Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa
File:                     3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (raw, json)
Hash identifier:          R44rX+ydsbGKHqLgPo+zBEoCnzYtOSmwj18qh4MFo5Q=
Subject key identifier:   72:BC:C7:D5:CF:37:E8:7E:A6:CD:4B:F2:4A:8A:05:23:41:F3:C4:88
Certificate issuer:       /CN=AB2FF74AE26C6B3D3C718834D700985B9160087D
Certificate serial:       1A50DDF12558F31F4E15618E45FB42091151D1E1
Authority key identifier: AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa
Signing time:             Thu 30 May 2024 06:00:00 +0000
ROA not before:           Thu 30 May 2024 05:55:00 +0000
ROA not after:            Thu 29 May 2025 06:00:00 +0000
asID:                     149897
IP address blocks:        103.187.164.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl
                          rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:50:dd:f1:25:58:f3:1f:4e:15:61:8e:45:fb:42:09:11:51:d1:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB2FF74AE26C6B3D3C718834D700985B9160087D
        Validity
            Not Before: May 30 05:55:00 2024 GMT
            Not After : May 29 06:00:00 2025 GMT
        Subject: CN=72BCC7D5CF37E87EA6CD4BF24A8A052341F3C488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:38:29:83:2e:85:18:b5:c3:24:b5:99:b7:a0:
                    79:4f:5a:16:ad:c7:cf:00:6b:3b:b7:23:9b:5d:d7:
                    b1:1b:e8:33:0c:9a:81:f3:bd:31:6e:7e:95:36:e0:
                    bc:90:14:76:1f:7d:a6:1d:1c:a1:8d:63:c6:77:88:
                    89:c2:a2:d7:6c:77:38:7f:da:2b:e2:55:d8:3e:0a:
                    7a:98:f6:1e:aa:78:43:f4:0d:cd:32:b3:85:e1:01:
                    b3:86:aa:91:22:ea:26:92:ca:ba:7f:2b:11:04:87:
                    5e:19:68:31:d7:78:31:b5:96:4d:61:06:1b:a5:18:
                    b9:52:b0:05:ec:23:0f:b6:58:7c:62:f9:fc:96:c6:
                    2e:ca:fe:a9:14:24:01:e5:6b:39:4f:b1:b3:76:d2:
                    a4:3b:85:9c:e2:c0:a6:d4:84:60:be:eb:84:92:d4:
                    ab:1b:cd:b6:bb:66:1c:ab:95:31:d2:c3:d2:9f:98:
                    ea:6f:d7:73:a6:5b:90:ad:c8:04:8f:47:ba:9f:de:
                    81:e8:85:15:e2:ff:6b:ad:15:47:ff:fa:73:32:3a:
                    39:9c:5b:31:fa:c2:58:c6:4f:bf:74:50:72:8e:ff:
                    cf:ef:9a:e6:fc:d0:a4:b6:71:76:ca:ee:a7:b1:52:
                    2e:6d:4c:e0:be:c4:02:5c:f3:98:32:00:0d:e9:c8:
                    67:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BC:C7:D5:CF:37:E8:7E:A6:CD:4B:F2:4A:8A:05:23:41:F3:C4:88
            X509v3 Authority Key Identifier:
                keyid:AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:cf:da:63:e2:8e:4b:d5:05:ae:55:f8:63:93:d8:ab:c1:3d:
         a3:69:47:db:69:33:6f:89:cb:b2:a8:e7:9f:df:31:cb:63:d9:
         a2:d0:26:91:7c:82:db:73:5a:5b:38:e6:40:45:da:6b:c9:c2:
         5c:8f:a1:09:49:73:dc:69:5b:f4:ed:6f:37:72:50:d6:93:25:
         c1:0f:53:a4:49:3b:ba:6f:00:08:bd:5b:8b:ff:99:2b:ff:fa:
         90:23:f9:7c:26:40:0f:f0:56:29:a1:dd:59:3a:b2:87:69:5a:
         85:84:9c:f6:b2:dd:09:4f:4d:a4:b4:1e:60:66:bf:01:3c:28:
         e8:ef:63:c5:7b:ff:27:b0:0f:12:d7:e4:68:5c:e1:f8:b2:47:
         1a:73:e4:99:22:9a:22:18:0f:76:32:4a:b7:30:10:b7:a4:e4:
         86:7b:10:d7:d0:7c:49:12:91:44:f9:17:f1:e1:a0:d9:46:08:
         05:f7:01:da:53:d8:af:74:32:30:3e:3d:06:c2:c3:6e:33:07:
         d9:19:78:0c:6c:22:25:28:52:14:4b:e5:cc:cf:0a:2d:4a:33:
         7f:1c:23:c1:4e:34:b4:a8:d6:8c:e1:cb:c9:62:f0:c3:94:66:
         0a:10:85:b6:f0:29:02:09:3f:3a:04:32:60:f0:07:05:13:9d:
         15:66:f6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org