Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31382e302f32342d3234203d3e203438343635.roa
File:                     3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          kfMJp93aHLtwVeCUrmYfQM5gVAHXLSAuJM9cgnbx5Nc=
Subject key identifier:   69:53:9F:8C:EB:CC:7C:83:09:E4:08:97:B7:31:D6:79:DB:B8:4D:06
Certificate issuer:       /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B
Certificate serial:       08EBA94F793947C824E1070771035BC7848CF03E
Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31382e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 15 Jul 2024 02:57:05 +0000
ROA not before:           Mon 15 Jul 2024 02:52:05 +0000
ROA not after:            Mon 14 Jul 2025 02:57:05 +0000
asID:                     48465
IP address blocks:        103.184.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl
                          rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 09:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:eb:a9:4f:79:39:47:c8:24:e1:07:07:71:03:5b:c7:84:8c:f0:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B
        Validity
            Not Before: Jul 15 02:52:05 2024 GMT
            Not After : Jul 14 02:57:05 2025 GMT
        Subject: CN=69539F8CEBCC7C8309E40897B731D679DBB84D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fb:28:53:19:a1:1a:53:38:d8:4a:46:cf:35:
                    d7:29:f8:fe:4c:ad:47:8d:d1:3f:ef:92:be:ff:ea:
                    8f:38:0d:be:26:8a:a7:78:ed:cb:4f:f0:8e:d4:80:
                    b5:1c:fe:46:48:ac:db:67:9e:45:20:7d:42:a2:8d:
                    be:7d:b7:eb:ca:ef:2e:51:1a:e2:ce:be:c5:5c:28:
                    78:b8:17:ef:bb:36:ce:7b:73:d0:c6:31:60:f9:04:
                    39:35:72:3b:07:13:65:50:4e:77:47:33:0c:d8:96:
                    85:47:9f:3d:4e:15:39:15:e6:32:27:e6:a5:a4:18:
                    ba:dd:77:37:0f:c0:c1:74:8b:17:8a:61:14:a8:56:
                    4e:96:1c:1d:e0:73:d8:da:e8:34:eb:2d:9f:2b:7d:
                    7d:73:04:72:9c:85:4f:0e:2c:9a:04:6a:86:ec:b3:
                    7e:58:53:e4:eb:76:bf:2f:1e:c8:43:43:b1:3b:e8:
                    4e:b4:80:ec:96:71:88:62:b7:6b:43:44:84:ef:84:
                    63:7a:a2:0b:59:17:7d:bd:95:a7:ba:a3:b7:63:5b:
                    15:57:e8:a9:7d:94:a0:f1:35:bd:2c:1d:38:94:51:
                    f2:b2:ac:27:ab:67:29:ac:54:8b:89:ba:06:b7:ac:
                    94:20:a5:a5:23:d4:d1:91:b4:4a:a4:37:1c:cf:54:
                    5f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:53:9F:8C:EB:CC:7C:83:09:E4:08:97:B7:31:D6:79:DB:B8:4D:06
            X509v3 Authority Key Identifier:
                keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31382e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:c4:c0:7c:19:2e:31:ae:1a:ed:6d:75:d3:be:3e:00:75:bf:
         c0:29:ba:84:46:72:fd:12:3f:2d:1a:c7:d7:05:63:b6:f7:0f:
         42:c2:37:d0:86:83:46:a3:a5:30:3d:50:30:cb:b8:46:0b:97:
         8a:a4:7d:23:73:21:86:cb:eb:82:2b:92:33:5b:ea:5d:7c:93:
         fa:2d:76:33:3f:26:26:12:1f:ab:7a:e4:22:27:cb:ef:18:c4:
         f4:0b:a9:08:f2:c3:1a:8a:cd:e5:0f:64:6d:a7:38:1d:3e:62:
         3e:7b:18:0b:2e:d5:f1:14:17:d4:f6:89:9d:8f:e0:e0:bc:64:
         7b:78:f0:ca:40:1a:c8:a9:2d:ac:a0:14:f8:ec:32:b8:65:ef:
         9f:ec:4b:65:d4:0c:52:4a:b2:60:c3:78:3f:4f:67:fc:15:de:
         97:50:bf:9e:28:9d:9f:d4:59:12:e3:f2:a4:cc:52:99:c5:de:
         59:00:61:36:58:44:7c:56:37:8a:47:51:40:d7:4a:76:1f:92:
         40:ac:f9:d3:df:6c:40:d6:93:69:be:47:2c:fd:e5:c8:99:88:
         10:e9:97:fd:33:21:05:f3:75:25:d3:f6:85:7f:d2:83:92:af:
         67:c2:ab:dc:0f:e9:b3:a2:4c:88:42:1f:b6:b5:6e:b3:cd:13:
         ad:d4:40:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:12 2024 by rpki-client on console-ams.rpki-client.org