Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa
File:                     3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          ny1yGnHbBejhv6vr1eZqYtkbGIWNTtnBZ/7ODF69CVs=
Subject key identifier:   B0:A3:74:0D:C7:89:C6:37:89:C9:E2:24:A9:9C:A2:49:EA:50:46:0E
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       5CC90EBD153C002A0B73E4841EA566742E4A8DF3
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa
Signing time:             Mon 01 Jul 2024 01:03:31 +0000
ROA not before:           Mon 01 Jul 2024 00:58:31 +0000
ROA not after:            Mon 30 Jun 2025 01:03:31 +0000
asID:                     38150
IP address blocks:        180.214.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 06:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c9:0e:bd:15:3c:00:2a:0b:73:e4:84:1e:a5:66:74:2e:4a:8d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Jul  1 00:58:31 2024 GMT
            Not After : Jun 30 01:03:31 2025 GMT
        Subject: CN=B0A3740DC789C63789C9E224A99CA249EA50460E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:7b:50:fe:fc:eb:c9:9d:c8:ea:78:a7:ec:
                    27:1e:f7:e6:17:5c:96:9e:48:f5:78:55:2d:ef:d0:
                    ae:d5:e6:db:35:8a:ee:5a:7a:2a:4f:2e:ff:c0:09:
                    30:b3:61:17:1a:23:2c:0d:e0:0f:a9:83:21:a3:e9:
                    72:48:a1:86:2b:6b:71:e1:5c:ac:3f:f2:98:ae:f4:
                    6c:16:77:a4:5b:8b:f7:d1:19:c4:7f:7a:59:cf:6a:
                    5c:33:a2:23:06:a1:05:a0:c5:99:f4:2c:af:fc:a9:
                    2c:63:ad:25:1b:b0:2d:01:25:f8:dd:84:2f:e6:c9:
                    74:fc:0a:c2:a8:de:4b:1f:7b:8d:ab:cb:0b:ad:df:
                    5e:2b:87:e8:25:79:50:66:a7:0a:85:6d:7e:89:1e:
                    9a:5a:3b:26:dc:66:cb:1a:5e:ec:8e:11:9d:47:1b:
                    3f:4c:49:ee:9f:41:c4:90:7d:2c:a3:4c:94:54:79:
                    9b:0e:cb:5b:12:68:23:e4:dd:ee:13:51:7b:45:45:
                    76:94:91:67:62:8e:c9:fc:99:cd:1c:62:02:47:87:
                    25:5c:cb:c9:5a:d0:cf:75:b6:31:94:dd:27:e6:34:
                    96:22:4e:28:30:c4:77:93:1a:c4:ac:2a:96:90:b1:
                    99:70:af:99:f8:40:ad:9a:86:b8:c8:ea:25:57:43:
                    2f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A3:74:0D:C7:89:C6:37:89:C9:E2:24:A9:9C:A2:49:EA:50:46:0E
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:d6:4c:12:a7:46:c0:54:74:fd:46:33:1e:f5:57:62:f8:d3:
         00:78:60:7b:5d:a4:1b:b1:79:08:ee:18:cb:18:13:70:f9:bc:
         59:e0:dd:a6:60:76:ae:5e:8a:4f:e6:8e:2c:38:08:c3:50:6d:
         77:e8:37:2f:1e:e1:ad:57:16:0d:41:b8:11:7d:51:b3:8c:30:
         74:55:5b:70:c9:1c:5a:36:b9:f6:22:13:9f:a1:13:46:82:58:
         5a:c3:8d:fe:e4:69:79:5a:8d:8b:e4:11:bb:1e:80:1a:22:05:
         5b:3c:17:54:7e:a2:63:4e:25:27:2d:07:08:7b:4a:56:37:5a:
         6c:a0:ac:20:33:65:88:41:92:75:ff:ac:cb:85:65:57:d7:94:
         b3:81:10:da:4c:ab:85:d3:fd:27:8c:80:3e:20:55:80:91:11:
         dc:15:78:01:3a:90:2e:55:83:60:9f:ef:82:90:8f:f6:e3:03:
         e9:67:1f:96:1e:e9:66:e3:d3:37:b5:f0:cb:20:66:56:ed:4e:
         2f:77:7d:cf:a5:9a:95:d4:f1:18:70:80:51:67:5b:ee:e2:02:
         9b:88:1b:9a:92:7a:0b:3b:0f:0a:c7:bc:2a:fb:7a:e7:01:91:
         1e:17:5a:74:b7:58:2f:99:ff:8f:08:bf:22:85:39:b5:e6:ca:
         44:09:30:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:50:41 2024 by rpki-client on console-fra.rpki-client.org