Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa
File:                     3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (raw, json)
Hash identifier:          gSF5iRVsd1tsl+Yoo9EVRaRpliqh6+X1yJJiKLsVes4=
Subject key identifier:   AB:FE:FE:C3:58:D7:A5:7F:23:03:77:CD:6F:91:C6:49:BC:44:B6:86
Certificate issuer:       /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA
Certificate serial:       79CCC0B70FB191402EB3C3FFD6806A142662DB3D
Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa
Signing time:             Sat 27 Jan 2024 10:29:48 +0000
ROA not before:           Sat 27 Jan 2024 10:24:48 +0000
ROA not after:            Sat 25 Jan 2025 10:29:48 +0000
asID:                     152352
IP address blocks:        103.184.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl
                          rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:cc:c0:b7:0f:b1:91:40:2e:b3:c3:ff:d6:80:6a:14:26:62:db:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA
        Validity
            Not Before: Jan 27 10:24:48 2024 GMT
            Not After : Jan 25 10:29:48 2025 GMT
        Subject: CN=ABFEFEC358D7A57F230377CD6F91C649BC44B686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:87:5f:21:0d:fe:07:cf:e9:7e:c1:6e:89:9f:
                    d2:95:da:31:0d:4b:e5:ac:1c:09:18:a8:ef:f7:5c:
                    3e:f4:55:05:5e:da:00:97:b8:3a:5d:8d:cd:69:4d:
                    90:4d:35:8d:83:dd:8b:1a:4b:a4:ce:00:94:7c:0f:
                    02:cb:6d:d2:b6:a9:8a:63:c2:00:a4:99:d1:53:7e:
                    61:18:aa:aa:88:3c:00:9b:b8:d4:7f:68:40:86:d5:
                    cf:2c:66:79:2c:eb:f4:3c:af:1b:b0:78:e6:1e:9e:
                    98:d9:9b:ab:66:14:e2:a3:9d:79:34:a9:c5:17:df:
                    c3:30:02:89:3c:a3:12:ac:34:f1:02:09:b2:ae:01:
                    06:f4:00:7d:88:ff:74:0d:13:63:7c:f6:ee:6a:73:
                    57:4e:67:aa:0e:65:f0:b9:20:0f:44:c8:0c:b1:d0:
                    f8:d9:8a:46:d1:e1:c9:7d:fd:bf:d7:6f:73:2b:4d:
                    ae:0e:78:e7:45:c8:c1:71:cb:b4:b8:d6:7b:6a:aa:
                    94:0a:ad:ec:fe:76:0b:4f:37:d6:ed:d1:88:8a:93:
                    b1:97:38:47:11:cd:87:53:96:79:b4:98:92:3e:37:
                    d4:e2:a2:fc:f3:8a:2b:b6:30:b0:b3:fd:8e:64:ec:
                    a6:9e:04:0b:84:c7:f2:6f:43:7e:9b:51:b4:9a:a8:
                    21:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FE:FE:C3:58:D7:A5:7F:23:03:77:CD:6F:91:C6:49:BC:44:B6:86
            X509v3 Authority Key Identifier:
                keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:8c:35:8d:73:c3:03:92:40:57:db:0f:a7:52:0b:e0:01:db:
         74:1c:ad:c6:e7:40:04:70:68:64:ed:7d:f7:04:62:9a:8f:20:
         ed:7c:6c:d4:3a:1c:4c:90:db:ac:b0:0b:b8:eb:ff:c5:d0:b8:
         b4:96:f9:01:25:64:e0:c9:b7:73:13:a7:51:c1:c1:16:f2:7c:
         1c:a8:b1:7e:4d:8f:56:44:69:69:a1:59:da:c1:a8:12:fa:34:
         22:b3:2a:50:80:53:b1:f9:70:8d:f6:46:1d:e9:f4:88:2d:55:
         68:cf:fe:fa:25:59:9c:2a:48:9d:52:ae:3c:37:b3:1c:71:e8:
         5f:36:6a:b5:8c:ac:7c:c4:fa:f0:65:47:1e:f3:84:95:5a:7e:
         49:c1:7e:38:fe:7a:e3:cb:90:fa:ff:33:f4:8f:bd:dc:9b:8c:
         5c:bd:b7:fe:91:01:09:82:1a:33:25:53:26:c7:cf:a3:44:b4:
         30:82:55:84:66:42:ca:f6:33:22:59:f7:97:cc:b7:d1:f8:9f:
         fa:a2:37:af:51:ea:25:24:f7:e5:f6:f4:75:3b:b9:ce:c1:97:
         c8:a8:2b:9a:41:bf:1d:81:70:3a:89:9c:64:80:2c:88:bd:17:
         76:e6:38:10:18:21:cb:89:e2:7c:5a:61:46:e0:ec:bf:16:33:
         7e:6f:21:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org