Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa
File:                     3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (raw, json)
Hash identifier:          spD9MPBY7VT8TmHUqF96dEPChcW8b/tbvhD4ux38DHc=
Subject key identifier:   6A:D7:74:90:21:37:E9:2D:25:E0:71:BD:76:6E:81:B8:05:7C:83:35
Certificate issuer:       /CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B
Certificate serial:       0737E6174503AE75AB401256876C5F27BEBBDC6B
Authority key identifier: A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa
Signing time:             Wed 14 Feb 2024 08:01:13 +0000
ROA not before:           Wed 14 Feb 2024 07:56:13 +0000
ROA not after:            Wed 12 Feb 2025 08:01:13 +0000
asID:                     147097
IP address blocks:        103.174.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl
                          rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:37:e6:17:45:03:ae:75:ab:40:12:56:87:6c:5f:27:be:bb:dc:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B
        Validity
            Not Before: Feb 14 07:56:13 2024 GMT
            Not After : Feb 12 08:01:13 2025 GMT
        Subject: CN=6AD774902137E92D25E071BD766E81B8057C8335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:f6:2c:46:54:b2:fe:21:59:47:a6:60:65:
                    1d:02:e6:a5:5a:fd:87:1c:8f:a2:d4:e0:96:6d:8b:
                    84:8b:81:fa:1a:31:b2:98:2e:32:b5:5d:d3:64:3c:
                    a8:66:48:76:71:b5:7a:62:8e:a0:f7:99:ab:51:57:
                    f5:ae:87:96:57:f5:08:2a:6b:c9:6e:72:80:76:5e:
                    3f:5a:3f:35:9f:4b:c4:d8:6e:70:9c:db:12:67:fb:
                    61:95:4f:90:8d:4c:bd:fd:bb:a3:20:50:3d:cd:d3:
                    8d:67:d4:26:39:39:a9:ce:91:d0:fd:87:62:f0:e6:
                    f8:d3:66:6b:1a:9c:9c:f7:3d:50:09:c2:53:9b:ba:
                    b1:b2:03:fd:a2:fa:6e:2b:94:e8:4b:ae:d1:cb:c1:
                    fb:d9:66:ca:8a:ac:99:d8:55:6b:27:ac:fa:12:a8:
                    a3:84:9c:d7:34:f3:1d:4a:c6:6e:79:93:a8:65:b6:
                    b7:e4:85:43:e7:36:9e:6e:b7:b8:34:7d:a1:4e:ea:
                    cc:8f:1a:12:62:45:4d:5f:f3:2e:b2:82:43:d3:92:
                    23:a2:fc:b8:7b:dd:c4:e8:3f:c8:34:88:8b:dc:9e:
                    1c:58:9a:f9:03:85:04:0a:7b:95:b4:42:a3:ac:af:
                    03:9f:8e:0e:f3:3f:d4:f4:0d:46:32:b5:db:f7:82:
                    7d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D7:74:90:21:37:E9:2D:25:E0:71:BD:76:6E:81:B8:05:7C:83:35
            X509v3 Authority Key Identifier:
                keyid:A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:a0:f6:53:0a:0f:9a:16:f4:dd:0d:54:bf:e4:a9:9b:03:9e:
         a4:2f:65:83:e3:9f:c8:59:df:c8:e0:7c:4e:df:92:a9:a9:aa:
         6e:4c:94:bf:be:c8:bc:a8:b8:83:de:fa:3e:29:da:dd:fa:3b:
         97:62:3e:3c:77:5c:bf:fb:d1:72:31:e0:d7:88:66:4c:a8:d5:
         e2:d6:a9:ce:ef:a2:77:67:12:c8:df:34:33:7b:bb:56:15:b4:
         74:27:bf:72:d5:43:3c:d0:76:a4:7e:fd:f7:78:94:ef:0f:cf:
         2b:39:9e:54:03:c2:35:8a:ac:a5:72:cd:28:32:68:e3:df:e3:
         b5:91:bd:d8:3d:8a:7f:ac:3d:ae:68:b5:1d:e6:d9:ce:86:1e:
         86:d1:41:82:2c:79:c6:f2:6e:8f:8f:1a:4e:61:69:bb:ef:c2:
         66:20:cf:74:16:75:4e:41:15:bc:78:3e:b1:77:fc:48:39:b0:
         04:cd:3f:32:74:de:28:d2:1c:f9:47:80:47:cd:80:77:0c:3a:
         84:3d:26:80:31:f4:82:d8:ce:fa:56:d7:28:11:bf:78:3c:eb:
         ae:38:e4:fc:30:e8:13:ce:75:38:9e:dd:99:26:7a:1d:da:16:
         01:d3:4e:fd:e6:b9:50:8f:0f:18:13:b0:c7:ca:9b:7e:91:2a:
         85:0a:17:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:28 2024 by rpki-client on console-ams.rpki-client.org