Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa
File:                     3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa (raw, json)
Hash identifier:          KyyoXOa6Sbh5j2KAFMkAJcQVBBYV55sG5EdKg62quv8=
Subject key identifier:   C5:00:0D:2B:88:42:01:77:12:52:3A:5A:D1:DC:63:66:DD:9F:68:76
Certificate issuer:       /CN=619EF55758C22775EDCEBA183A59715E1452FD8B
Certificate serial:       6E4CE81154E583637CEF3F2E387FEDDBBECAA06F
Authority key identifier: 61:9E:F5:57:58:C2:27:75:ED:CE:BA:18:3A:59:71:5E:14:52:FD:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa
Signing time:             Thu 29 Aug 2024 05:00:01 +0000
ROA not before:           Thu 29 Aug 2024 04:55:01 +0000
ROA not after:            Thu 28 Aug 2025 05:00:01 +0000
asID:                     149961
IP address blocks:        103.184.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.crl
                          rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4c:e8:11:54:e5:83:63:7c:ef:3f:2e:38:7f:ed:db:be:ca:a0:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=619EF55758C22775EDCEBA183A59715E1452FD8B
        Validity
            Not Before: Aug 29 04:55:01 2024 GMT
            Not After : Aug 28 05:00:01 2025 GMT
        Subject: CN=C5000D2B8842017712523A5AD1DC6366DD9F6876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6f:be:2f:e6:58:82:b3:5b:47:3f:63:69:4c:
                    a5:fd:d3:92:82:d1:39:69:6e:a2:7d:f5:0b:3d:6c:
                    21:f2:08:65:56:47:33:07:d6:16:ec:e1:d3:7b:ae:
                    ed:94:5a:83:84:a2:96:45:87:bc:1b:5a:62:c2:24:
                    ba:8a:84:56:c4:03:d9:d7:27:3a:9b:e7:98:5a:f2:
                    e1:29:cb:db:9b:61:e4:60:41:67:bc:3d:2f:dd:3a:
                    dd:6e:d7:13:4c:c9:90:b4:f9:b0:55:e8:9c:31:15:
                    4b:ba:47:45:64:6c:30:f1:51:44:fd:f9:a0:3c:92:
                    f2:df:b1:b1:98:ff:c3:00:9b:59:ec:05:88:95:15:
                    f8:00:39:da:06:bf:68:11:91:7d:a4:e8:48:2e:23:
                    5c:f6:da:83:ea:29:55:4d:27:69:a9:68:32:f7:af:
                    c9:58:fa:8f:97:34:2e:f5:78:b1:1a:60:a1:06:ee:
                    db:70:03:8d:ff:ad:1a:3f:b5:66:5a:dc:9c:46:1f:
                    2d:38:eb:3a:77:41:67:bb:ac:9d:f8:6b:0f:c2:03:
                    e8:f3:99:37:d3:9f:81:4e:e5:21:54:9c:cb:37:41:
                    b4:7c:59:d8:c5:e7:3c:3a:40:dc:17:ab:5f:1a:b8:
                    85:53:68:ad:b5:9b:5c:03:be:b6:77:56:ff:05:70:
                    36:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:00:0D:2B:88:42:01:77:12:52:3A:5A:D1:DC:63:66:DD:9F:68:76
            X509v3 Authority Key Identifier:
                keyid:61:9E:F5:57:58:C2:27:75:ED:CE:BA:18:3A:59:71:5E:14:52:FD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:d1:82:42:c1:52:fb:2a:66:e6:e1:07:1e:8e:74:65:f0:
         26:48:83:76:13:dc:30:e3:01:1d:bf:f9:9b:ba:9b:6d:ab:95:
         fc:37:79:71:64:4a:a8:7a:c3:55:8b:11:bf:16:ae:a6:ee:6e:
         76:01:77:7c:a8:8b:a1:3e:7f:0e:9c:b8:f1:a4:70:61:81:6c:
         e8:fa:16:7f:4d:76:bf:4d:8d:3c:3b:ff:aa:e2:51:2f:78:76:
         c0:0c:44:8a:f8:b8:47:88:87:39:26:1f:9f:24:94:25:eb:80:
         c3:9c:55:c4:be:42:eb:14:20:80:bb:3b:b3:58:68:3a:25:17:
         21:1e:d8:96:9e:db:28:bc:8d:aa:91:8b:2d:be:ca:cf:47:11:
         90:a5:90:f5:df:05:6c:b8:ee:34:7b:16:8a:63:10:26:37:f9:
         26:f9:61:ca:d1:17:6c:55:07:e6:42:27:6e:c7:6f:c1:8c:17:
         df:2a:5f:04:1b:73:57:9c:48:ad:47:96:00:5e:5e:e4:c7:76:
         93:83:ca:79:ba:a6:5b:08:9b:e4:bd:c6:f1:46:ec:07:10:1b:
         df:fe:31:7c:02:96:d0:8f:d0:2e:9a:9d:52:07:93:d6:ba:8f:
         7a:e3:be:c9:68:2a:c3:39:93:2a:87:b3:6d:5b:bd:ed:85:a4:
         c0:20:36:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:20 2024 by rpki-client on console-fra.rpki-client.org