Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa
File:                     3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (raw, json)
Hash identifier:          70Xx1+rwbPDDxM8pW1m8eXATfb8LG2YTt0e8quf49jg=
Subject key identifier:   C3:28:5F:FF:57:E8:B6:FC:54:0E:A4:B5:02:85:6F:D9:90:6F:E9:D4
Certificate issuer:       /CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51
Certificate serial:       522D8103E230EAFB4BB766B16FB7290721469013
Authority key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa
Signing time:             Fri 06 Oct 2023 15:00:00 +0000
ROA not before:           Fri 06 Oct 2023 14:55:00 +0000
ROA not after:            Fri 04 Oct 2024 15:00:00 +0000
asID:                     149401
IP address blocks:        103.182.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl
                          rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2d:81:03:e2:30:ea:fb:4b:b7:66:b1:6f:b7:29:07:21:46:90:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51
        Validity
            Not Before: Oct  6 14:55:00 2023 GMT
            Not After : Oct  4 15:00:00 2024 GMT
        Subject: CN=C3285FFF57E8B6FC540EA4B502856FD9906FE9D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:a4:56:76:9b:4b:c3:0d:46:ff:e3:03:9f:
                    d5:78:c9:ce:12:96:e5:41:63:c7:30:b6:a9:65:ac:
                    29:9c:db:cd:1e:20:fb:c7:88:6b:38:b9:1e:93:4b:
                    ea:ca:64:82:d0:c9:95:53:91:37:70:6e:4b:b9:3e:
                    f6:20:fe:9c:36:30:e0:87:08:3d:58:3f:ce:83:cc:
                    18:e4:41:e8:82:62:fa:70:35:4c:be:de:66:59:d0:
                    6e:7f:45:54:61:99:40:de:f0:d2:6e:d1:31:ac:b7:
                    76:ed:d1:e1:90:4b:c6:87:2a:66:4e:47:b7:33:d0:
                    4d:90:32:c8:58:c9:bc:d5:f8:66:98:7a:02:ce:f5:
                    00:93:df:ca:d6:bf:1b:9c:42:61:5e:11:b1:c7:26:
                    22:0c:43:44:7c:b0:84:eb:b3:c3:38:b6:68:25:79:
                    80:24:94:87:ff:c6:29:26:e5:4c:3e:6b:40:88:e6:
                    7a:f1:e5:b7:ef:5e:b9:b7:fd:7b:dd:8a:62:69:b6:
                    bf:27:dd:8e:00:47:56:48:13:69:1b:97:d5:28:7b:
                    c8:e7:e7:a7:90:64:d3:5c:1b:00:36:92:51:d2:36:
                    77:62:3f:61:cb:6f:51:91:c8:1a:c2:b0:1e:48:2a:
                    42:10:4d:28:88:c1:8c:ec:90:6c:23:22:10:50:14:
                    ca:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:28:5F:FF:57:E8:B6:FC:54:0E:A4:B5:02:85:6F:D9:90:6F:E9:D4
            X509v3 Authority Key Identifier:
                keyid:14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:8e:4f:25:f6:c3:5b:76:29:cc:ad:b1:84:93:3a:84:32:99:
         13:7b:85:07:a0:35:e4:9e:a1:f3:86:a7:50:d2:a8:53:e7:fe:
         f0:f3:da:32:cd:f5:73:2c:90:1f:d4:a3:31:ec:cb:d2:8d:50:
         31:cf:02:19:ad:ce:f2:d6:3c:87:d2:a9:39:db:70:26:08:18:
         96:40:18:c8:3c:6e:b2:b6:06:a8:d5:42:58:24:3e:0a:d1:34:
         3b:cc:31:7f:14:b4:53:da:17:27:21:10:5c:dd:ce:78:21:d2:
         cb:b9:14:80:cf:25:17:96:df:30:78:e7:e2:ad:ae:d9:b9:7b:
         32:b2:02:c9:80:81:84:c7:60:49:9e:da:9b:d3:70:3f:fc:5d:
         c4:d5:3d:d3:aa:05:49:1e:82:ec:af:7e:11:03:36:29:bd:ab:
         e3:cd:35:5e:6d:f0:a6:56:95:4a:c6:f3:46:59:11:89:c6:96:
         cb:f4:c6:e5:20:46:61:34:3b:d2:f6:6c:66:3a:a0:b5:59:04:
         6f:b4:88:30:30:8d:cb:61:68:60:26:15:90:db:84:1d:57:4e:
         e3:ff:46:c1:ed:b7:1e:5d:27:31:7a:55:9e:59:c8:6c:2b:2d:
         fe:cc:20:17:bf:e0:e4:70:87:15:a2:08:00:13:12:d9:48:84:
         34:bf:f1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:54:55 2024 by rpki-client on console-fra.rpki-client.org