Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa
File:                     3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa (raw, json)
Hash identifier:          hDiPHgG6pnFjAwZiLnb6ef4keBf/i47WPM6YZu2zsYg=
Subject key identifier:   77:34:69:8D:04:05:9E:76:60:2D:19:9E:79:6D:7B:5C:E3:8B:F3:AB
Certificate issuer:       /CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF
Certificate serial:       198AEB7E94600201DBCB3A8D403782E4ADA86089
Authority key identifier: E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa
Signing time:             Fri 11 Oct 2024 11:00:00 +0000
ROA not before:           Fri 11 Oct 2024 10:55:00 +0000
ROA not after:            Fri 10 Oct 2025 11:00:00 +0000
asID:                     149395
IP address blocks:        103.181.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl
                          rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8a:eb:7e:94:60:02:01:db:cb:3a:8d:40:37:82:e4:ad:a8:60:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF
        Validity
            Not Before: Oct 11 10:55:00 2024 GMT
            Not After : Oct 10 11:00:00 2025 GMT
        Subject: CN=7734698D04059E76602D199E796D7B5CE38BF3AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c1:2a:e3:39:4f:7c:71:c4:f6:44:81:a4:2b:
                    93:4c:62:0d:bf:a2:30:43:df:35:1f:d1:f4:11:ac:
                    94:a0:bf:ae:9a:36:94:fc:be:fc:f1:38:f2:fe:87:
                    98:ba:71:55:ae:d5:2e:6c:fd:67:9f:76:1b:e9:04:
                    ec:ff:39:2f:dd:77:02:ab:bb:14:63:b8:33:07:58:
                    7b:aa:e0:f8:9c:8b:81:ea:52:99:71:ba:dd:d0:8b:
                    22:80:19:2a:04:de:2e:2c:c2:29:6f:f9:79:65:07:
                    7d:bf:d0:5a:96:87:da:07:8d:64:22:38:c2:bb:64:
                    ba:09:ff:99:9a:1b:66:6b:1c:01:e1:9b:35:e2:e0:
                    3c:56:4f:b6:6a:fc:84:27:f2:6c:ed:e3:72:0e:f3:
                    eb:78:3d:86:25:a4:8b:07:b2:ff:23:3f:98:3d:10:
                    c2:a4:35:1e:e0:98:fe:75:0f:f4:34:17:7f:1c:28:
                    50:79:66:81:11:71:7a:6b:f2:58:3c:8b:79:50:41:
                    55:8f:ed:3d:55:fe:a6:1c:ff:fa:6b:73:6c:04:b5:
                    0e:8a:9c:fa:50:ef:0a:6a:1b:6e:e3:45:ac:1e:8b:
                    50:a4:07:45:df:bb:cd:04:15:b3:f9:4d:ea:f1:92:
                    68:ec:ba:57:32:cf:2c:df:5e:ed:60:11:57:43:a7:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:34:69:8D:04:05:9E:76:60:2D:19:9E:79:6D:7B:5C:E3:8B:F3:AB
            X509v3 Authority Key Identifier:
                keyid:E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:31:92:04:64:ef:fa:e6:25:55:1e:02:df:59:b4:89:7c:b4:
         77:bc:ef:1e:0a:7e:4a:6b:30:8b:3e:3a:c0:6e:8a:84:f2:41:
         c0:2c:77:8f:05:ba:77:94:2a:0a:20:59:91:d5:83:59:ba:74:
         96:f8:ad:86:41:10:9b:bf:f7:fe:83:2a:cc:d9:6e:d0:ae:56:
         d5:d4:dc:93:73:61:5d:41:0b:f8:6b:99:09:a2:f3:2f:fe:1e:
         05:02:e0:61:5f:62:96:ff:7b:db:8e:75:93:6f:4b:bf:4a:30:
         06:f2:fc:5e:5e:f0:ca:f7:d6:bf:6f:3e:61:98:d6:db:90:78:
         6b:b8:2a:fa:90:b6:be:ea:37:8c:2a:47:60:e4:f6:db:69:4b:
         e9:dc:c9:3c:be:40:44:ef:49:38:5a:da:fa:47:dc:b4:88:57:
         5c:97:d1:58:97:c9:03:b6:92:96:13:7c:17:fb:6d:5b:28:b7:
         19:6d:1f:ef:f9:dc:eb:5b:60:0d:88:d8:08:9d:6b:b7:a3:ca:
         2c:e7:fa:ff:8f:39:2a:12:05:66:1f:c1:be:3e:e8:57:e5:5b:
         4f:b6:02:37:03:1a:89:3a:51:1a:2d:3f:8a:2e:9a:e0:98:b6:
         b7:4c:a0:dd:6c:a0:4d:7d:cf:e8:c3:c2:b2:b7:4f:d3:af:05:
         75:67:b8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:14 2024 by rpki-client on console-ams.rpki-client.org