Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa
File:                     3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa (raw, json)
Hash identifier:          EdXnSkfzh3xCgmN729r8wU8JrOnT/wx3xt2LlyRwe/Y=
Subject key identifier:   BC:5C:08:4F:EA:1C:4F:BD:93:B5:C2:7D:81:29:E9:FB:DB:1C:51:E6
Certificate issuer:       /CN=619EF55758C22775EDCEBA183A59715E1452FD8B
Certificate serial:       2617618E6996AD8A47DA610D00AF37BD1B468647
Authority key identifier: 61:9E:F5:57:58:C2:27:75:ED:CE:BA:18:3A:59:71:5E:14:52:FD:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa
Signing time:             Thu 28 Sep 2023 05:00:01 +0000
ROA not before:           Thu 28 Sep 2023 04:55:01 +0000
ROA not after:            Thu 26 Sep 2024 05:00:01 +0000
asID:                     149961
IP address blocks:        103.184.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.crl
                          rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:17:61:8e:69:96:ad:8a:47:da:61:0d:00:af:37:bd:1b:46:86:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=619EF55758C22775EDCEBA183A59715E1452FD8B
        Validity
            Not Before: Sep 28 04:55:01 2023 GMT
            Not After : Sep 26 05:00:01 2024 GMT
        Subject: CN=BC5C084FEA1C4FBD93B5C27D8129E9FBDB1C51E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:46:b5:d3:a1:b8:53:1c:6a:5a:27:72:31:9f:
                    42:08:6c:ab:ac:6c:ce:df:06:97:68:f1:8b:b5:8d:
                    21:95:3e:ba:17:37:72:1d:00:c5:21:24:6f:12:43:
                    db:63:83:93:4a:60:f6:e2:23:1a:6b:48:78:ba:6a:
                    f1:54:25:18:f5:df:42:47:88:1b:ca:ce:d4:f9:ee:
                    34:b3:4e:5b:30:e9:98:37:71:1e:fd:e2:8a:ad:2b:
                    1b:0e:27:5d:b6:43:14:6e:a5:74:1f:ad:36:af:f5:
                    7e:ae:bb:55:78:ae:c7:b2:b9:3f:00:a7:db:e9:db:
                    b5:67:96:61:2b:b6:7e:ef:a2:b2:84:11:d6:7d:c6:
                    f3:61:34:ba:1e:d2:d8:a6:13:19:ab:7f:69:dc:c5:
                    60:4b:eb:d0:96:c1:f3:bb:a0:31:83:91:6d:01:68:
                    4e:d6:71:38:4d:cb:f5:14:b8:c0:1b:52:39:fa:7f:
                    64:6a:3f:6e:6d:a0:23:49:20:f6:f1:90:e6:f0:fc:
                    5b:27:7b:8c:c1:08:14:5e:38:18:9c:9b:16:65:21:
                    4b:b2:3e:a9:2c:c5:51:6d:f4:7d:ba:c5:2d:f2:09:
                    36:5f:bc:40:0a:4a:ff:75:5b:c1:8b:57:e3:70:0c:
                    b6:5d:d2:69:d0:9b:7a:e7:d2:4d:0e:30:c7:2f:c4:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5C:08:4F:EA:1C:4F:BD:93:B5:C2:7D:81:29:E9:FB:DB:1C:51:E6
            X509v3 Authority Key Identifier:
                keyid:61:9E:F5:57:58:C2:27:75:ED:CE:BA:18:3A:59:71:5E:14:52:FD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:1c:4c:30:7b:3c:cd:ef:69:2a:10:0e:86:5c:11:86:f1:7e:
         98:be:76:7c:48:41:bc:6b:0c:e9:d9:ae:cc:87:d6:6b:42:e3:
         d2:75:35:63:51:72:a3:cb:92:f0:9d:5e:c8:f5:db:f7:ac:00:
         22:27:bc:d3:c1:49:26:71:7a:59:a9:17:43:ca:66:3b:8b:15:
         84:17:10:d8:9b:6d:11:aa:db:9e:6f:95:a3:0b:73:2d:5e:22:
         36:b4:41:65:26:78:bf:41:a4:4b:e9:66:77:8f:25:a0:94:d2:
         ac:17:a6:7c:1c:d4:08:7a:22:c4:70:db:b7:fb:15:c7:e2:46:
         9e:71:68:4a:4b:46:ed:d2:06:3d:1f:35:af:11:3a:b4:25:06:
         0f:9b:42:9e:28:94:40:3e:27:55:d8:ca:3d:43:ad:85:75:bb:
         9b:a8:db:fa:ca:82:87:36:8f:a7:0d:6d:de:b5:d8:60:39:17:
         85:c0:5e:8b:ad:1e:13:5f:fd:32:7c:19:75:44:08:c9:eb:23:
         f0:d0:c2:61:f8:ae:0b:e3:10:f7:46:98:62:80:07:92:05:7b:
         fc:f5:04:41:38:fa:0e:c7:bc:53:87:22:1d:27:bf:48:f4:f4:
         2e:08:26:30:9b:42:9a:6e:a1:45:d2:78:a9:8b:da:0e:3a:09:
         e7:25:90:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 18:43:42 2024 by rpki-client on console-ams.rpki-client.org