Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa
File:                     3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (raw, json)
Hash identifier:          EdwKl111q2CtLUHBTONF9R20VzXLHu4+IxkAtHm2voQ=
Subject key identifier:   F6:C3:0C:8F:1C:78:82:37:C3:C6:C2:75:8A:17:90:40:E2:35:D4:A0
Certificate issuer:       /CN=196DBD061B4577EF848600B17A266D689F5A70B5
Certificate serial:       5FAB38A6B6C4704D4013FFF237A202B05569C3E1
Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa
Signing time:             Tue 25 Jun 2024 15:01:25 +0000
ROA not before:           Tue 25 Jun 2024 14:56:25 +0000
ROA not after:            Tue 24 Jun 2025 15:01:25 +0000
asID:                     149368
IP address blocks:        103.180.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl
                          rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 08:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ab:38:a6:b6:c4:70:4d:40:13:ff:f2:37:a2:02:b0:55:69:c3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5
        Validity
            Not Before: Jun 25 14:56:25 2024 GMT
            Not After : Jun 24 15:01:25 2025 GMT
        Subject: CN=F6C30C8F1C788237C3C6C2758A179040E235D4A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4e:c2:94:0c:a4:17:60:66:83:24:b3:c3:06:
                    43:e2:04:6a:eb:f5:d8:d1:44:05:d6:66:eb:dc:22:
                    bd:24:f2:3b:68:8c:a8:32:47:dc:85:ca:4b:d8:ee:
                    a8:93:45:38:d8:4e:30:01:80:c7:5b:87:56:21:4f:
                    96:60:2e:d3:63:5e:bd:f3:c8:9a:b7:a4:f8:97:92:
                    32:ae:44:b8:54:03:a5:bb:22:d8:ba:85:de:38:b0:
                    4e:bb:a1:bb:e4:ea:25:22:8f:d0:55:4d:bc:7c:89:
                    a7:80:e7:19:39:de:52:f8:73:f3:9f:42:9b:02:b3:
                    0d:e8:69:cd:7c:f1:27:1d:ad:de:39:29:94:e9:bd:
                    38:23:f3:ad:77:e3:98:a7:a7:63:38:68:06:d8:c4:
                    fb:f9:ce:6d:05:32:a0:11:4a:55:08:d8:4b:72:cc:
                    6e:d5:92:8b:02:89:cc:9e:2d:28:ad:61:30:50:b1:
                    38:8c:a8:69:8d:d5:56:32:9b:ae:1c:2b:fd:ac:11:
                    14:17:36:c7:70:a4:47:1d:23:a7:9a:13:62:9e:3a:
                    5a:02:ff:db:f5:74:da:fd:e9:0d:cf:f2:60:b8:98:
                    e2:e3:3f:ab:fd:72:10:ab:4f:aa:2f:a0:c7:a1:57:
                    ac:24:15:34:81:c7:10:06:01:82:bc:28:f7:80:c6:
                    0a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C3:0C:8F:1C:78:82:37:C3:C6:C2:75:8A:17:90:40:E2:35:D4:A0
            X509v3 Authority Key Identifier:
                keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:ca:f1:9a:e8:ac:cd:09:7c:db:6e:80:ca:fb:d4:9d:3b:a1:
         ab:f3:49:b7:ca:cc:7b:d0:59:1f:8a:52:1a:4f:71:ab:ab:81:
         8f:0f:8a:69:b5:53:02:fc:dd:fc:7a:bf:0a:a4:86:e4:17:4c:
         f2:e5:08:11:f2:e1:8a:d0:d9:c7:ab:d1:2c:a6:5b:d7:4e:bb:
         d8:82:e3:97:fb:cd:31:aa:5e:01:0e:95:f7:b1:00:79:b1:91:
         00:fc:f3:dc:1e:ca:b1:c2:ba:1c:77:e9:25:da:4d:02:68:00:
         aa:58:ae:39:4f:9f:b4:94:2e:a1:7d:da:68:55:52:54:3e:0a:
         4c:12:1f:ec:79:1e:e3:1a:47:ef:37:e0:7c:93:55:ac:dd:16:
         51:8c:7f:0f:42:08:5a:b3:01:61:89:cc:d4:9f:a7:37:26:f2:
         5f:57:6d:fe:16:c3:aa:cb:36:20:e5:98:95:0b:c6:f5:98:bf:
         d3:67:8d:45:eb:cb:1a:33:3e:86:85:1d:59:ad:56:e8:bb:78:
         3c:a6:61:a2:df:76:1f:41:32:21:4f:bd:b4:57:cc:56:e6:5b:
         78:c1:cf:75:e2:40:4a:56:ee:d5:11:34:23:dd:ce:b3:6d:70:
         91:b6:a5:99:63:43:cf:1e:e5:bc:23:44:a1:b7:55:d2:6e:80:
         de:af:d4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:49 2024 by rpki-client on console-ams.rpki-client.org