Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa
File:                     3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (raw, json)
Hash identifier:          App6gzoZL+6B7IkXL5lVIhupQOwXL3Migp5IdQkJtCk=
Subject key identifier:   9B:80:64:B7:F2:7A:DF:24:C7:4D:FC:21:0C:97:30:FC:2A:3A:48:EA
Certificate issuer:       /CN=47E5E36B848613534A65DDE4FBA27AB59A745B50
Certificate serial:       283B8901E44367A2115164FE4C082C1B2A4DAC1B
Authority key identifier: 47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa
Signing time:             Mon 19 Feb 2024 13:00:02 +0000
ROA not before:           Mon 19 Feb 2024 12:55:02 +0000
ROA not after:            Mon 17 Feb 2025 13:00:02 +0000
asID:                     149690
IP address blocks:        103.186.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl
                          rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3b:89:01:e4:43:67:a2:11:51:64:fe:4c:08:2c:1b:2a:4d:ac:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47E5E36B848613534A65DDE4FBA27AB59A745B50
        Validity
            Not Before: Feb 19 12:55:02 2024 GMT
            Not After : Feb 17 13:00:02 2025 GMT
        Subject: CN=9B8064B7F27ADF24C74DFC210C9730FC2A3A48EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:06:07:93:95:70:9f:65:bb:96:bf:cb:69:
                    bc:14:b2:d5:d3:83:5b:a9:00:b3:4c:0d:1c:2e:ce:
                    be:cf:30:13:1d:f9:b1:e2:c3:87:43:38:e7:5b:43:
                    38:2a:57:23:87:75:00:36:97:4d:c4:90:09:45:d1:
                    b9:9b:ab:ae:9c:5b:a3:c9:1a:aa:9d:2c:ba:d5:bf:
                    6b:7c:4e:c8:39:41:90:96:07:03:ab:67:f8:8c:7c:
                    b3:81:81:7e:31:18:ce:27:ea:ed:18:9b:e9:c6:10:
                    53:7c:5e:b5:87:bc:bc:a6:fe:3f:6e:f4:9c:02:dd:
                    2f:8d:72:c1:ea:98:d4:30:6b:f6:39:35:55:7b:d9:
                    c1:35:c5:ce:70:6c:bd:b9:b6:a5:bc:e2:82:9c:49:
                    e2:b7:7c:54:f9:06:cf:2a:58:09:be:73:d0:08:8b:
                    72:6d:22:77:64:ac:d7:d9:9e:35:c3:21:b1:1c:d1:
                    11:42:8b:bb:53:aa:90:01:65:f7:7b:62:4e:40:7d:
                    5f:23:b0:94:84:53:aa:3f:88:c3:97:6a:95:b9:6b:
                    dc:69:89:71:2e:d3:e0:f9:f7:cb:d9:78:f8:7d:f5:
                    61:1a:a2:38:c9:70:e7:7c:84:b0:82:f3:e3:11:0f:
                    d6:80:ca:2d:9a:2b:6d:33:6c:2c:ac:ef:1d:9d:54:
                    e8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:80:64:B7:F2:7A:DF:24:C7:4D:FC:21:0C:97:30:FC:2A:3A:48:EA
            X509v3 Authority Key Identifier:
                keyid:47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:dd:8e:2f:af:30:55:86:e1:d6:9c:30:4f:4c:57:db:c2:c8:
         4e:62:fa:19:4a:ed:69:8f:67:02:b8:53:49:8f:cb:d9:59:32:
         34:f4:e5:41:0f:a1:b7:4b:d8:08:ee:40:42:32:a9:15:96:33:
         b6:8e:a2:ed:2d:06:67:48:6a:db:8b:36:75:ef:84:99:ee:36:
         cf:b8:53:c8:c6:c4:d3:d3:3c:8b:4a:0b:04:a8:98:d2:56:cb:
         ba:ea:92:bd:72:4e:d7:2d:24:f2:51:76:c7:c5:5e:c4:ef:27:
         81:d2:2c:75:4c:35:48:f5:9d:f2:a7:da:cd:37:1b:e2:71:0e:
         90:87:9e:9d:14:c2:42:80:dc:20:9c:1d:be:f7:cb:57:a8:53:
         6f:2a:09:3d:13:95:8c:fb:f9:b8:7d:16:74:47:0f:b3:53:ca:
         63:16:1e:6d:80:1e:84:9c:58:9b:10:c4:07:6d:83:c7:b4:a1:
         62:0d:5f:45:df:2f:43:ff:ac:47:a3:46:8c:b5:25:4e:a3:86:
         82:b0:fe:98:54:34:1c:6e:b3:6a:9c:04:62:3d:b2:7f:87:ab:
         b3:76:cb:70:0d:da:5e:e3:04:a8:eb:c7:b2:03:f9:ed:07:1f:
         07:64:20:cc:9a:80:ed:40:22:82:3d:a9:ae:6e:5e:c6:0a:4e:
         5e:85:7f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org