Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa
File:                     3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (raw, json)
Hash identifier:          kmilwINTCXWczH6wzu0a2df4lQar5/ug3jFvP8RUimQ=
Subject key identifier:   E9:0C:62:42:CC:62:E2:7C:C1:44:3C:DF:81:A7:27:0A:45:4F:B0:2E
Certificate issuer:       /CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2
Certificate serial:       3FEDAAC73E04A7FEEB33F0166BCD6F24BAD8B0AB
Authority key identifier: 8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa
Signing time:             Tue 07 May 2024 08:03:21 +0000
ROA not before:           Tue 07 May 2024 07:58:21 +0000
ROA not after:            Tue 06 May 2025 08:03:21 +0000
asID:                     149667
IP address blocks:        103.184.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl
                          rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ed:aa:c7:3e:04:a7:fe:eb:33:f0:16:6b:cd:6f:24:ba:d8:b0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2
        Validity
            Not Before: May  7 07:58:21 2024 GMT
            Not After : May  6 08:03:21 2025 GMT
        Subject: CN=E90C6242CC62E27CC1443CDF81A7270A454FB02E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c8:a9:a7:8f:89:d7:06:64:5b:93:6b:fc:fc:
                    8a:45:d9:3b:97:92:e6:91:cd:d6:ab:b6:96:83:dc:
                    25:b6:e3:8f:b1:89:84:06:d5:26:f1:ae:82:34:5e:
                    22:af:f3:de:75:57:3a:7e:a4:c5:93:13:af:fd:b3:
                    3f:31:04:db:d9:a8:38:2b:d2:95:e7:c7:e6:32:a0:
                    0b:c4:cb:ff:bb:f9:90:13:1e:35:c1:bb:82:64:fa:
                    8d:9c:38:81:00:c7:d5:22:48:20:6d:df:82:85:bd:
                    ae:0e:3d:3c:53:bf:d7:35:db:6d:52:d3:06:23:fd:
                    3f:3e:83:b0:e9:78:77:75:9a:39:e7:1c:4c:bc:f7:
                    0e:bf:92:6a:a7:75:2d:b6:71:81:a8:d6:83:96:d4:
                    96:ed:0d:93:ea:d0:c9:93:6a:8f:43:e0:2c:10:df:
                    78:24:e9:24:2a:85:60:30:47:ee:c7:6f:98:fc:3f:
                    c2:19:4a:34:22:ee:4f:0b:0e:f1:98:6c:fe:e3:06:
                    66:8f:2f:d1:f6:bd:05:99:fb:b0:d2:26:97:97:0a:
                    6e:07:10:b9:d0:f9:25:ed:ad:24:8b:35:35:73:90:
                    0c:5c:56:0e:00:91:7f:5e:01:4f:31:cf:2f:21:a5:
                    27:46:56:a8:0d:dd:4e:53:0a:70:51:1b:58:ed:cf:
                    e7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0C:62:42:CC:62:E2:7C:C1:44:3C:DF:81:A7:27:0A:45:4F:B0:2E
            X509v3 Authority Key Identifier:
                keyid:8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:8e:3e:cc:e2:42:f9:60:6a:3c:41:6b:22:21:be:a3:bc:10:
         99:4e:58:37:b3:3a:08:63:ca:15:09:9b:66:66:1c:a6:90:ee:
         7f:55:64:58:78:bd:a2:8b:fe:2c:5d:00:a5:50:61:52:ae:e9:
         f4:da:78:a8:8b:e9:c0:db:4b:33:8a:61:e7:6f:76:5a:36:e3:
         95:5d:72:0a:13:09:e6:51:19:10:ba:0f:1d:19:ec:63:d7:78:
         f4:2a:03:d9:ed:50:c7:a7:99:cd:35:7c:05:5d:46:c2:c8:bb:
         47:bb:89:01:29:c4:dd:39:f7:a7:1e:79:7e:61:77:e0:f7:df:
         22:67:7c:a0:11:6a:00:38:6c:cc:89:f4:50:e9:2f:9e:23:df:
         f7:3d:96:a0:54:a2:5b:69:a5:6b:f2:ea:8d:9b:ae:58:bb:18:
         63:0f:db:34:99:3a:65:89:28:a3:ee:1d:72:5d:39:33:d6:83:
         5e:b7:60:b6:77:c4:90:84:14:68:7f:ab:e3:73:85:95:aa:bd:
         85:48:28:3b:5b:52:50:af:15:35:07:31:d8:21:92:c0:59:5b:
         8d:11:72:c0:86:73:35:e7:b2:40:1b:61:5c:72:a1:ee:21:25:
         56:91:fe:9b:fe:d6:80:dc:dd:2a:04:85:3d:6a:a1:9a:e4:88:
         ce:9f:fd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:09 2024 by rpki-client on console-fra.rpki-client.org