Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa
File:                     3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa (raw, json)
Hash identifier:          n2629TM2Mi+u3aQKLNFBU1bgTuQovVtVqjfx0Z7/fDQ=
Subject key identifier:   20:B2:EF:43:0F:33:1F:B2:97:39:09:CC:5F:1B:4D:80:7D:6A:2D:F4
Certificate issuer:       /CN=11B369E1CF41EB03E35A2711FF1FE0F687242467
Certificate serial:       41A426F08972115814D713657BE2EB92E81642D8
Authority key identifier: 11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa
Signing time:             Mon 15 Jul 2024 07:12:44 +0000
ROA not before:           Mon 15 Jul 2024 07:07:44 +0000
ROA not after:            Mon 14 Jul 2025 07:12:44 +0000
asID:                     149662
IP address blocks:        103.184.178.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl
                          rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a4:26:f0:89:72:11:58:14:d7:13:65:7b:e2:eb:92:e8:16:42:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11B369E1CF41EB03E35A2711FF1FE0F687242467
        Validity
            Not Before: Jul 15 07:07:44 2024 GMT
            Not After : Jul 14 07:12:44 2025 GMT
        Subject: CN=20B2EF430F331FB2973909CC5F1B4D807D6A2DF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dd:1c:a9:93:87:c7:10:50:bd:a2:54:cf:cf:
                    f6:6b:73:ca:ad:71:9f:8d:d9:4c:dc:90:d2:1e:b0:
                    97:61:39:6b:44:6f:6b:ad:71:8a:0b:b9:cf:84:05:
                    de:8f:9c:b1:ec:d6:e3:d7:e1:5d:eb:85:eb:43:8d:
                    e5:c9:2f:55:c1:10:d4:2a:41:54:61:ea:61:44:3b:
                    47:bf:68:72:a7:79:a8:b9:f5:7b:cc:d9:2b:05:6f:
                    26:0e:0d:78:cb:b7:df:ea:c8:a3:1f:f1:02:70:b8:
                    18:94:ed:c7:bf:57:96:f5:41:0c:18:08:a9:1b:d8:
                    c4:fc:a7:1b:dc:32:78:ed:da:83:80:99:b6:de:c6:
                    63:8b:fb:d0:ba:e6:d3:39:20:6a:9c:6c:09:65:61:
                    37:cc:b5:32:3c:f9:84:21:68:b0:1a:32:c6:60:56:
                    e1:9b:cc:f6:c5:8c:92:e3:14:52:87:f2:0a:74:88:
                    cb:53:f8:3a:14:79:1d:1c:1a:3a:87:82:ce:da:af:
                    db:b0:72:7d:98:8f:54:45:6b:91:8d:e6:bf:5d:a8:
                    9e:ff:df:ad:e1:fb:a2:c2:b0:c1:df:a0:fb:08:48:
                    3f:7e:50:2c:74:0c:67:e9:53:d6:21:5c:86:1a:84:
                    37:02:5d:f5:e2:7c:4a:c4:4c:be:df:a8:a0:23:0c:
                    b6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B2:EF:43:0F:33:1F:B2:97:39:09:CC:5F:1B:4D:80:7D:6A:2D:F4
            X509v3 Authority Key Identifier:
                keyid:11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:fb:f0:0e:a3:da:61:4c:c7:65:9e:fe:05:ef:1b:0e:31:46:
         1c:eb:1d:a3:63:24:f3:6d:24:2f:26:ea:04:ac:f7:13:0c:cb:
         f8:59:80:c6:10:29:f2:ea:4f:0a:12:7f:34:de:1a:5e:e2:0b:
         75:a7:51:e0:b2:96:92:ca:08:77:66:07:e7:d6:86:0e:05:83:
         4b:89:0a:1b:df:4f:8d:50:d6:ef:e7:8e:06:5c:70:17:d3:39:
         af:a3:1b:ae:af:ca:6d:35:8f:a0:b4:a9:28:74:a7:a3:a4:f1:
         be:2b:34:c3:5a:c4:39:74:80:ae:c1:ca:84:37:f9:ae:e4:06:
         55:7f:74:4e:4a:fe:49:3f:f9:0a:c6:9f:db:5d:38:bc:44:a9:
         19:f6:6f:85:65:2b:c8:71:e3:e8:56:d2:83:ca:9d:25:00:e4:
         2d:ac:98:7a:67:a8:2d:2a:32:53:27:10:8f:5d:12:e0:33:b3:
         bc:2b:c3:9a:86:1f:61:73:4e:f3:69:48:b1:aa:88:24:4f:49:
         c7:9a:0d:ec:7b:e8:05:a1:69:e6:66:be:0e:e5:31:d3:1c:29:
         2f:e4:8f:14:46:02:86:ce:13:5f:0f:7b:3e:c5:02:48:4d:97:
         d8:cb:f5:55:6d:f2:d1:bc:6c:eb:b1:61:85:d0:d6:3e:97:58:
         71:81:72:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:24 2024 by rpki-client on console-ams.rpki-client.org