Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa
File:                     3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (raw, json)
Hash identifier:          ctdsvGCG6tcPWtjnJTzxHS80gkgkCqvD8OZ1ZE9JJmk=
Subject key identifier:   CD:11:0E:B6:6E:FF:51:32:4E:DD:18:89:91:E3:CB:69:FC:90:AE:1A
Certificate issuer:       /CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B
Certificate serial:       14C3F5F1893DB3BBCE34B31B9DECA5FB4AE27FD5
Authority key identifier: A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa
Signing time:             Wed 14 Feb 2024 08:01:13 +0000
ROA not before:           Wed 14 Feb 2024 07:56:13 +0000
ROA not after:            Wed 12 Feb 2025 08:01:13 +0000
asID:                     147097
IP address blocks:        103.174.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl
                          rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c3:f5:f1:89:3d:b3:bb:ce:34:b3:1b:9d:ec:a5:fb:4a:e2:7f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B
        Validity
            Not Before: Feb 14 07:56:13 2024 GMT
            Not After : Feb 12 08:01:13 2025 GMT
        Subject: CN=CD110EB66EFF51324EDD188991E3CB69FC90AE1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:75:48:f3:2c:68:7c:ef:66:d0:b9:d8:91:7a:
                    06:09:0b:e6:9e:b8:17:e7:d8:26:c0:6f:1b:d1:ec:
                    e5:12:c7:73:eb:6d:0f:2e:d8:35:21:ee:83:d8:0b:
                    d4:99:4e:33:86:ce:a6:38:3f:36:26:a2:8d:3e:0c:
                    64:5b:55:7f:35:f7:9b:f5:dd:24:ef:b9:a2:6e:e3:
                    45:e9:10:c3:7e:71:be:be:c0:85:4c:04:5f:c4:2c:
                    42:a0:75:94:37:52:a0:78:c8:ce:d4:33:a9:ea:ba:
                    51:99:39:a5:4f:29:7c:33:f7:55:57:9c:5f:0f:c5:
                    21:19:de:a4:3c:bc:ca:95:ad:4f:af:b9:41:a6:50:
                    2d:9e:22:19:7b:44:ed:5e:34:f6:1e:69:cc:b8:e6:
                    c6:e6:ac:ad:9c:ab:31:97:29:35:42:b1:09:fd:40:
                    ae:c6:dd:96:72:7b:c0:d4:2e:1e:a3:09:e5:9f:e2:
                    1d:be:69:38:e4:42:56:8e:1f:9b:ad:c4:7d:27:9c:
                    04:81:fe:ba:a6:ad:36:53:0e:6c:a2:d6:86:a5:41:
                    95:f7:46:a7:81:98:b3:99:97:55:f5:58:c9:ce:4a:
                    7a:e0:29:16:0c:5f:ca:a2:d4:1c:70:9a:b2:12:09:
                    1f:d1:16:a6:b7:7d:af:d7:1b:9b:c9:0e:f8:4f:9a:
                    13:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:11:0E:B6:6E:FF:51:32:4E:DD:18:89:91:E3:CB:69:FC:90:AE:1A
            X509v3 Authority Key Identifier:
                keyid:A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:97:e2:69:9b:b6:7b:e6:2a:9b:33:ac:2f:c8:6d:ee:66:35:
         0d:da:0c:cc:64:14:63:80:35:12:c4:15:69:7f:30:a7:55:9e:
         cd:bd:77:66:12:eb:b8:7b:86:26:63:ec:09:bf:b7:4e:c1:df:
         31:6a:a5:5a:13:c9:3a:3d:b7:62:0d:30:69:7e:58:eb:b4:99:
         09:86:2b:d3:68:0b:cf:b6:b5:94:42:d2:ea:0b:42:67:88:e3:
         d4:ce:78:35:ce:81:9e:ea:be:14:fb:10:07:6b:7d:d5:69:4c:
         7c:4f:3b:5d:2e:66:9f:a3:3d:68:66:53:45:27:2d:21:f6:1a:
         30:c0:c8:a9:f8:1e:d9:20:90:c3:69:52:fa:9d:91:8f:3d:bb:
         19:fd:b4:71:58:08:ae:a1:d3:63:cd:ef:c6:f9:93:ab:61:a1:
         b8:0e:61:a6:3c:50:9c:30:20:86:10:81:e4:4a:16:45:fa:45:
         54:8c:7f:29:24:47:49:4f:f6:8d:44:53:1c:16:c8:61:aa:cc:
         5b:f0:30:13:b2:59:ca:c1:9a:cf:fe:4a:8a:db:32:a3:c6:01:
         2b:0d:06:bb:58:dd:39:c1:91:19:d7:80:c8:b8:ac:c5:4d:11:
         29:1f:e9:9c:25:e4:e9:af:4f:f0:5b:59:a9:31:6b:f0:aa:d6:
         60:2a:d8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:20:41 2024 by rpki-client on console-fra.rpki-client.org