Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa
File:                     3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          YGt+3ApTgn/LWTxT6WNpkphV9VxIGygYqSnpvA8kmgQ=
Subject key identifier:   0F:5B:BA:DB:2E:11:6B:7D:87:F9:6B:8E:DD:CB:F1:C7:65:DF:1E:FD
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       63CF6C5A7C46A936CECB9168D7C77D28DF1117D2
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa
Signing time:             Mon 01 Jul 2024 01:03:32 +0000
ROA not before:           Mon 01 Jul 2024 00:58:32 +0000
ROA not after:            Mon 30 Jun 2025 01:03:32 +0000
asID:                     38150
IP address blocks:        180.214.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 06:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:cf:6c:5a:7c:46:a9:36:ce:cb:91:68:d7:c7:7d:28:df:11:17:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Jul  1 00:58:32 2024 GMT
            Not After : Jun 30 01:03:32 2025 GMT
        Subject: CN=0F5BBADB2E116B7D87F96B8EDDCBF1C765DF1EFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:40:25:38:7a:51:5c:ce:61:26:e6:ce:a0:
                    78:34:5b:a9:67:16:c8:e9:17:ff:5c:08:1f:fc:2d:
                    37:39:88:b0:ec:65:3a:95:66:55:8c:a4:cd:6b:79:
                    4a:69:ff:60:58:6d:e9:88:b9:84:7e:52:22:cc:f1:
                    b5:94:b5:11:9b:cd:2c:a1:5c:38:7b:b0:02:25:60:
                    c2:88:b7:85:b4:40:53:0b:e4:5a:d3:b1:54:40:b5:
                    73:32:47:fd:26:e5:87:88:15:dc:77:9e:8a:da:bb:
                    fd:99:98:63:d9:6c:4d:78:28:8e:4d:0a:66:4d:ae:
                    2c:f2:c1:ef:59:81:1d:11:97:c9:58:40:5c:dc:83:
                    5e:e2:f0:9b:2b:fb:4f:5e:a8:90:52:56:af:f4:c1:
                    34:d6:a3:52:87:ce:87:53:61:09:e7:27:60:14:c3:
                    ff:35:c6:5e:29:a5:a7:1d:dd:75:07:ca:1b:98:12:
                    2d:ff:4d:7b:80:45:b8:9d:d4:47:ba:a8:1e:32:97:
                    4a:c9:12:40:64:82:89:26:72:70:39:76:45:be:91:
                    4c:73:09:e9:69:7c:4f:8f:77:88:31:d4:51:d4:ac:
                    e6:0a:e1:ee:47:78:73:d6:09:b4:97:c4:b3:d5:3f:
                    06:08:d1:9f:48:6d:81:72:74:f9:e6:90:ea:41:69:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5B:BA:DB:2E:11:6B:7D:87:F9:6B:8E:DD:CB:F1:C7:65:DF:1E:FD
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:4e:35:35:b1:49:b4:25:50:8a:46:48:c1:ae:b8:a2:66:96:
         70:e6:97:ac:65:99:2f:43:99:c1:5f:21:2a:59:b4:be:8a:48:
         12:f1:55:6f:6e:bb:8e:71:66:d0:36:ce:fe:e5:c1:38:2d:3b:
         43:1b:5c:c8:70:44:a7:94:a2:71:c8:dc:7d:7b:37:65:53:59:
         ab:f9:91:b2:f0:e9:ed:4d:c5:a2:6b:ba:1e:59:8e:e2:b5:87:
         d8:32:a4:77:03:77:c4:94:f4:8c:d7:04:8e:e9:51:b2:b0:9b:
         5c:7d:88:0c:82:30:c1:ad:3c:4a:df:27:03:ee:a5:47:59:12:
         c1:0e:e3:18:53:fa:6c:53:73:03:ca:75:33:06:33:c2:39:98:
         0b:04:ec:81:02:86:36:d9:fb:e3:0d:01:66:c2:20:a7:e3:91:
         b8:0c:03:d3:37:78:ca:fc:2e:b3:31:02:0c:b6:20:f8:2f:c9:
         c5:21:63:ae:f7:7c:ce:ae:c6:f6:33:7e:c0:83:77:6c:6d:19:
         0c:76:6a:19:fc:0f:ba:70:7c:2d:9d:6e:c2:1a:e0:33:0d:62:
         74:84:18:50:9e:8b:c7:30:60:cb:19:c1:df:8b:74:93:7f:4e:
         e9:54:91:4a:9b:fc:45:4a:68:59:e3:6b:40:87:64:b1:eb:5f:
         99:9f:70:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:50:41 2024 by rpki-client on console-fra.rpki-client.org