Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa
File:                     3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa (raw, json)
Hash identifier:          5eC7/I40aczbOTzlYXr05tpa3jo1C0J9l1xBueSDuOI=
Subject key identifier:   0F:76:AF:77:A1:EB:2F:77:11:9B:68:65:C8:3F:1C:C9:4F:91:A7:72
Certificate issuer:       /CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A
Certificate serial:       305DA54F4995B8C02F43E769A0DB7D6802D8C65C
Authority key identifier: E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa
Signing time:             Wed 13 Nov 2024 11:00:01 +0000
ROA not before:           Wed 13 Nov 2024 10:55:01 +0000
ROA not after:            Wed 12 Nov 2025 11:00:01 +0000
asID:                     140012
IP address blocks:        103.148.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl
                          rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5d:a5:4f:49:95:b8:c0:2f:43:e7:69:a0:db:7d:68:02:d8:c6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A
        Validity
            Not Before: Nov 13 10:55:01 2024 GMT
            Not After : Nov 12 11:00:01 2025 GMT
        Subject: CN=0F76AF77A1EB2F77119B6865C83F1CC94F91A772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b5:34:53:45:fb:1b:79:8d:0f:70:c1:f2:7b:
                    18:ae:dc:77:16:07:82:31:6e:c8:33:94:0e:34:89:
                    c7:56:74:0e:e9:8c:12:b2:b0:8e:48:d5:8e:f0:61:
                    2c:4d:58:56:ab:05:8c:96:fe:b1:9c:0b:3f:ba:a8:
                    b6:ac:ac:63:72:98:72:5e:07:eb:bf:2f:8d:31:cb:
                    fb:85:ae:b4:18:4d:21:0b:f9:87:07:ac:0b:46:01:
                    be:96:c0:6e:a6:67:16:26:8d:ac:57:ec:e5:4a:be:
                    23:39:65:4a:a1:8c:0b:9d:58:6f:1d:fa:8a:b4:da:
                    7b:68:86:e1:f9:50:9f:aa:e3:01:e2:52:1f:c8:16:
                    14:a1:22:ed:5a:46:17:95:ac:27:ae:7e:c7:74:21:
                    1b:c4:e9:72:d1:15:97:fb:83:5c:61:2d:ef:83:3b:
                    eb:77:ae:fa:cf:e7:b6:62:2c:69:dd:da:f2:58:db:
                    81:a3:7b:18:c7:06:b9:a2:cd:71:96:c0:b0:29:0d:
                    01:ba:6d:c0:73:be:33:20:54:16:a2:55:51:7f:62:
                    39:fb:8f:bf:1b:74:67:8d:de:a0:32:cd:14:ff:41:
                    b4:6c:97:7c:73:21:fa:94:14:4f:2c:87:6d:46:ef:
                    3e:59:df:2f:95:b3:9f:38:35:ae:9f:4f:f1:42:8c:
                    fd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:76:AF:77:A1:EB:2F:77:11:9B:68:65:C8:3F:1C:C9:4F:91:A7:72
            X509v3 Authority Key Identifier:
                keyid:E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:99:81:38:8a:2c:7c:98:80:0f:77:30:62:c7:92:38:c3:57:
         06:c9:6d:f2:fc:f8:1b:65:a0:02:7f:3b:f7:79:23:6b:34:e6:
         47:7d:e2:39:f3:6e:2e:dd:60:0d:ba:57:5f:9a:71:9d:86:a0:
         21:6f:58:49:44:38:a2:18:d6:32:32:68:c6:7f:ec:3e:0b:06:
         0b:8c:51:65:74:d8:06:c1:b4:91:66:91:94:ca:16:b4:2d:25:
         db:17:05:c9:68:63:fc:e7:ff:0c:89:30:b9:0a:dd:40:01:30:
         7f:77:63:70:f6:78:7e:ff:9f:ec:bb:09:fd:82:0b:c5:6d:44:
         c3:13:e8:f4:2d:93:45:a4:d9:32:d1:19:80:d4:97:35:d1:ca:
         ed:a3:e5:de:76:4f:29:15:85:1e:c7:8a:52:f2:54:00:bf:0a:
         4c:4c:d7:82:5b:2a:f7:da:26:b6:cd:fe:2b:3e:f7:75:a1:a7:
         0f:33:8e:6c:b0:6e:2b:1f:07:4d:26:c3:ed:08:91:99:63:34:
         7f:3d:00:dd:f6:dc:57:b6:63:3a:fc:07:b7:b9:bb:ab:dc:90:
         c2:0b:da:60:99:ce:08:52:f8:e7:e6:73:e8:54:f0:72:a3:8e:
         b3:8d:8f:2f:1c:89:90:7c:f4:ce:af:7e:a5:df:61:04:e1:16:
         04:1d:01:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:09 2024 by rpki-client on console-ams.rpki-client.org