Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa
File:                     3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (raw, json)
Hash identifier:          0fpof/Xi9yHslCngFyOxsm3BGmq7hOc9WgdHP1lT/Wk=
Subject key identifier:   63:A0:39:C1:FB:1B:85:86:B4:A1:5E:BB:31:BD:84:21:17:5A:86:A8
Certificate issuer:       /CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169
Certificate serial:       501703C432EDFC707B7512F076D32E65A9BBA88F
Authority key identifier: 18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa
Signing time:             Mon 05 Aug 2024 05:01:26 +0000
ROA not before:           Mon 05 Aug 2024 04:56:26 +0000
ROA not after:            Mon 04 Aug 2025 05:01:26 +0000
asID:                     131706
IP address blocks:        103.102.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl
                          rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:17:03:c4:32:ed:fc:70:7b:75:12:f0:76:d3:2e:65:a9:bb:a8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169
        Validity
            Not Before: Aug  5 04:56:26 2024 GMT
            Not After : Aug  4 05:01:26 2025 GMT
        Subject: CN=63A039C1FB1B8586B4A15EBB31BD8421175A86A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8f:a3:11:d1:5b:02:a4:2c:f4:6b:ea:13:65:
                    6d:8a:f4:a0:bd:f8:49:fb:7e:36:3c:8a:c0:00:9d:
                    f1:ce:7f:ee:5d:5b:8c:30:27:31:d4:3a:e2:4b:c4:
                    25:e2:d3:3f:6a:9d:5a:a8:65:69:3b:ff:6f:f4:28:
                    ef:aa:19:25:4f:52:17:35:12:99:9f:53:2f:1b:4c:
                    51:46:a3:9d:89:b6:d2:d8:35:03:a5:f5:51:35:77:
                    1a:d3:4d:74:d6:ec:55:00:d1:9e:ed:31:f6:31:a1:
                    93:a9:6b:6a:d5:69:f4:2f:a4:0f:6a:e8:f9:77:a4:
                    a5:0d:8c:93:08:13:ba:33:53:02:2b:0d:b0:a2:c3:
                    aa:4d:88:95:7d:c2:64:1c:c8:ab:15:ec:38:a0:a8:
                    a3:84:d3:44:82:19:f1:9f:ec:20:72:d5:3b:6a:6f:
                    00:f5:b5:12:84:b7:66:2a:c7:4b:79:53:01:cb:1a:
                    17:ab:0b:d4:ab:d6:25:be:ee:ba:c7:2c:28:ce:fb:
                    34:76:c0:85:26:d9:a7:8d:30:b1:55:64:b1:33:6a:
                    0e:e6:cd:2d:04:75:d6:74:44:59:99:e6:e0:76:c9:
                    4b:3e:c2:98:1c:04:52:98:ea:2a:b4:dc:8f:66:b1:
                    84:af:cb:11:06:20:d1:b1:d7:2e:99:41:dc:d7:bf:
                    df:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A0:39:C1:FB:1B:85:86:B4:A1:5E:BB:31:BD:84:21:17:5A:86:A8
            X509v3 Authority Key Identifier:
                keyid:18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:b3:57:d2:94:f5:ad:a3:c3:48:80:0c:0f:e0:54:cd:9c:e3:
         62:96:37:6c:ec:d3:bd:e0:fd:75:af:a6:04:bf:e4:80:0f:bd:
         b5:25:70:58:dd:ea:b1:a5:5d:3b:f4:92:bc:cd:91:0e:ad:c8:
         14:1c:b0:23:ca:6d:0d:6c:18:28:74:4d:e8:90:8f:45:a4:32:
         dc:5d:73:8b:b1:cd:c3:b9:b6:3c:21:79:c1:e7:dd:a1:1e:38:
         0a:ef:85:a0:40:c5:b8:78:3f:6e:c3:76:48:27:fe:59:e7:b8:
         15:9c:b4:e0:85:51:af:20:65:7b:17:75:41:23:63:d8:00:20:
         3b:f0:26:d7:e8:ac:74:55:27:7d:61:c7:15:fc:6d:9e:66:70:
         c8:c1:72:18:25:3a:23:a1:87:e0:66:cf:b7:46:1c:25:7c:e4:
         0c:40:d7:49:c7:f4:b6:50:a0:bd:65:22:f7:e6:4b:68:e5:47:
         fb:06:fd:66:7a:3a:65:53:4c:d4:da:43:af:26:6a:89:27:b1:
         50:77:1f:cf:6d:a9:05:74:20:40:ac:d6:34:87:13:5f:7f:6a:
         c7:df:85:6e:7b:96:c8:5a:34:99:ce:99:29:ab:94:ce:c4:70:
         90:d3:a4:a3:44:eb:c3:fd:ec:72:11:bc:8d:48:54:6e:6a:87:
         9d:37:b4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org