Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa
File:                     3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          M2AqJ26SKPMQCW3KR3RhdcUmaBv2RenAC76SCZeW+a0=
Subject key identifier:   30:03:6F:0D:9F:17:31:DC:DA:F1:42:E6:03:C8:C1:13:4E:73:F4:B8
Certificate issuer:       /CN=DC19ED76CCD72AB435328C48847EF794698443FE
Certificate serial:       68CA08A761653B9EF6142F91C59B7F71F448B16D
Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 17 Jun 2024 07:00:01 +0000
ROA not before:           Mon 17 Jun 2024 06:55:01 +0000
ROA not after:            Mon 16 Jun 2025 07:00:01 +0000
asID:                     58369
IP address blocks:        103.188.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl
                          rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 15:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ca:08:a7:61:65:3b:9e:f6:14:2f:91:c5:9b:7f:71:f4:48:b1:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE
        Validity
            Not Before: Jun 17 06:55:01 2024 GMT
            Not After : Jun 16 07:00:01 2025 GMT
        Subject: CN=30036F0D9F1731DCDAF142E603C8C1134E73F4B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:9d:b1:fd:58:be:13:ea:35:ce:b6:b8:74:
                    08:4b:a0:ce:40:78:41:74:6b:c3:ed:eb:26:36:7e:
                    d4:62:11:c6:96:54:1b:0f:ae:60:db:61:ba:1b:7c:
                    5d:93:c9:14:ab:69:3a:4c:0d:50:a3:0b:44:ee:d3:
                    70:d7:9d:a3:8d:48:88:a2:33:69:43:e3:06:13:9e:
                    9b:71:a5:80:30:e3:f7:57:a5:75:39:2b:54:03:87:
                    0f:2f:57:d0:ed:35:82:63:c0:58:71:dc:f4:13:33:
                    f6:16:08:f5:0b:26:c5:bd:74:fc:c4:e1:6a:93:e2:
                    64:73:53:2e:79:d5:0f:d0:a0:79:fb:2b:9c:03:0b:
                    cf:87:5c:0e:40:b3:e9:b0:a6:f8:e9:6e:83:d0:e6:
                    f9:ff:08:c3:bd:94:98:0e:31:71:a9:c4:d2:60:3f:
                    99:04:39:27:82:b9:7a:ec:2c:9f:8e:60:09:15:2a:
                    a7:82:9d:3e:da:ff:f0:1e:75:57:cb:72:0b:c7:a9:
                    35:56:89:ed:16:39:6a:a9:aa:ed:af:8f:9a:6c:7b:
                    81:0d:bc:11:5e:f7:2d:fc:0e:d8:46:70:2c:83:7c:
                    b7:4d:a8:d0:e8:d7:64:53:5a:93:29:2e:f2:89:42:
                    36:2a:f1:47:a5:20:ed:0b:c4:74:15:3d:6d:f0:ac:
                    e8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:03:6F:0D:9F:17:31:DC:DA:F1:42:E6:03:C8:C1:13:4E:73:F4:B8
            X509v3 Authority Key Identifier:
                keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:db:45:08:33:e4:6c:4f:25:23:a9:8b:14:36:b7:4e:b6:3c:
         1f:d9:c0:a2:b9:d1:14:a6:f2:0a:ca:54:ea:08:c3:08:86:79:
         76:08:1b:00:3c:bf:05:8a:4c:2b:20:db:26:7d:dd:e9:5e:85:
         c5:f5:85:fa:cb:b4:52:64:3b:eb:e3:03:e2:b5:f7:4e:75:65:
         82:e9:01:30:e1:bf:eb:30:91:d8:85:9e:81:5c:14:5b:aa:ed:
         2e:85:78:c2:b7:cb:68:7f:b4:76:fe:19:3b:e2:15:35:b1:d9:
         a7:87:25:24:5b:78:77:96:e3:57:67:49:10:dc:a9:ec:97:00:
         1b:b9:de:a3:92:21:38:ed:38:64:cf:0e:11:32:11:d1:cd:23:
         bc:14:9d:3a:8c:bf:f3:92:3d:96:ff:0b:19:1b:57:17:ac:fd:
         24:0e:1f:b0:25:5d:ef:af:3b:ce:c7:45:96:4a:6b:5d:49:f2:
         e3:6a:f1:6e:fc:3a:78:53:9c:da:f0:2b:fb:70:b1:d5:80:85:
         23:db:55:28:32:af:9e:df:32:94:15:e0:19:a1:33:9a:cb:88:
         ed:c1:ef:a0:f2:72:56:0f:18:a8:e0:dc:4a:3b:dd:d8:7f:11:
         dd:76:a5:6a:60:d1:d3:eb:2b:35:88:82:dd:15:83:53:80:33:
         84:ca:ca:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org