Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa
File:                     3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (raw, json)
Hash identifier:          vQNZKuXdJqiWRC9W5c9NVU2jEIMrPmnWp8pvVSMANm0=
Subject key identifier:   B5:04:08:4D:53:1B:9A:44:77:A7:31:DE:2C:DE:9B:64:9B:FF:9B:3E
Certificate issuer:       /CN=AB2FF74AE26C6B3D3C718834D700985B9160087D
Certificate serial:       315D337ECA96E2D3C82EE30D6630B808C7D73487
Authority key identifier: AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa
Signing time:             Thu 30 May 2024 06:00:00 +0000
ROA not before:           Thu 30 May 2024 05:55:00 +0000
ROA not after:            Thu 29 May 2025 06:00:00 +0000
asID:                     149897
IP address blocks:        103.187.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl
                          rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5d:33:7e:ca:96:e2:d3:c8:2e:e3:0d:66:30:b8:08:c7:d7:34:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB2FF74AE26C6B3D3C718834D700985B9160087D
        Validity
            Not Before: May 30 05:55:00 2024 GMT
            Not After : May 29 06:00:00 2025 GMT
        Subject: CN=B504084D531B9A4477A731DE2CDE9B649BFF9B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:67:ec:c3:51:9e:e6:f7:2d:76:5f:42:cc:1a:
                    0a:c5:74:9d:14:08:c2:6b:71:46:af:b0:45:81:ff:
                    e5:54:23:65:4e:da:2b:68:8c:76:72:5a:58:9a:bd:
                    a0:b0:5c:6f:7a:a5:d9:f9:bd:21:3a:cb:02:da:04:
                    f5:ae:46:ab:c9:ad:30:50:53:6d:36:8a:ea:02:1b:
                    89:84:13:e8:7f:25:7c:18:ca:77:bb:66:e9:3b:26:
                    12:64:bb:52:4b:45:88:55:c4:81:15:38:9c:5c:8b:
                    b7:dc:d8:d2:86:ef:9c:f7:e9:7e:18:1e:bb:0c:7c:
                    11:5c:f1:18:ac:9b:80:f1:7e:c4:63:5a:49:40:36:
                    7e:e0:b7:63:cd:5c:d6:fc:00:6f:50:e8:39:fc:14:
                    26:19:b2:34:87:01:8c:d2:b4:1c:4d:6f:d3:64:10:
                    46:04:e3:e1:83:07:d9:55:d4:7e:8a:36:11:5b:92:
                    ca:3b:23:3e:4c:56:c0:f2:7b:bf:21:cc:01:a1:87:
                    ee:39:0e:40:e3:f7:36:b1:a2:67:76:65:41:67:a1:
                    83:b3:60:11:db:27:95:cd:46:5f:12:5e:ce:be:e0:
                    9d:23:db:c5:1b:90:cc:bd:2c:38:8e:96:0f:38:83:
                    e1:a4:c2:05:66:85:ac:b4:09:2c:1b:38:08:ec:61:
                    2a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:04:08:4D:53:1B:9A:44:77:A7:31:DE:2C:DE:9B:64:9B:FF:9B:3E
            X509v3 Authority Key Identifier:
                keyid:AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:2d:d8:c0:bb:e6:04:60:2b:ff:a9:fa:f4:67:e0:ab:4a:12:
         f0:e7:0f:19:9d:8d:08:9d:db:a4:90:ba:37:b2:95:fc:0a:82:
         ea:4c:04:59:7b:0f:cb:bf:12:0f:ee:e7:24:59:28:97:a1:1a:
         d7:32:df:13:7b:82:32:a9:2f:72:00:ac:00:c2:6c:40:2e:a5:
         33:55:16:1f:45:f5:24:87:6b:5c:ad:e2:0f:fa:f5:74:ed:bc:
         a8:1d:ed:46:eb:e1:be:db:b9:8e:74:3e:74:55:db:88:a8:c6:
         2d:7e:e9:3b:05:9b:55:d0:03:c0:eb:78:ba:db:24:45:97:e8:
         39:6c:b7:45:9a:3a:39:04:d4:f3:cc:1c:f7:34:7d:be:c3:b9:
         55:20:cd:ae:af:8f:13:e6:d6:4e:a8:25:70:44:01:48:ee:a3:
         4a:48:df:af:61:3d:88:b7:ba:43:71:a3:18:ee:3e:e8:20:e5:
         3a:9d:bf:32:b0:7b:ee:50:fe:34:85:a1:f0:83:bc:e6:e4:15:
         e6:82:cd:c3:ee:96:90:20:af:5b:94:db:d0:8e:51:88:53:a9:
         e3:9e:0d:75:0c:6e:28:9f:e8:dd:03:90:a3:4a:c8:4b:50:f2:
         0f:7b:28:8d:4e:66:43:01:8d:f9:60:f4:c5:cf:81:55:02:b1:
         e4:25:fe:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org