Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa
File:                     3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (raw, json)
Hash identifier:          bdF6E4DcvPpxDd/LtTyxzLeFut4P47o94PgC5m5UXQQ=
Subject key identifier:   B7:F2:30:D4:F3:F4:D8:E2:02:3D:55:AA:D7:36:D6:96:76:42:0B:FE
Certificate issuer:       /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8
Certificate serial:       1E68A3EE341F93A3C3D50570487A8787FAE9A82E
Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa
Signing time:             Tue 13 Feb 2024 06:02:02 +0000
ROA not before:           Tue 13 Feb 2024 05:57:02 +0000
ROA not after:            Tue 11 Feb 2025 06:02:02 +0000
asID:                     24529
IP address blocks:        103.217.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl
                          rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:68:a3:ee:34:1f:93:a3:c3:d5:05:70:48:7a:87:87:fa:e9:a8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8
        Validity
            Not Before: Feb 13 05:57:02 2024 GMT
            Not After : Feb 11 06:02:02 2025 GMT
        Subject: CN=B7F230D4F3F4D8E2023D55AAD736D69676420BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:8c:95:43:25:c5:33:aa:3f:f1:24:af:27:
                    19:4a:9b:60:de:db:29:db:a8:df:1c:34:d8:09:92:
                    41:40:80:82:00:cd:2a:7d:5c:61:23:63:ae:5c:25:
                    78:b1:60:39:88:e6:bd:f4:ad:68:95:34:04:15:53:
                    4f:4c:d4:d9:12:05:57:eb:a5:33:2f:52:95:a6:88:
                    71:97:35:19:fd:b0:1e:82:e5:c8:29:ab:53:f6:84:
                    9d:19:fd:ea:d1:86:dc:df:f6:1e:b5:d8:20:15:71:
                    53:47:80:cd:c2:c5:21:0e:5f:21:30:d5:ae:39:18:
                    69:b4:c2:c1:b0:02:fe:6c:0f:94:35:38:14:8d:01:
                    ad:68:45:80:8b:bf:32:6b:8d:23:12:89:c8:bf:5d:
                    5c:ff:f9:23:ee:fb:7b:98:4d:2f:78:cd:34:01:90:
                    56:26:28:f2:6f:1e:f8:da:7b:ff:40:e9:2f:a2:44:
                    75:f4:a9:b8:48:b0:ec:e3:e2:b0:a8:c4:62:ac:79:
                    91:ce:c2:55:0e:05:bf:39:59:5a:7c:b5:82:81:ad:
                    70:7d:19:7b:d6:99:aa:e0:97:4c:68:77:14:9e:0f:
                    a2:ac:07:4a:e4:c4:db:40:e0:cb:35:dc:d5:87:06:
                    ab:59:8e:ab:fd:b2:bc:bc:2f:63:48:0d:d6:22:5d:
                    d4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F2:30:D4:F3:F4:D8:E2:02:3D:55:AA:D7:36:D6:96:76:42:0B:FE
            X509v3 Authority Key Identifier:
                keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:9d:2c:4e:d4:c3:e9:87:18:87:35:9a:c6:61:57:f4:d7:dd:
         24:3f:63:9f:0a:8e:2b:37:e2:9d:bf:47:7a:59:c0:18:1d:23:
         1c:0a:ca:e3:ae:26:e3:7e:dd:88:31:90:b7:a5:86:3d:d7:d0:
         b6:33:38:0e:28:42:1d:19:5d:f2:66:7b:d6:a4:7e:e6:73:71:
         30:ea:17:17:d8:f8:a8:f7:15:59:cd:74:50:98:ff:74:3b:fd:
         62:99:94:ed:83:30:8c:5c:76:7d:ac:0d:cd:99:2e:44:6a:f8:
         59:e8:f2:27:78:6a:85:32:c9:af:9c:73:60:38:ee:d8:42:dc:
         45:6c:ad:87:bb:86:d9:dd:a9:aa:8f:f3:49:f3:24:e0:9e:b1:
         3b:0a:fa:7e:0b:56:39:e9:b3:68:18:ed:ff:4c:9e:7d:21:1e:
         2f:42:8f:92:9c:54:4c:51:73:11:d4:89:f9:c6:69:57:66:ca:
         2b:f7:3d:a6:2e:48:c7:21:f3:2d:2d:8c:bb:75:37:e2:d4:77:
         2b:d8:e9:9c:08:d6:a5:32:89:06:5c:06:b1:77:0e:28:a4:df:
         37:2b:07:45:f6:4e:23:c2:69:fc:ae:af:51:57:02:00:85:c2:
         1f:82:e5:8a:2d:af:18:e6:14:06:71:a9:b0:e5:ee:ab:d8:df:
         a9:87:bc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org