Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa
File:                     3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (raw, json)
Hash identifier:          TgbYPBARci4k4FFuDC/BjaqPrp8JHyui9Gbu10x+DcY=
Subject key identifier:   2B:A0:A3:B7:D2:E2:EE:DC:D6:AC:CE:70:8C:C3:76:54:7E:07:F3:39
Certificate issuer:       /CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8
Certificate serial:       24115832D4C7F290AF0A9AF3819D3667CA8AFD57
Authority key identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa
Signing time:             Tue 23 Jul 2024 08:02:45 +0000
ROA not before:           Tue 23 Jul 2024 07:57:45 +0000
ROA not after:            Tue 22 Jul 2025 08:02:45 +0000
asID:                     151012
IP address blocks:        103.227.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl
                          rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:11:58:32:d4:c7:f2:90:af:0a:9a:f3:81:9d:36:67:ca:8a:fd:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8
        Validity
            Not Before: Jul 23 07:57:45 2024 GMT
            Not After : Jul 22 08:02:45 2025 GMT
        Subject: CN=2BA0A3B7D2E2EEDCD6ACCE708CC376547E07F339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8f:44:86:d5:e3:8d:02:95:48:55:93:bf:29:
                    a3:70:b0:e9:40:56:4d:99:8d:4b:dc:f8:0b:6a:2f:
                    01:33:f3:38:3b:83:49:af:57:28:3c:78:53:05:1f:
                    5b:9c:f8:f5:de:d9:ca:30:ff:30:63:0b:39:d1:84:
                    7e:54:a6:90:a7:5d:df:49:7e:52:ef:8b:eb:e1:2c:
                    37:80:8c:c1:8a:f7:f2:4c:3d:72:07:c9:ba:ba:55:
                    f9:4c:52:cc:1d:44:2a:94:57:b3:4d:a3:9d:3e:b6:
                    b4:fd:4d:e7:fa:ab:bd:2d:89:64:d6:e6:3d:68:82:
                    f1:a0:54:50:50:6f:4b:ab:09:4d:46:48:70:87:70:
                    00:a4:1e:76:0f:b9:76:e7:7a:b2:37:48:3d:a9:78:
                    2a:43:01:3b:ff:70:18:6a:58:6c:0d:21:46:2b:88:
                    0c:e9:7a:3f:58:a1:98:33:18:ca:ef:73:0f:e7:a2:
                    80:2e:a7:8a:32:1f:81:4f:c4:8d:6a:4a:05:29:f4:
                    a5:95:e1:35:fa:72:98:a8:eb:97:bb:ff:69:3b:e9:
                    38:dd:c2:b0:f6:88:ab:14:59:89:ff:91:d1:dd:d6:
                    88:20:35:bf:9d:8e:15:46:5b:38:9a:62:00:e8:25:
                    97:01:2e:29:c8:ca:2a:a1:84:67:58:0a:ab:58:95:
                    76:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A0:A3:B7:D2:E2:EE:DC:D6:AC:CE:70:8C:C3:76:54:7E:07:F3:39
            X509v3 Authority Key Identifier:
                keyid:B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:6a:27:6a:23:d7:35:d8:a8:37:29:93:2a:70:c3:ac:c1:c0:
         20:a6:11:da:32:c9:5e:1a:67:3e:9e:f2:03:f5:95:b8:49:94:
         7a:a3:50:3c:e9:62:fe:8b:41:8d:b6:45:6a:42:e0:36:43:3c:
         c8:98:37:e7:b8:be:15:e3:57:6a:7d:80:cf:70:74:af:8e:40:
         f8:54:41:ee:88:16:64:24:76:0a:80:4b:99:f5:c6:88:62:8f:
         58:28:63:33:00:92:f9:14:a1:0d:ab:eb:16:b6:ef:c2:30:6a:
         17:99:c2:e3:db:53:f5:6c:60:8d:09:c5:43:c5:84:53:1d:01:
         8b:62:3a:54:1c:0c:48:1a:61:7e:19:31:0f:e9:57:18:00:58:
         a6:de:82:87:06:dc:83:18:e5:1e:f0:91:53:aa:a2:28:aa:5d:
         cb:01:2a:ee:3b:0d:5f:35:81:49:f6:16:2f:bc:77:65:44:cb:
         b8:00:1a:ea:76:d2:ca:ef:50:f5:d6:68:0a:68:8b:f0:35:da:
         27:ce:2b:1d:78:a9:1f:6a:3c:8d:c9:03:2e:6c:34:03:f5:5c:
         2e:89:ac:cf:fc:52:ed:fb:9d:8b:73:75:20:11:a8:83:3e:9f:
         a6:b9:c3:be:65:65:43:df:97:ee:f5:b2:df:5b:62:01:f8:3d:
         8f:ae:75:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:45:36 2024 by rpki-client on console-ams.rpki-client.org