Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa
File:                     3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa (raw, json)
Hash identifier:          +iE/KrKvV41CCSuLPTOsrbsN5zEw317mYQ4TBmw32TE=
Subject key identifier:   E6:06:3E:CE:43:7A:5A:AC:7D:E0:C9:F2:A7:57:5A:CA:33:B5:3D:7C
Certificate issuer:       /CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF
Certificate serial:       72D53A7987017FAC759A13468C9A0B7FE02BD04C
Authority key identifier: 80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa
Signing time:             Mon 08 Jul 2024 04:00:00 +0000
ROA not before:           Mon 08 Jul 2024 03:55:00 +0000
ROA not after:            Mon 07 Jul 2025 04:00:00 +0000
asID:                     149915
IP address blocks:        103.189.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl
                          rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d5:3a:79:87:01:7f:ac:75:9a:13:46:8c:9a:0b:7f:e0:2b:d0:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF
        Validity
            Not Before: Jul  8 03:55:00 2024 GMT
            Not After : Jul  7 04:00:00 2025 GMT
        Subject: CN=E6063ECE437A5AAC7DE0C9F2A7575ACA33B53D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:e5:6b:a8:b5:a9:f9:0c:51:24:41:61:94:
                    de:43:65:48:e0:f3:20:60:24:60:53:fa:d1:a5:aa:
                    9d:f2:a4:be:1c:49:43:9a:bd:00:34:c6:ec:08:8e:
                    e2:5a:62:d1:e6:53:0e:09:8d:af:fa:ec:4b:c3:36:
                    b7:e6:91:db:16:eb:ff:e6:80:bc:2b:92:1b:10:7c:
                    f4:a7:55:07:e3:7f:37:31:e7:de:52:e1:97:2d:a2:
                    4f:77:6c:da:71:9e:9c:1e:1b:ea:92:e0:8d:bc:4a:
                    8e:4b:b0:38:76:a3:b4:92:43:c4:35:45:e9:06:e8:
                    3f:ea:80:c0:d7:9d:12:a5:a7:52:6b:f3:b9:cf:d6:
                    b0:8f:a6:6a:d3:80:66:8f:e4:0d:89:81:97:18:d1:
                    92:35:36:11:7b:1b:e8:49:0c:84:55:15:03:84:ce:
                    04:9c:2f:72:c5:99:0b:a0:bb:56:9e:8e:68:95:c6:
                    62:5f:ec:08:df:8a:43:c8:4e:87:51:0f:84:3c:28:
                    0b:18:d6:e2:b4:94:ca:0b:95:34:29:4f:25:c6:9a:
                    b6:94:81:75:6a:0d:81:89:87:a1:01:e7:10:06:0d:
                    da:8c:77:16:3d:94:ed:02:d4:30:ef:c5:d9:42:0a:
                    57:fe:ce:b4:ca:89:b7:00:4d:24:5b:e3:8a:7d:85:
                    58:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:06:3E:CE:43:7A:5A:AC:7D:E0:C9:F2:A7:57:5A:CA:33:B5:3D:7C
            X509v3 Authority Key Identifier:
                keyid:80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:4b:b1:5e:16:ae:39:1d:da:e1:88:59:d8:5f:32:08:7e:4d:
         b8:c0:ad:2e:19:78:1b:1b:81:9f:f0:8c:c0:61:c4:79:bd:47:
         ef:0b:13:83:9c:bd:06:c3:57:13:34:5d:27:ee:ee:4d:a4:0b:
         fa:17:de:31:3f:8c:d1:ac:3e:fa:86:3f:be:17:1e:cf:cd:0f:
         ed:df:40:53:b8:fd:11:76:73:c4:c6:1b:fa:53:ac:3d:dc:c3:
         c9:f9:17:48:cd:f2:6e:81:2c:3c:5c:a9:a8:03:ca:a2:4c:3e:
         2f:ff:bd:d6:16:7c:55:2e:9c:8e:ac:7e:42:47:de:e1:65:d8:
         5c:89:be:23:86:ee:1a:1c:8a:4b:2d:12:51:22:df:17:e8:10:
         b7:8c:85:c6:88:60:6e:37:e4:2f:54:71:93:a0:9d:c7:10:70:
         c9:54:54:5c:fb:53:6b:c6:68:4f:71:d7:8b:9f:b7:e1:87:70:
         4c:b6:79:9e:f1:1c:c8:43:a7:8d:ea:0d:73:70:78:e5:c7:bd:
         07:fb:e5:8a:49:b5:7d:8a:aa:e3:7b:78:ba:78:2d:38:6a:5d:
         11:a2:35:5f:b3:b9:5a:32:fd:61:7c:eb:8b:29:ff:6d:7e:f6:
         e5:07:bd:ab:25:4f:f0:36:bd:17:0d:1e:15:5b:46:87:a6:e4:
         7d:12:f3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:20 2024 by rpki-client on console-fra.rpki-client.org