Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa
File:                     3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (raw, json)
Hash identifier:          5BDMmZPmZ5K29gsN0DGQYT7KddrcdWWE/vWjWLjqRGY=
Subject key identifier:   26:17:9D:30:0A:09:05:0F:28:3E:64:2D:9F:30:90:46:E3:E7:FB:D9
Certificate issuer:       /CN=C70A343932991281F91796DB87B011987603BBF4
Certificate serial:       47894101C266874AD0571BFDDC73A2509F339A84
Authority key identifier: C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa
Signing time:             Tue 20 Feb 2024 03:02:11 +0000
ROA not before:           Tue 20 Feb 2024 02:57:11 +0000
ROA not after:            Tue 18 Feb 2025 03:02:11 +0000
asID:                     149663
IP address blocks:        103.184.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl
                          rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 20:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:89:41:01:c2:66:87:4a:d0:57:1b:fd:dc:73:a2:50:9f:33:9a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70A343932991281F91796DB87B011987603BBF4
        Validity
            Not Before: Feb 20 02:57:11 2024 GMT
            Not After : Feb 18 03:02:11 2025 GMT
        Subject: CN=26179D300A09050F283E642D9F309046E3E7FBD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:e6:bb:43:be:be:f6:aa:90:f3:8f:35:90:
                    04:31:e6:af:a5:4a:82:65:df:04:55:fe:7c:0e:33:
                    e9:24:7e:54:0c:61:21:6f:28:00:e0:44:5c:f4:50:
                    aa:b1:c3:13:4c:d9:5f:a0:b6:39:ec:67:0d:72:e3:
                    71:53:a1:df:f0:53:bb:82:61:88:fa:35:3d:f2:9c:
                    d1:ba:a6:f4:76:fb:8d:20:35:0c:91:57:e1:b2:56:
                    f2:0d:6d:0f:72:59:10:b7:97:3a:0c:d1:d2:db:8a:
                    3d:84:31:08:3a:be:78:c0:2b:e7:35:26:31:8f:1e:
                    3c:13:12:25:99:ba:6f:1f:ad:d2:09:81:b3:6f:6e:
                    24:cb:18:69:ec:9d:20:a3:1b:45:58:62:18:45:68:
                    11:ac:84:a2:8d:72:0e:da:08:7f:39:68:df:14:10:
                    9c:ab:83:67:b9:78:a7:c1:4d:74:32:07:aa:5a:b3:
                    ec:5d:e9:14:6a:6c:ae:91:da:dc:59:24:1d:43:38:
                    bd:e6:f4:57:2f:07:03:12:fd:eb:2a:b0:15:a5:30:
                    0e:0a:d3:45:29:f8:35:3d:7b:2b:88:59:8b:3a:9d:
                    cc:90:56:d0:28:1b:eb:cb:da:15:65:d7:3d:f3:51:
                    01:74:64:bd:7d:4e:86:55:35:d0:9c:4d:13:31:b1:
                    03:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:17:9D:30:0A:09:05:0F:28:3E:64:2D:9F:30:90:46:E3:E7:FB:D9
            X509v3 Authority Key Identifier:
                keyid:C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:99:da:11:6f:06:b0:9e:0f:f1:57:a7:e8:2a:56:fe:91:2b:
         f6:cf:37:a0:20:53:8d:e2:1e:a7:79:2b:6e:26:ff:28:9e:83:
         a7:ba:70:d4:0c:db:56:a0:ac:57:12:28:3c:bc:97:5a:d7:4c:
         97:03:16:bc:2b:ba:15:56:52:f3:6f:94:b7:b2:b7:09:58:4b:
         a9:06:07:37:a5:5a:06:0e:0b:44:ff:6a:b5:3f:98:20:b0:b1:
         62:fa:89:17:e2:ba:78:3d:d8:9a:7c:d7:66:93:e5:9e:a1:25:
         29:c6:d8:42:cc:22:3e:39:af:49:7b:cf:39:53:c6:ab:5c:dc:
         3a:2f:b9:40:c4:8d:8c:4d:ad:37:20:93:af:c3:fe:62:cf:08:
         49:d4:a0:a4:80:ce:a2:a0:55:5f:29:e4:35:da:49:39:52:27:
         09:14:01:75:94:a3:2a:1f:92:43:12:1b:63:ad:95:fd:15:00:
         7c:36:f5:8f:59:06:3f:d9:7f:1e:f8:2b:8e:97:65:c6:d9:8d:
         b9:58:71:ca:45:c0:23:60:9f:f4:80:a8:ee:ca:ff:a7:fe:76:
         ba:c0:d1:16:1e:80:e2:a2:d2:34:e0:8c:d4:a5:9c:36:9e:c6:
         fd:ad:20:26:29:e7:16:ef:c1:7f:3b:52:67:6f:b5:b4:32:3c:
         81:b6:c7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 28 15:51:06 2024 by rpki-client on console-ams.rpki-client.org