5:f0:74:bb:65:22:ff:4e:
         81:66:33:da:6f:f3:b7:ea:ce:1a:26:3d:e3:41:aa:89:16:c4:
         01:84:0e:b3:96:e9:73:96:c3:3e:c9:19:8f:eb:20:de:e7:3f:
         49:f6:dd:cd:54:55:a5:e2:2b:57:d4:c1:2a:41:d6:d5:d1:71:
         65:2c:47:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org