Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa
File:                     3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (raw, json)
Hash identifier:          0R9+UBK5TWnVEw9k06N3J5DiMjElLSqquHAFTmuP/mY=
Subject key identifier:   4B:63:68:0B:25:DF:8B:A4:0B:B2:03:83:8A:76:4B:50:0D:A3:76:06
Certificate issuer:       /CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C
Certificate serial:       1417B651669DD26B27480EF1281004D97C5E9495
Authority key identifier: DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa
Signing time:             Tue 28 May 2024 09:00:01 +0000
ROA not before:           Tue 28 May 2024 08:55:01 +0000
ROA not after:            Tue 27 May 2025 09:00:01 +0000
asID:                     142374
IP address blocks:        103.171.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl
                          rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 12:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:17:b6:51:66:9d:d2:6b:27:48:0e:f1:28:10:04:d9:7c:5e:94:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C
        Validity
            Not Before: May 28 08:55:01 2024 GMT
            Not After : May 27 09:00:01 2025 GMT
        Subject: CN=4B63680B25DF8BA40BB203838A764B500DA37606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:84:88:eb:71:2a:d9:01:86:a0:17:19:15:cb:
                    aa:3c:3c:6c:8e:7f:62:c6:5a:04:10:58:2e:85:64:
                    06:be:58:2c:d2:4c:56:d0:f7:af:4a:8a:ab:11:25:
                    ec:d3:78:2c:2a:d8:0f:ee:4b:39:b8:e6:f2:e2:2a:
                    37:2d:86:e5:db:21:e1:0c:ec:4b:4f:31:33:6a:11:
                    da:85:40:b2:d7:c1:8c:cc:35:c4:49:1e:c0:f2:ea:
                    9c:94:4f:1f:04:f4:f4:ff:29:2f:88:c3:8e:28:b2:
                    7d:3f:4a:fd:6e:44:8f:7d:03:e8:3f:7c:de:21:1e:
                    59:4a:cd:ac:26:7d:c8:13:bd:58:6d:6e:86:fe:b6:
                    6e:0b:57:a2:a2:27:54:27:6a:75:22:5d:ce:0b:5e:
                    0f:fc:54:1a:70:0b:60:c5:4b:e3:b1:ed:cc:ca:e1:
                    ef:32:db:8b:db:9f:60:56:51:51:51:e2:a0:9d:00:
                    32:09:45:46:2c:10:d6:f8:ac:eb:78:97:a2:74:cd:
                    b0:3e:4f:ca:5b:69:ab:da:27:d4:51:f4:93:1c:c1:
                    03:f0:80:ab:e8:b4:d1:06:2e:9d:3a:df:27:03:af:
                    21:cc:9e:7e:50:c6:bc:da:a8:36:a4:40:3c:0c:ab:
                    d2:9e:dd:8e:c0:53:cf:aa:90:d0:3a:54:e1:cc:e8:
                    bd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:63:68:0B:25:DF:8B:A4:0B:B2:03:83:8A:76:4B:50:0D:A3:76:06
            X509v3 Authority Key Identifier:
                keyid:DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:c4:c3:3a:19:f1:fe:3d:ea:a5:5b:91:c4:a8:37:07:0c:55:
         6c:90:36:18:29:0e:9f:dc:34:50:b6:a1:44:77:0f:78:48:3f:
         1d:39:fc:01:64:d3:aa:79:cf:09:51:b5:fe:19:31:d3:ee:ca:
         b0:09:91:bb:70:ea:76:84:b6:55:b9:9d:41:62:42:d3:fb:73:
         78:80:05:c6:41:aa:eb:03:a0:d0:00:ce:31:ae:4f:95:3b:6c:
         de:13:95:32:00:53:c6:e4:ab:f5:40:c8:09:b5:d8:1f:78:6d:
         46:1d:26:52:91:83:85:fa:a5:f0:64:8e:d8:c7:a8:4d:d5:6f:
         4a:61:f7:da:bb:63:ff:98:a1:04:b3:bc:08:66:eb:31:b5:8f:
         a3:fa:ba:fc:fa:55:47:21:af:05:91:a9:10:86:76:00:13:a4:
         cc:6e:4a:72:5d:63:3a:95:cb:be:1a:35:d1:c7:7d:33:1f:4d:
         ef:2d:89:60:a9:20:f2:6b:dc:be:f3:02:89:c7:ec:a3:3d:08:
         39:4a:44:7c:1f:4d:d9:f7:52:43:58:cc:c3:e4:25:ab:7e:e9:
         e0:bc:08:84:29:72:d8:2b:ea:f9:76:b8:0d:c9:0b:f5:0a:f9:
         16:9b:49:5e:8a:59:39:70:2d:34:20:73:5f:15:98:5e:2a:6a:
         d3:52:b9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:13 2024 by rpki-client on console-ams.rpki-client.org