Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa
File:                     3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa (raw, json)
Hash identifier:          BCXvxmyioKQvXTQ7T8iVRvqkwhqhpqQP5I9ID9+agWk=
Subject key identifier:   FD:75:D4:1D:69:96:BE:33:9E:CB:89:DF:44:13:69:0A:8A:38:49:F8
Certificate issuer:       /CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF
Certificate serial:       5299E63967D5EABD4DE982C9BA2306F6CDE50B07
Authority key identifier: E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa
Signing time:             Fri 11 Oct 2024 10:00:00 +0000
ROA not before:           Fri 11 Oct 2024 09:55:00 +0000
ROA not after:            Fri 10 Oct 2025 10:00:00 +0000
asID:                     149395
IP address blocks:        103.181.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl
                          rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:99:e6:39:67:d5:ea:bd:4d:e9:82:c9:ba:23:06:f6:cd:e5:0b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF
        Validity
            Not Before: Oct 11 09:55:00 2024 GMT
            Not After : Oct 10 10:00:00 2025 GMT
        Subject: CN=FD75D41D6996BE339ECB89DF4413690A8A3849F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:05:79:fe:71:28:1f:7f:21:c1:e6:26:8a:
                    05:d4:cd:93:e0:03:e8:9f:50:ef:5f:48:fb:04:74:
                    34:cd:6e:a5:22:3d:e1:bf:62:fe:f9:b8:ec:17:1d:
                    b6:20:26:6c:0b:71:09:75:43:e4:20:2e:11:05:0d:
                    16:77:89:19:13:ed:62:1c:5f:7d:bd:77:cc:a7:39:
                    b2:e3:b9:c4:bd:1c:f3:85:a4:a1:0c:9b:d1:7e:9e:
                    c6:d7:1b:60:4d:51:7d:cb:5a:76:8d:14:4f:84:1f:
                    e7:d0:4c:3e:5d:c2:30:c5:78:2d:6c:e6:0d:5b:a0:
                    62:3b:00:f2:58:bc:e8:91:b0:50:87:eb:01:68:ed:
                    b0:a6:0d:72:3c:22:d0:d1:a4:52:2f:1f:9c:06:12:
                    21:f7:a2:2f:91:bd:34:dd:6c:50:a5:5b:0b:29:35:
                    3c:f6:dd:b1:4e:16:4e:76:ef:7b:5d:54:52:86:ab:
                    2b:43:29:35:ae:94:f9:27:d4:94:ff:e4:b7:d5:a3:
                    80:e2:e0:a5:4a:da:4f:19:93:85:72:fb:2c:41:95:
                    a0:fe:9c:76:9d:98:a6:ad:a5:44:66:04:cf:b1:68:
                    75:90:d2:37:34:6a:ae:63:01:d3:c9:a7:79:45:a2:
                    8b:1e:c8:5c:56:11:11:1b:8b:f0:52:52:c3:a0:3d:
                    2a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:75:D4:1D:69:96:BE:33:9E:CB:89:DF:44:13:69:0A:8A:38:49:F8
            X509v3 Authority Key Identifier:
                keyid:E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:61:41:bd:bc:0e:49:4d:0c:bf:20:9a:45:3f:2b:04:2d:26:
         0b:e1:8d:84:5c:78:62:40:33:b2:dd:7b:17:3a:1e:a8:10:78:
         23:8b:71:62:66:98:c3:86:62:da:09:3a:10:14:66:97:d7:ac:
         19:fb:51:24:08:55:e0:c1:92:3f:56:fe:92:af:29:5d:91:1f:
         a1:b2:fd:f6:59:9b:ce:fb:6a:a2:4c:58:6e:22:7f:ff:06:14:
         91:08:ba:5d:d9:cd:ae:cc:da:08:03:a2:22:9c:e8:d3:a6:31:
         bb:17:4e:0d:92:07:ab:86:1c:e9:2f:ce:09:77:49:f8:5a:08:
         6b:aa:7e:d0:aa:eb:0b:e5:06:8d:8e:8f:c6:c8:07:7c:bf:72:
         16:4b:81:62:3d:91:b7:b4:2b:fc:ad:5a:37:b7:e1:07:23:1e:
         fd:44:9f:16:a5:73:fa:1c:e6:35:8a:a8:0f:25:76:c5:c0:fb:
         b0:87:15:eb:24:f2:ba:78:8b:82:d5:c0:c0:70:90:32:5c:c4:
         bd:0f:54:72:cb:e5:03:0c:18:9d:57:92:85:e7:8c:68:39:ca:
         79:f7:4f:37:e3:25:bf:51:ba:b3:99:f3:c2:e8:eb:85:3a:29:
         b6:5b:79:70:a4:c9:36:f1:27:b3:6e:5d:1d:bb:9d:fb:fa:1c:
         79:7d:cc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:14 2024 by rpki-client on console-ams.rpki-client.org