Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa
File:                     3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (raw, json)
Hash identifier:          wVRb/hhWbnMDFPxCNLvJynoFELXMVdYHUPAAmqv5U3g=
Subject key identifier:   76:4A:94:E5:92:5F:37:67:09:C6:3A:49:DE:43:55:EA:9C:49:54:E0
Certificate issuer:       /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A
Certificate serial:       65EA87D9491E824F15EFDFCF3B15F0936C70A60A
Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa
Signing time:             Wed 18 Sep 2024 05:00:00 +0000
ROA not before:           Wed 18 Sep 2024 04:55:00 +0000
ROA not after:            Wed 17 Sep 2025 05:00:00 +0000
asID:                     149705
IP address blocks:        103.184.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl
                          rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ea:87:d9:49:1e:82:4f:15:ef:df:cf:3b:15:f0:93:6c:70:a6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A
        Validity
            Not Before: Sep 18 04:55:00 2024 GMT
            Not After : Sep 17 05:00:00 2025 GMT
        Subject: CN=764A94E5925F376709C63A49DE4355EA9C4954E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:97:cd:81:a4:fa:0c:87:0d:86:95:97:d4:19:
                    73:38:a8:4f:2f:83:25:7e:21:0e:7c:41:8e:ac:1e:
                    34:10:c6:dc:f2:8c:6d:b7:b2:13:7c:89:25:7e:f4:
                    8d:39:67:ef:61:3d:10:71:af:b6:0d:f2:80:12:b5:
                    b8:23:bd:6b:5a:9d:21:5a:0f:b4:96:db:07:2f:5e:
                    49:6e:98:aa:df:50:be:07:bc:5a:aa:9b:5e:05:2c:
                    c0:fb:33:ad:89:b3:50:e9:9d:dd:27:70:df:11:c2:
                    4e:af:c9:36:63:9b:30:c8:25:a5:50:7f:74:ee:7a:
                    cf:ae:d1:48:dd:cf:43:28:e7:5f:3d:27:a1:8f:4b:
                    0d:40:6a:14:a2:17:6d:1a:a6:d3:aa:38:06:c6:86:
                    de:4e:0d:07:fc:de:f4:c6:b5:87:d1:03:2a:eb:a4:
                    39:7d:30:4f:31:b5:54:05:35:43:a9:69:0d:dc:6e:
                    eb:5e:7d:71:75:28:4a:01:32:9c:12:f5:50:ac:3b:
                    dd:a3:7d:cd:63:e4:d6:79:c0:08:73:70:92:d7:49:
                    da:70:58:1b:db:45:bb:7a:bd:aa:bd:b7:06:14:45:
                    1b:72:a5:ed:74:22:7d:c4:4d:28:83:4f:9f:8d:7e:
                    8a:07:cc:fb:92:03:fd:78:af:40:41:04:f1:ac:e4:
                    0d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4A:94:E5:92:5F:37:67:09:C6:3A:49:DE:43:55:EA:9C:49:54:E0
            X509v3 Authority Key Identifier:
                keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:8c:4e:03:5b:39:64:28:23:a5:03:c6:69:48:a1:f0:22:21:
         1a:e3:ee:81:ec:04:24:08:24:9f:f6:e0:33:96:4f:17:59:9a:
         bb:eb:e5:b2:0a:3d:52:03:d8:fa:1f:fa:92:6e:a0:dc:9a:dc:
         0f:f0:ce:82:0d:2e:67:43:15:39:3d:8a:ca:1c:c2:d8:ed:61:
         8a:ee:18:0d:25:3b:57:6a:b3:85:98:d1:2c:07:70:7a:75:52:
         28:b5:d8:48:ca:16:d8:9e:ac:bb:95:f1:5a:bc:8c:e0:8c:56:
         e6:65:eb:9f:51:b7:fc:2e:c6:0e:e7:df:fb:68:ae:98:9d:65:
         45:09:28:e0:06:c4:4d:20:e1:d4:cd:62:0e:9d:f0:4b:f8:49:
         64:fa:d9:87:c4:a0:dc:73:7b:94:80:e2:b8:29:92:b0:4e:64:
         dc:23:ae:50:e6:4e:11:d2:8a:e6:f1:fb:62:d6:dd:06:c5:bd:
         73:b4:35:1c:09:6a:ae:f6:70:9e:80:f5:42:24:44:ca:56:6b:
         3d:53:8f:bb:92:9a:98:0f:13:2c:8a:15:b4:cd:06:bc:27:68:
         6d:08:1b:c1:a8:a3:96:b2:60:cd:d4:e1:2b:c4:0c:39:19:d5:
         57:40:a7:8a:91:fa:32:9a:47:db:2e:50:b2:c5:da:27:b8:cc:
         c6:9e:96:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:26 2024 by rpki-client on console-fra.rpki-client.org