Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa
File:                     3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa (raw, json)
Hash identifier:          KwtUaoClH3kiNpvEIWalSEf5bxo2cymUbkAJRaf/ygM=
Subject key identifier:   70:DB:C8:B3:F4:A1:10:0B:9A:14:A9:DA:2E:5A:04:FE:59:5F:78:02
Certificate issuer:       /CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA
Certificate serial:       7CB1368DFD29B87005FB525E4C09B4F8F0B4ACFF
Authority key identifier: 3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa
Signing time:             Thu 30 May 2024 05:00:01 +0000
ROA not before:           Thu 30 May 2024 04:55:01 +0000
ROA not after:            Thu 29 May 2025 05:00:01 +0000
asID:                     142375
IP address blocks:        103.171.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl
                          rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 05:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b1:36:8d:fd:29:b8:70:05:fb:52:5e:4c:09:b4:f8:f0:b4:ac:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA
        Validity
            Not Before: May 30 04:55:01 2024 GMT
            Not After : May 29 05:00:01 2025 GMT
        Subject: CN=70DBC8B3F4A1100B9A14A9DA2E5A04FE595F7802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:bb:cc:e6:72:13:86:0c:f4:4b:21:8e:d2:
                    84:c7:94:5b:94:72:0f:94:ad:fd:8a:29:74:de:a4:
                    56:52:f5:16:57:ef:05:96:97:83:7c:16:d5:f7:9d:
                    50:e4:21:33:ed:91:08:26:57:6a:6e:20:de:95:65:
                    2b:c5:38:ed:82:6f:53:7f:52:9b:1c:0c:1a:c2:a5:
                    4a:21:d9:d9:bf:2c:da:59:c5:71:fc:8b:a6:98:7e:
                    fe:82:85:aa:98:38:f5:73:37:ce:72:80:b7:2e:55:
                    60:db:78:4b:38:f7:23:8f:89:3e:b3:d6:11:2d:51:
                    fb:7c:18:55:3e:5d:fc:06:8a:cf:69:3f:f7:2f:67:
                    d3:4c:d0:79:7c:dc:8a:b5:a0:20:ee:4f:15:f9:9b:
                    78:db:c7:1a:d3:78:bf:81:49:ac:8b:33:59:95:41:
                    e2:66:89:7b:03:76:c7:05:3e:ed:5f:b5:ad:f3:1a:
                    a9:50:0c:dd:60:cd:45:30:35:bb:85:e2:df:cd:b0:
                    22:be:47:31:a3:79:6d:0c:20:4d:5c:46:11:8b:f3:
                    69:e9:fb:05:0e:84:4e:c8:bf:5e:ce:a4:9b:e5:90:
                    fc:f1:6b:dc:49:c9:9b:0a:7e:c4:5e:f2:99:e9:3f:
                    dc:4b:84:23:b2:88:b2:89:75:95:72:ab:2c:55:c0:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DB:C8:B3:F4:A1:10:0B:9A:14:A9:DA:2E:5A:04:FE:59:5F:78:02
            X509v3 Authority Key Identifier:
                keyid:3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:bd:70:84:da:23:ea:af:50:1a:2e:d5:b2:69:85:f9:18:ef:
         12:b7:8e:c1:d8:f9:4c:03:e7:e4:78:6c:b6:00:c0:e4:37:f0:
         0d:c2:2f:16:06:24:1a:ed:21:e9:53:f2:6c:5c:c7:13:b6:a2:
         9f:8f:00:8f:1a:5b:3c:53:19:07:e5:25:90:f3:5e:a9:b9:9f:
         ed:19:35:d3:d1:ce:55:cf:ca:4f:b4:a1:69:3b:50:10:95:4c:
         ef:86:47:72:3e:98:bf:a3:bc:55:b6:ee:98:6e:a4:e5:0e:d1:
         af:26:86:de:fe:cf:ef:3d:53:51:ed:45:f0:78:90:1b:8e:54:
         64:3e:19:36:09:77:d8:2b:8f:6c:00:e1:c2:b1:bb:1a:13:7f:
         c0:fa:cb:33:37:fe:38:57:19:ad:df:57:48:58:3a:c4:40:56:
         2d:d9:76:0c:2b:60:18:43:14:70:02:d6:48:f2:59:02:ea:be:
         52:05:23:18:4d:95:14:93:c5:fe:a9:95:c0:a9:58:df:ed:fb:
         b5:63:10:f4:0b:73:fe:14:49:a1:25:ef:65:35:61:23:bc:a8:
         56:a0:a0:28:78:ab:04:21:37:01:1f:e0:ca:66:60:54:a4:a2:
         0a:f2:9c:52:60:a4:1c:e6:aa:23:0d:0c:d0:e6:4d:45:57:b5:
         a0:60:62:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:01 2024 by rpki-client on console-ams.rpki-client.org