Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa
File:                     3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (raw, json)
Hash identifier:          GIsQXebB2B6VO6CcWUqD38pOQjZv/qL+RwMumhXCXlk=
Subject key identifier:   82:2F:F7:78:E2:0B:79:E9:42:4D:7D:4E:BC:6F:41:F3:CC:38:E0:5F
Certificate issuer:       /CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F
Certificate serial:       27F2C1B7062EF61AFC3EA40EFEA6E32FABEB280F
Authority key identifier: C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa
Signing time:             Fri 27 Oct 2023 17:00:00 +0000
ROA not before:           Fri 27 Oct 2023 16:55:00 +0000
ROA not after:            Fri 25 Oct 2024 17:00:00 +0000
asID:                     64029
IP address blocks:        103.214.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl
                          rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f2:c1:b7:06:2e:f6:1a:fc:3e:a4:0e:fe:a6:e3:2f:ab:eb:28:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F
        Validity
            Not Before: Oct 27 16:55:00 2023 GMT
            Not After : Oct 25 17:00:00 2024 GMT
        Subject: CN=822FF778E20B79E9424D7D4EBC6F41F3CC38E05F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:73:15:52:48:fe:20:b7:53:53:72:50:c3:a4:
                    75:16:51:b2:95:bc:e9:1d:3e:64:f9:32:3e:2d:10:
                    b4:e1:b1:41:13:55:30:b2:a8:96:91:e2:54:7d:6a:
                    7f:22:84:3a:c1:33:be:47:c7:ab:66:f3:c4:36:0d:
                    68:8b:37:be:39:65:da:19:22:03:99:bf:4f:14:fc:
                    97:44:26:d6:5e:df:99:25:82:19:f4:bc:29:6b:e5:
                    00:1b:75:8a:6a:d0:82:c1:33:2a:f3:8c:11:5f:d1:
                    ba:10:b5:5c:5c:9c:b3:5f:71:92:5e:32:00:f4:87:
                    03:c7:7f:cf:58:9a:e7:1e:5f:7a:e3:38:4c:81:24:
                    ad:aa:f0:bc:38:e2:aa:27:8f:1b:f3:76:f5:27:9e:
                    a5:5e:8c:b6:83:d2:c3:d9:bb:22:bd:b5:c8:78:d1:
                    34:aa:64:ef:26:d2:73:07:72:10:c6:1c:4e:06:f5:
                    58:5c:92:2d:94:e1:cb:4d:81:77:e1:2a:42:27:3e:
                    32:fa:90:cb:a9:49:81:f1:37:c4:3d:ed:6e:9e:2b:
                    f1:37:89:18:19:7b:d7:03:b4:8a:2f:cd:a6:72:bf:
                    be:b3:01:43:76:b8:b6:db:77:89:03:25:41:bc:f2:
                    ca:f8:b0:ad:94:1c:ad:e0:3d:8c:10:3e:1a:9a:cc:
                    0c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2F:F7:78:E2:0B:79:E9:42:4D:7D:4E:BC:6F:41:F3:CC:38:E0:5F
            X509v3 Authority Key Identifier:
                keyid:C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:e6:63:1c:6c:b0:98:47:5d:21:9a:4a:fd:98:bd:0a:6c:4c:
         30:b8:7e:d8:fa:65:36:78:35:de:56:90:7e:8a:a6:ca:18:5c:
         b4:3e:bd:db:5d:09:1a:7f:8d:99:8b:16:9e:bf:2c:91:8c:45:
         d2:d0:a4:f4:3b:01:fd:95:7b:5f:82:4b:1d:75:06:f3:f8:51:
         71:11:35:45:94:f0:95:19:fb:33:6f:05:d0:44:c5:d2:1f:2e:
         27:3f:37:d3:b6:fc:38:ae:ad:fd:81:9e:a0:f2:7c:36:59:cc:
         1f:19:4f:34:88:24:e2:83:8f:0e:d6:51:7e:dc:07:00:9f:40:
         b4:95:7c:2b:99:81:ad:b8:5d:25:8e:fa:4e:23:ea:92:fe:f7:
         6f:6e:73:30:77:57:ea:5a:3c:87:b1:65:e0:ed:a2:74:6b:f2:
         d2:4c:0a:b8:22:26:e0:6d:de:b8:2e:b3:6c:03:cf:0d:eb:f0:
         09:5b:da:04:c7:1e:ee:10:52:dc:07:1b:9b:e6:b6:40:e0:53:
         d9:52:44:13:17:a6:e7:d8:69:2f:89:56:36:6a:61:3b:50:99:
         d0:7c:aa:a1:79:4a:e8:6a:ad:e0:d2:79:d1:bd:55:5c:c4:e6:
         50:80:a3:3f:6e:8a:61:eb:a2:9c:df:95:14:05:87:4d:b2:bc:
         39:77:43:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:50:29 2024 by rpki-client on console-ams.rpki-client.org