Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa
File:                     3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (raw, json)
Hash identifier:          zYuee0d5QGl7IPLffDCh2Ou7qnCgELRvRrFi1i12A7Y=
Subject key identifier:   7E:82:30:6C:41:37:1E:E1:A5:4C:97:40:7E:E3:D6:68:5D:E8:B8:56
Certificate issuer:       /CN=B197F427572524588487CFDB163A9E512FAE4DF2
Certificate serial:       4AA05AA08D016A83A3C2827A0A12CEE16EB7CC4A
Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa
Signing time:             Mon 26 Feb 2024 00:00:01 +0000
ROA not before:           Sun 25 Feb 2024 23:55:01 +0000
ROA not after:            Mon 24 Feb 2025 00:00:01 +0000
asID:                     140475
IP address blocks:        103.153.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl
                          rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a0:5a:a0:8d:01:6a:83:a3:c2:82:7a:0a:12:ce:e1:6e:b7:cc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2
        Validity
            Not Before: Feb 25 23:55:01 2024 GMT
            Not After : Feb 24 00:00:01 2025 GMT
        Subject: CN=7E82306C41371EE1A54C97407EE3D6685DE8B856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d7:c1:72:17:27:19:80:49:85:22:0e:65:63:
                    b3:dd:d3:0a:f0:19:9b:e7:1d:00:7f:3b:5c:22:67:
                    51:dc:7f:c0:84:a3:49:4a:54:85:51:72:26:41:45:
                    3c:bb:e5:90:14:43:8c:97:ec:91:84:7c:3e:7f:3a:
                    cd:89:37:51:b6:17:90:43:c8:5c:35:49:38:e9:4f:
                    63:d2:a9:3a:42:ed:10:eb:b6:53:62:74:6e:0f:36:
                    f8:42:81:88:72:80:40:ee:9c:d9:af:f6:3f:6d:8b:
                    9a:0d:3d:86:9c:f9:60:2b:48:e0:b5:e6:13:76:76:
                    2c:39:34:c6:e1:83:74:c8:9a:db:dd:93:f6:8d:09:
                    58:0d:f8:9f:84:15:92:c8:f2:7f:dd:2e:3f:01:4f:
                    d9:4e:8f:ad:94:15:98:5d:a0:29:ea:a1:23:df:49:
                    68:70:af:73:f2:0e:c5:4b:0f:fa:9d:82:3f:aa:dc:
                    99:1d:ac:6f:3c:32:e6:86:40:e5:42:db:16:74:36:
                    f5:f4:2e:6e:78:2c:3e:ab:bb:5b:4d:55:02:20:00:
                    16:d4:f7:84:20:ea:84:91:40:a6:55:fd:b9:bd:e6:
                    ea:ad:c2:1f:6e:b3:1f:b2:39:b8:92:18:7a:6c:bd:
                    49:f4:d7:ef:39:e1:62:5e:5d:e2:e6:be:04:70:f4:
                    44:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:82:30:6C:41:37:1E:E1:A5:4C:97:40:7E:E3:D6:68:5D:E8:B8:56
            X509v3 Authority Key Identifier:
                keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:4a:dc:46:6e:56:f2:0c:df:2f:5a:7b:b6:a9:de:f3:5f:66:
         e6:dd:2f:56:f6:0e:59:dd:f7:3f:5e:64:ee:8e:9e:91:e0:d5:
         7f:1a:a2:0a:fb:17:55:80:bc:1c:79:b4:df:cf:08:a8:1c:80:
         01:f6:f2:27:4f:e7:7a:13:6c:5a:36:2e:df:1f:39:66:40:ae:
         2b:fb:ef:18:9b:bd:fd:ef:1d:be:89:53:49:61:b7:07:45:87:
         2a:a8:c5:dc:f4:49:45:1f:e8:eb:1d:96:b0:20:b5:97:b4:1a:
         74:ca:7f:84:47:cd:f5:92:15:b6:c9:1d:b3:30:3f:42:33:22:
         6c:8c:b8:ea:75:a4:57:e9:8f:45:1b:07:45:e4:54:0a:1d:21:
         b6:e4:da:6a:22:40:ca:97:07:36:7c:05:15:84:87:65:47:b8:
         0d:f3:e9:f5:2f:eb:20:1d:66:28:47:48:3c:2d:12:4d:90:5d:
         86:a5:f5:82:09:0c:34:66:f5:13:39:90:eb:b8:09:00:cc:dc:
         96:82:ab:45:9a:23:de:5c:54:5c:b4:3b:72:f4:4e:30:ce:c3:
         0b:d0:4f:cb:56:11:93:64:43:01:78:da:a8:46:53:0b:62:2d:
         9a:47:ab:ac:f4:01:28:97:f5:5a:37:6d:d0:b1:a6:4a:56:1a:
         6c:b7:7e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:18:50 2024 by rpki-client on console-ams.rpki-client.org