Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/3130332e3139322e3137342e302f32342d3234203d3e20313530353439.roa
File:                     3130332e3139322e3137342e302f32342d3234203d3e20313530353439.roa (raw, json)
Hash identifier:          m/t5atQNHRZwt+vf1DpAEDCQ8Du8slFaLcyVHkhd7xA=
Subject key identifier:   E7:BC:86:59:00:A5:DD:64:02:93:7A:1E:36:1B:95:BD:FF:9B:B7:1B
Certificate issuer:       /CN=331490A5F62E7F3FD55E137CB052AC340E403BDF
Certificate serial:       6C7186E5166229DFFC90FB8C4142A0D2040A6BBB
Authority key identifier: 33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/3130332e3139322e3137342e302f32342d3234203d3e20313530353439.roa
Signing time:             Sat 17 Feb 2024 02:00:01 +0000
ROA not before:           Sat 17 Feb 2024 01:55:01 +0000
ROA not after:            Sat 15 Feb 2025 02:00:01 +0000
asID:                     150549
IP address blocks:        103.192.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl
                          rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:71:86:e5:16:62:29:df:fc:90:fb:8c:41:42:a0:d2:04:0a:6b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331490A5F62E7F3FD55E137CB052AC340E403BDF
        Validity
            Not Before: Feb 17 01:55:01 2024 GMT
            Not After : Feb 15 02:00:01 2025 GMT
        Subject: CN=E7BC865900A5DD6402937A1E361B95BDFF9BB71B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4f:b8:83:1d:cb:5c:3e:ac:17:8d:a4:8c:ca:
                    75:42:b3:c1:d0:01:c7:e0:82:d4:e7:05:4e:65:14:
                    1b:d5:64:a4:af:6e:0a:89:75:23:1e:3b:65:a4:1f:
                    e4:c0:0a:25:8c:cb:5e:f7:40:47:1b:84:b5:5e:9e:
                    2f:59:92:13:65:5b:ee:df:48:04:61:5c:7d:a6:2f:
                    d3:c3:b6:15:cd:51:81:69:4a:7e:37:76:8f:93:42:
                    94:1a:86:a1:13:d5:f0:a1:81:c0:23:bc:1b:ee:a2:
                    24:af:d3:9b:10:98:80:15:93:1e:b1:4b:4a:74:4f:
                    cb:54:a3:77:6a:7e:0d:2b:7f:32:6a:78:70:de:88:
                    63:60:05:89:ea:36:cd:be:c3:dd:5b:df:9b:aa:a7:
                    74:ca:50:91:ea:a5:c5:c4:71:d6:ac:b9:09:27:e6:
                    5c:db:93:81:8b:ba:40:0b:36:09:af:68:b6:12:4d:
                    ef:c5:c2:fd:ef:eb:53:d9:1b:09:99:ec:72:7c:23:
                    6a:1e:d2:f6:33:d7:15:17:1e:27:e7:3f:8a:ec:fb:
                    09:89:ce:46:1b:77:42:92:cc:b3:b2:64:f5:f4:89:
                    33:19:b2:76:72:eb:c0:c2:e8:ed:5d:19:47:ff:8a:
                    70:a1:b7:c6:89:18:62:48:c8:3e:59:26:3a:3f:da:
                    84:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BC:86:59:00:A5:DD:64:02:93:7A:1E:36:1B:95:BD:FF:9B:B7:1B
            X509v3 Authority Key Identifier:
                keyid:33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/3130332e3139322e3137342e302f32342d3234203d3e20313530353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:c9:2f:b3:55:c4:3e:a6:cc:a2:d5:10:12:f4:e5:92:13:a2:
         d9:7f:1b:e4:98:49:d1:9c:09:9a:5e:6a:08:75:f0:a9:ac:43:
         40:23:8b:a5:8c:54:bc:92:2c:b0:fd:29:8c:44:e0:b4:72:b0:
         83:6d:72:33:10:6e:79:2e:87:53:75:50:7a:3e:59:20:96:11:
         0b:2a:84:7a:b9:b7:a6:86:11:a9:a1:cf:c1:5a:b4:83:74:16:
         51:a7:26:6f:04:c1:f7:a6:7d:52:82:00:d7:ba:43:08:c8:00:
         bb:3d:2c:e0:82:a3:49:9f:5d:f6:d9:9a:7e:25:32:cf:a0:29:
         8d:73:b7:4d:64:70:2b:84:98:3e:28:d3:1f:6a:77:68:39:46:
         74:08:b2:81:42:91:59:ab:4f:a4:92:c5:8c:81:6b:cd:b1:be:
         50:61:96:ff:7a:0b:d8:b5:69:75:e2:14:38:80:c5:00:5d:61:
         d5:b2:b3:29:16:74:d1:a8:8e:50:99:8b:1c:b6:bb:cb:8a:63:
         52:a0:50:e0:c5:30:90:53:be:37:58:c4:74:37:bc:8b:1d:a6:
         84:bc:ee:92:7d:bd:e0:bf:4b:d3:65:78:09:de:56:45:dc:de:
         af:da:dd:64:dd:10:a0:83:8d:46:b2:be:69:ce:9d:6b:24:1d:
         1f:d1:62:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:00 2024 by rpki-client on console-fra.rpki-client.org