Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa
File:                     3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa (raw, json)
Hash identifier:          cmDf0cwOgmSLbU+fpqFm+0nug8Bv8vzRFR2zAC3uVh8=
Subject key identifier:   E1:3E:71:E1:C4:82:0E:CF:8D:09:FC:92:9A:4C:D7:C5:D4:71:40:C7
Certificate issuer:       /CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF
Certificate serial:       25E0671A9D166AD591169EEB2A13ED2C2ABD5B24
Authority key identifier: 2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa
Signing time:             Mon 19 Feb 2024 02:00:02 +0000
ROA not before:           Mon 19 Feb 2024 01:55:02 +0000
ROA not after:            Mon 17 Feb 2025 02:00:02 +0000
asID:                     149676
IP address blocks:        103.184.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl
                          rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e0:67:1a:9d:16:6a:d5:91:16:9e:eb:2a:13:ed:2c:2a:bd:5b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF
        Validity
            Not Before: Feb 19 01:55:02 2024 GMT
            Not After : Feb 17 02:00:02 2025 GMT
        Subject: CN=E13E71E1C4820ECF8D09FC929A4CD7C5D47140C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c4:87:4d:a1:a0:32:40:27:02:ef:f0:c8:ed:
                    ad:7a:6c:6d:12:59:4f:b5:1a:99:68:15:d5:22:d0:
                    a2:05:6a:ff:f2:49:51:c7:80:93:6c:9b:22:5b:81:
                    12:dc:50:b5:e7:c6:ae:20:0f:d4:1b:36:c1:3c:67:
                    5a:1d:87:c7:08:e8:94:4b:94:15:a7:83:74:6c:2a:
                    1d:54:bc:9d:b1:c5:5b:8a:be:8e:ed:b0:f0:51:ab:
                    69:ed:9a:86:b7:cd:9e:f4:3a:df:b9:f5:58:88:48:
                    e7:ab:94:57:c5:99:a3:eb:27:e4:5d:b7:9e:45:85:
                    aa:13:5e:38:d4:54:b7:00:5a:5d:e1:51:15:41:86:
                    58:c2:b6:d4:a0:25:78:18:e1:92:ee:f8:c3:c7:c6:
                    1e:4d:0d:c4:08:0e:9c:06:f8:f0:0b:3a:de:56:c3:
                    b2:ae:05:41:44:d4:22:33:48:35:88:d8:46:cd:1b:
                    6e:e2:21:3d:42:a7:ea:9f:82:0a:12:7d:bd:db:0d:
                    ba:6e:4f:0a:be:74:fe:d2:c3:a5:e3:a3:66:90:cc:
                    06:b4:8d:f8:77:60:6e:fd:01:f4:a2:36:e5:6a:95:
                    8b:c6:6f:b4:51:6b:de:e0:7f:5e:70:59:24:89:73:
                    45:90:b1:8b:d5:ba:65:ed:d7:d1:a8:d3:f9:33:76:
                    a8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3E:71:E1:C4:82:0E:CF:8D:09:FC:92:9A:4C:D7:C5:D4:71:40:C7
            X509v3 Authority Key Identifier:
                keyid:2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:82:9c:65:d7:32:e9:37:c9:3c:dc:79:9e:cb:f7:04:78:c7:
         f1:59:91:a3:f6:11:57:cf:b3:ef:68:f7:8d:2e:57:de:fc:a9:
         46:c0:91:07:46:c2:e1:a7:c6:91:c4:27:8f:dd:78:99:3d:f5:
         7a:34:e0:fd:00:da:2f:50:19:b2:40:71:c1:25:80:d7:1b:93:
         b4:50:bb:1e:3d:62:03:56:8c:72:4b:e4:53:99:26:11:09:93:
         19:5b:d1:40:d7:48:90:e5:c3:0d:56:8a:44:3f:11:1a:06:cb:
         87:90:dc:9c:73:8d:90:85:d6:28:34:b7:3f:c4:93:3e:e8:72:
         db:7b:44:86:7e:a3:54:b7:c4:6e:97:81:70:25:cc:8c:10:0f:
         67:51:a2:54:11:5a:cc:5e:58:c1:05:b6:9e:4d:f8:2f:c8:5d:
         2b:07:bb:60:41:83:08:b2:15:0e:16:59:40:43:2d:fd:24:8b:
         2b:3e:63:8a:91:d2:4b:05:56:48:83:9c:ee:80:0b:18:b4:63:
         65:3a:a2:23:7e:6a:99:2c:33:f6:33:bb:a9:8c:cf:75:b0:f9:
         44:bf:44:94:a8:94:ce:10:14:ac:2f:e6:f5:c1:3e:76:5f:f6:
         bb:2b:c6:dd:4c:6e:eb:3f:79:0c:2c:e0:fc:14:79:d2:7d:b8:
         11:c9:85:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org