Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231342e302f32342d3234203d3e20313437313633.roa
File:                     3130332e3137372e3231342e302f32342d3234203d3e20313437313633.roa (raw, json)
Hash identifier:          6MHE3HV+letEorO0k5/7u2Y6Bdhq9DzHzZTlc5kSXvU=
Subject key identifier:   5D:F0:AB:87:94:A3:7E:69:01:12:1D:41:28:C7:69:4E:97:67:E1:84
Certificate issuer:       /CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
Certificate serial:       5E6E14040F5A558C4A899C555F4FF2AF929AAABA
Authority key identifier: AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231342e302f32342d3234203d3e20313437313633.roa
Signing time:             Wed 13 Nov 2024 09:00:00 +0000
ROA not before:           Wed 13 Nov 2024 08:55:00 +0000
ROA not after:            Wed 12 Nov 2025 09:00:00 +0000
asID:                     147163
IP address blocks:        103.177.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl
                          rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6e:14:04:0f:5a:55:8c:4a:89:9c:55:5f:4f:f2:af:92:9a:aa:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
        Validity
            Not Before: Nov 13 08:55:00 2024 GMT
            Not After : Nov 12 09:00:00 2025 GMT
        Subject: CN=5DF0AB8794A37E6901121D4128C7694E9767E184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2a:b3:db:fa:3e:1d:90:bb:06:28:76:a6:e8:
                    a2:f9:06:f7:9e:f8:98:fe:90:13:e5:55:75:70:dd:
                    12:e6:db:2e:e2:5b:6d:3b:42:7d:32:fd:00:1b:83:
                    70:db:dc:b5:85:e6:ee:a4:2c:fc:28:6f:9e:c0:a7:
                    60:34:ec:b4:77:ce:a9:23:be:d3:34:33:2d:3e:83:
                    5e:6c:0d:34:8a:d3:91:6e:2e:c3:f1:7c:be:1e:d3:
                    90:54:f6:be:7f:5c:1c:0d:76:69:3e:79:62:0e:80:
                    27:27:d7:c0:e4:cc:69:4b:e0:cc:63:1d:82:c5:d1:
                    8c:7d:31:ca:e6:77:a8:ff:75:51:8f:41:8f:e5:2e:
                    a1:39:9d:e7:c3:2b:16:0b:cf:f0:77:71:43:48:75:
                    50:7d:dd:a6:13:34:4f:ba:ef:2c:60:59:42:dc:78:
                    1a:2b:33:8f:a7:12:98:53:31:8e:05:a2:1c:a1:b9:
                    ed:e5:29:3a:c5:84:84:e5:74:68:11:0d:35:c7:f1:
                    d7:55:ec:24:49:92:52:55:ef:04:ce:d7:99:62:21:
                    a5:bc:7e:62:64:01:31:e2:63:20:97:89:9f:e2:48:
                    3d:e9:51:68:2f:f0:a6:46:8f:14:23:e8:9e:b9:2c:
                    ca:90:75:53:ff:9c:01:79:b8:32:a7:ec:2f:b3:c1:
                    8f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F0:AB:87:94:A3:7E:69:01:12:1D:41:28:C7:69:4E:97:67:E1:84
            X509v3 Authority Key Identifier:
                keyid:AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231342e302f32342d3234203d3e20313437313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:9c:e0:68:38:a7:e0:7b:0a:00:a6:0a:f2:79:b0:bf:e4:0a:
         ec:c5:d4:dd:54:d4:f7:aa:f1:df:40:ae:f6:d5:56:3e:b0:1a:
         3b:6d:65:01:ff:0c:05:92:eb:2d:03:d8:ba:85:3f:28:97:ab:
         4c:86:65:b2:59:c4:a6:a4:15:11:11:25:98:ab:3d:d6:0d:89:
         7a:8f:ea:2f:a8:66:3e:63:84:b9:0a:8d:26:85:fc:40:06:d3:
         69:9f:2e:ba:bb:1a:6c:a3:f2:48:5b:aa:64:67:5b:5b:32:3b:
         4e:ce:0f:c0:fa:0b:25:47:d5:82:e5:65:77:2c:f2:dc:9c:74:
         ab:bd:30:89:8a:fe:6a:3b:fc:30:21:79:da:96:46:a7:71:35:
         f3:76:13:5c:10:89:70:d2:61:cf:27:f1:b8:6c:14:ad:63:6f:
         fa:e3:74:a3:48:c6:64:e5:55:da:2f:1b:c4:01:f8:c4:62:bc:
         76:e0:06:9a:c6:96:d1:d0:8f:7e:20:70:be:2b:b7:8a:f7:90:
         c8:6f:a3:77:b3:7a:19:55:71:e7:50:9e:cd:f7:f5:e4:da:59:
         01:4f:7a:84:7a:be:3b:d4:fa:7b:7a:0c:15:8b:54:6e:c9:c0:
         95:3b:91:c7:94:d1:fa:41:39:45:34:79:21:47:53:57:37:a0:
         1e:f0:12:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:08 2024 by rpki-client on console-ams.rpki-client.org