Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa
File:                     3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          pSMqZyq3tofIqbVs5e+fl67udIcuxiGW/jxUt5sa3SU=
Subject key identifier:   1E:58:4B:38:B6:8A:A1:B2:F9:03:E5:66:94:01:5E:97:95:9E:E8:D9
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       3EB5BD76D054FC5C17D515DB35955E105EDF1A8E
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa
Signing time:             Mon 01 Jul 2024 01:03:30 +0000
ROA not before:           Mon 01 Jul 2024 00:58:30 +0000
ROA not after:            Mon 30 Jun 2025 01:03:30 +0000
asID:                     38150
IP address blocks:        180.214.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 06:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b5:bd:76:d0:54:fc:5c:17:d5:15:db:35:95:5e:10:5e:df:1a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Jul  1 00:58:30 2024 GMT
            Not After : Jun 30 01:03:30 2025 GMT
        Subject: CN=1E584B38B68AA1B2F903E56694015E97959EE8D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:11:5d:c7:70:2c:ed:c0:7a:b0:5f:9b:46:
                    0f:9a:50:fe:0b:7a:c3:c3:9a:b1:a0:a1:16:bf:94:
                    15:79:d7:5a:30:fa:c0:a6:55:9f:37:bc:61:23:01:
                    ca:a0:4f:b5:50:e1:af:1c:bb:0d:f5:e5:ec:a1:e9:
                    54:68:45:83:41:ad:11:b4:89:45:19:9e:ea:05:1f:
                    b4:74:75:3e:78:49:34:53:c1:8a:4e:b1:ec:22:ef:
                    7b:e6:9f:df:40:6e:7e:26:71:1c:f6:1c:9f:12:b6:
                    e4:28:db:d7:a8:26:57:85:a1:9a:c9:7b:36:90:57:
                    da:56:d6:ac:4a:60:51:0f:6d:28:3d:ed:1f:be:67:
                    88:ad:bb:15:fa:15:55:0e:37:78:08:4a:44:01:e5:
                    e0:e2:a6:59:c3:94:6c:39:c2:b2:c4:08:59:cf:85:
                    d1:c5:6f:3a:96:86:57:de:67:29:7e:a0:5c:b9:1e:
                    d4:af:7b:08:75:7e:e5:ff:23:06:19:cf:b4:f9:27:
                    d5:b6:e9:48:0c:f1:1a:81:2c:0b:67:d7:30:b1:ef:
                    b6:41:98:4d:9c:6e:c8:03:16:39:77:82:d6:e0:ea:
                    7b:05:29:91:13:b6:b6:60:f8:fb:6e:64:dc:33:e5:
                    d4:29:ff:b8:70:68:e3:a8:7a:92:9e:55:40:42:79:
                    79:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:58:4B:38:B6:8A:A1:B2:F9:03:E5:66:94:01:5E:97:95:9E:E8:D9
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:d8:60:81:61:59:5e:3f:4d:34:69:8a:62:e9:34:22:59:85:
         e4:9e:71:44:d1:22:cb:29:74:03:4d:8c:29:f2:15:78:d5:d1:
         f9:78:8e:df:4b:64:25:17:08:00:3e:0e:d3:a0:d0:b3:53:87:
         5e:f2:85:ba:22:e3:29:4a:0e:6e:89:99:0a:ca:5d:62:81:11:
         66:51:dc:3c:08:e6:6e:af:b7:48:4c:d6:3c:0f:0b:82:76:c0:
         85:b0:1e:03:c2:6a:7e:da:06:9f:17:73:10:65:b9:7c:04:e9:
         f3:5e:78:d5:7e:05:9f:81:b7:54:3f:ba:77:37:2a:81:c6:b6:
         a5:c1:66:ea:be:3a:b9:d9:c6:ad:72:b6:ee:da:5c:10:c8:5c:
         85:be:be:7f:84:4d:d8:bf:fd:ba:48:62:2f:c3:1a:bb:cd:d2:
         51:d6:23:a4:b1:67:94:8c:d0:53:36:77:48:33:00:36:86:dd:
         b0:60:e2:1f:db:c6:bf:16:8d:bb:97:ed:b5:37:0a:a5:29:68:
         72:27:96:83:b7:fe:3c:89:6f:6d:34:db:65:0f:43:36:57:bb:
         e3:1c:16:81:eb:1d:6c:39:79:5e:4f:8e:d6:6b:e4:c2:2b:ed:
         2c:92:fb:0b:3a:2e:81:79:af:a2:ab:48:80:99:f8:fa:27:00:
         f2:fd:9f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:50:41 2024 by rpki-client on console-fra.rpki-client.org