Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa
File:                     3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (raw, json)
Hash identifier:          maOhda1MNY0QpFWA0UDVPj0pjSzgY2RsEHzTi6cxg1s=
Subject key identifier:   5E:2F:6A:96:93:7C:D6:53:28:7F:55:C4:4A:8F:B2:9F:26:5A:B8:C1
Certificate issuer:       /CN=67749A065BBCF1E57768F4207E1B2FE788604D47
Certificate serial:       389212BC298C0961E157164DCC1C220804F1EBCB
Authority key identifier: 67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa
Signing time:             Thu 30 May 2024 02:00:00 +0000
ROA not before:           Thu 30 May 2024 01:55:00 +0000
ROA not after:            Thu 29 May 2025 02:00:00 +0000
asID:                     150986
IP address blocks:        103.193.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl
                          rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:92:12:bc:29:8c:09:61:e1:57:16:4d:cc:1c:22:08:04:f1:eb:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67749A065BBCF1E57768F4207E1B2FE788604D47
        Validity
            Not Before: May 30 01:55:00 2024 GMT
            Not After : May 29 02:00:00 2025 GMT
        Subject: CN=5E2F6A96937CD653287F55C44A8FB29F265AB8C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ab:7f:f2:14:d3:15:65:6e:7b:5c:88:de:1f:
                    5c:d4:a3:b1:d2:bf:cc:fb:4a:88:2b:ed:a0:17:d5:
                    0d:fe:bc:ab:07:6f:b4:cf:84:9b:75:83:08:e2:f4:
                    2d:13:93:b9:5a:98:fa:98:29:3e:1b:f5:c8:d4:ec:
                    32:a0:ae:16:15:a2:9d:0a:1b:32:e7:b1:77:ae:c3:
                    f3:84:58:cb:fb:f2:2a:64:5c:85:6d:a9:11:dd:d8:
                    25:e6:5b:49:20:2d:4d:35:08:91:3d:42:15:ac:c8:
                    e7:46:c9:97:f3:0e:ac:54:87:d4:c9:da:d7:f4:f9:
                    b0:49:f2:b1:93:3e:be:ae:b2:61:99:e0:e5:ec:2e:
                    a7:b9:33:4e:c0:b5:8d:12:f1:13:c4:f7:9a:c9:fa:
                    60:25:08:9c:90:e5:d5:b0:bb:88:d1:0c:01:92:5a:
                    fc:04:26:88:eb:50:97:51:12:90:11:83:d4:31:b3:
                    b1:7c:1b:ef:ec:86:a7:aa:b7:c2:a0:2e:1f:82:38:
                    bc:c7:49:4f:c9:c4:7d:5e:83:f1:a8:7d:f6:59:ff:
                    24:62:57:93:87:e4:6f:c5:86:1d:fe:ae:d2:8f:93:
                    3d:d0:73:ce:66:2c:17:ec:1f:e5:28:55:8e:0e:72:
                    ab:0e:18:7d:a5:75:a8:e6:0c:07:5a:07:f7:0c:ab:
                    89:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2F:6A:96:93:7C:D6:53:28:7F:55:C4:4A:8F:B2:9F:26:5A:B8:C1
            X509v3 Authority Key Identifier:
                keyid:67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:c1:0c:6b:49:93:d0:a6:84:6e:b2:10:1f:58:d9:ec:fa:cb:
         8c:ba:97:ed:5b:5f:fe:da:d8:ab:36:aa:93:b3:96:16:5e:6c:
         e5:6e:60:18:e3:44:30:72:af:6e:ee:40:d0:62:6e:f0:1a:55:
         65:2b:cf:6d:22:0d:5d:d9:4a:aa:71:41:43:07:a4:cf:99:5f:
         3a:50:6e:1b:a4:66:c4:85:0c:cd:35:30:f5:67:e5:e2:79:bc:
         bf:0c:04:72:10:8d:21:8c:8c:44:49:98:3c:17:d1:59:4e:e9:
         1c:fd:3b:b6:b3:d7:81:23:13:f5:6e:6e:be:c3:77:a2:7a:89:
         00:53:11:73:f1:e8:6a:09:ae:dc:47:ad:3a:b2:7d:f3:5c:6c:
         07:ff:a9:ff:4d:ce:8e:06:fb:2c:67:18:45:fe:e5:8c:9a:35:
         a7:0d:f0:5b:3a:ff:16:51:7a:c6:ae:87:2a:8e:c8:30:e5:2c:
         2a:97:78:e1:89:3e:77:0a:a0:6e:1e:50:fa:4a:fc:77:fe:9a:
         a7:ac:f8:52:b3:a9:d9:55:c5:33:cd:4b:b1:1f:7d:11:c7:af:
         a8:82:0a:fe:40:0d:59:ba:3e:f7:7d:1f:89:41:3a:3a:87:02:
         6e:34:5b:38:09:e1:71:89:71:75:97:99:63:e9:12:9a:5f:17:
         ca:3b:ea:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org