Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa
File:                     3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (raw, json)
Hash identifier:          ojS1MwX8BbE6h/4Ce5QvPiVzBYtCxeOn+n1rLUrAKz8=
Subject key identifier:   17:32:5F:D5:5A:B7:73:7E:72:D4:8D:D6:DD:11:AE:59:8D:30:59:61
Certificate issuer:       /CN=196DBD061B4577EF848600B17A266D689F5A70B5
Certificate serial:       3C2F58A3A4641EFAC237F3FEC224AC98190169CF
Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa
Signing time:             Tue 25 Jul 2023 15:00:01 +0000
ROA not before:           Tue 25 Jul 2023 14:55:01 +0000
ROA not after:            Tue 23 Jul 2024 15:00:01 +0000
asID:                     149368
IP address blocks:        103.180.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl
                          rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2f:58:a3:a4:64:1e:fa:c2:37:f3:fe:c2:24:ac:98:19:01:69:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5
        Validity
            Not Before: Jul 25 14:55:01 2023 GMT
            Not After : Jul 23 15:00:01 2024 GMT
        Subject: CN=17325FD55AB7737E72D48DD6DD11AE598D305961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:dc:54:65:dc:11:f8:59:ac:ad:ba:61:28:9e:
                    69:a1:b5:f5:79:db:f7:81:01:65:3e:d5:57:6f:a5:
                    a2:b2:c5:45:d3:e9:74:75:a6:56:b1:13:5b:e1:f8:
                    f4:60:fb:ca:c0:61:0c:a0:a1:d1:83:64:aa:8e:b8:
                    7b:d8:bf:00:7b:3c:ce:67:b3:34:86:b0:05:67:32:
                    e8:70:54:3c:4b:ba:83:b4:45:4e:7a:ef:99:0f:74:
                    43:c9:0f:29:af:7e:27:2e:71:4b:3c:9d:b8:61:9f:
                    9b:66:77:34:e1:68:8a:ad:ec:74:d4:95:d3:db:a6:
                    93:28:a7:3c:a3:a5:bb:db:a6:21:d0:b7:87:4c:2b:
                    6c:a7:b0:d1:4b:1d:e1:9e:cf:cf:fd:22:8f:22:cd:
                    67:a9:97:93:b8:a9:31:24:27:46:0f:8e:89:9f:1a:
                    4d:d2:ba:e7:84:70:f7:fa:0d:44:9f:17:f9:b0:9e:
                    6d:34:d4:83:95:44:fa:74:e3:eb:31:8b:6b:f0:da:
                    72:10:c1:8a:d4:9b:a6:7b:42:68:ec:4f:b0:f0:7a:
                    a6:4f:6b:7d:83:ae:a5:51:dd:3a:35:5f:a7:7a:01:
                    a4:46:e4:7b:7d:ba:3a:9d:a5:6f:33:67:d6:d6:69:
                    ac:e5:12:0b:2f:5a:56:d6:17:86:7e:fa:a3:8f:a2:
                    2e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:32:5F:D5:5A:B7:73:7E:72:D4:8D:D6:DD:11:AE:59:8D:30:59:61
            X509v3 Authority Key Identifier:
                keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:44:82:e3:3a:3f:41:d6:e7:60:4c:b8:e2:0f:76:b3:81:6e:
         57:5e:52:9c:55:93:ea:fb:9a:55:ac:2d:ba:96:fb:7f:29:72:
         8f:d7:4c:5a:e0:eb:85:66:5c:79:cc:04:8b:0e:4f:bb:8a:d4:
         40:fe:4a:97:f5:15:0f:e4:81:35:1f:47:a9:a8:48:62:27:08:
         ab:b0:39:02:9e:ec:c1:69:1a:57:37:84:11:59:5e:fc:dc:88:
         f2:b3:fd:7a:38:a9:a6:75:ee:1a:60:78:28:23:b7:08:d5:54:
         48:46:4d:1f:01:cb:51:7e:db:5c:bd:1c:ab:7b:6b:1a:ac:6e:
         72:31:cb:11:63:dd:37:b8:38:ab:f8:77:54:20:54:b0:d7:9e:
         3b:04:af:2b:28:19:0f:f6:e1:ce:72:e9:fe:dd:47:6b:40:b0:
         6a:cb:fc:b8:e7:a5:93:17:1b:55:b6:20:f8:f1:a5:5b:86:b2:
         f1:72:ce:68:b9:9e:f8:d1:6b:c0:89:d4:79:82:a6:f1:0f:d6:
         f8:4d:e2:2d:04:e5:4a:59:f6:ea:ab:c6:2d:10:84:97:0e:04:
         e8:3f:4d:7e:80:5c:1d:3f:d8:8c:95:69:c3:3d:49:4c:bb:7e:
         35:7f:c7:54:36:0a:93:7e:96:e7:a5:8f:2d:dd:0f:ae:87:df:
         eb:98:c8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:59:20 2024 by rpki-client on console-fra.rpki-client.org