Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa
File:                     3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa (raw, json)
Hash identifier:          4mwumstVDdMM7HtcMsbScADdaHlO8j1RqgRFwXqE3hw=
Subject key identifier:   67:84:89:31:B1:32:0C:57:86:7F:A0:12:64:70:7D:67:0E:76:B8:48
Certificate issuer:       /CN=EB6A398D686553919657E094022E843191F4573E
Certificate serial:       7723684F8C919E2EF85BE19E904D96F215A9BB59
Authority key identifier: EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa
Signing time:             Sun 18 Feb 2024 04:00:00 +0000
ROA not before:           Sun 18 Feb 2024 03:55:00 +0000
ROA not after:            Sun 16 Feb 2025 04:00:00 +0000
asID:                     149400
IP address blocks:        103.181.248.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl
                          rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:23:68:4f:8c:91:9e:2e:f8:5b:e1:9e:90:4d:96:f2:15:a9:bb:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB6A398D686553919657E094022E843191F4573E
        Validity
            Not Before: Feb 18 03:55:00 2024 GMT
            Not After : Feb 16 04:00:00 2025 GMT
        Subject: CN=67848931B1320C57867FA01264707D670E76B848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:70:a2:aa:6f:88:11:da:65:bb:87:27:22:b3:
                    12:85:9e:7d:4d:2e:60:6a:f6:52:01:3a:a7:c9:5c:
                    39:71:58:c1:62:08:7d:3a:67:e1:64:51:6b:99:c4:
                    93:16:f6:a8:3e:60:03:b0:35:be:36:a2:f4:ba:3f:
                    f8:5f:fc:28:28:3a:9a:e7:95:68:dc:64:b9:50:a4:
                    4e:cb:11:4a:a1:c4:a5:25:a5:81:5c:7d:b3:e2:6e:
                    19:14:38:81:10:77:1f:28:5d:e9:44:23:0e:a0:f5:
                    77:e4:fc:23:ba:d9:4e:dd:ae:0d:fa:96:ea:61:f6:
                    a9:f7:32:ca:96:7a:22:8b:2a:e3:cd:74:da:b6:2f:
                    1f:ef:c2:ea:0b:68:eb:ee:c3:d8:4a:5f:2b:65:22:
                    6b:cc:7b:d7:c8:68:96:b7:06:d8:82:b4:44:c4:34:
                    45:bc:ea:45:90:6c:83:e0:c3:fa:b7:e6:83:4f:2f:
                    3a:55:3e:d6:6f:b1:3e:33:36:57:98:32:78:66:84:
                    f9:4b:0c:2f:42:c5:80:f4:81:c7:02:cb:4f:5d:2d:
                    b3:b5:c3:51:b3:fe:ae:b2:5a:22:70:9e:a7:9b:8d:
                    52:05:a4:60:57:b8:22:d6:e1:8d:d3:38:3f:cb:2f:
                    e5:e9:a8:e1:c6:75:e2:2e:f5:53:9c:2c:92:3f:49:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:84:89:31:B1:32:0C:57:86:7F:A0:12:64:70:7D:67:0E:76:B8:48
            X509v3 Authority Key Identifier:
                keyid:EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:07:1c:54:bc:bb:5e:e5:70:4f:18:2a:a9:d7:be:5e:51:1e:
         e8:fc:25:70:83:17:07:7c:a7:cc:c8:c0:d1:a2:e0:a9:0f:93:
         2f:cd:88:a6:81:a8:d4:d2:b4:dc:8e:ed:61:10:08:05:3a:31:
         19:33:0c:94:e1:79:be:47:2b:8d:62:8b:15:8a:8e:c8:68:4e:
         4b:57:6e:e8:45:81:46:8a:98:d5:e0:a1:df:0e:89:9b:83:f1:
         03:c1:ac:37:bc:d4:f2:1c:57:98:ba:cb:e5:9c:a4:6f:9c:02:
         80:3c:12:9a:ab:4b:8b:6d:c2:75:ee:01:05:04:97:10:5a:68:
         67:07:85:bd:02:fa:76:92:d3:38:ae:3f:6b:3f:20:d6:56:75:
         61:ed:c6:c6:68:60:61:88:1b:55:91:94:b2:4a:e5:f7:5e:96:
         06:c2:93:cd:21:53:40:92:ff:ee:c4:7c:80:84:e5:cd:dd:f7:
         79:dc:18:aa:80:3a:36:96:ea:79:e9:aa:c6:8b:37:05:53:d7:
         ae:29:d0:57:52:3c:38:de:68:a4:2b:09:57:1d:05:a5:b3:54:
         51:38:dc:3d:32:d0:4b:76:33:d6:72:25:96:e7:2a:26:35:e4:
         f9:32:eb:38:11:ab:df:9a:12:0a:0f:09:1a:64:cf:a4:54:49:
         36:a7:9d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:56:53 2024 by rpki-client on console-fra.rpki-client.org