Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa
File:                     3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa (raw, json)
Hash identifier:          bz2DlHW9yEZtziLVCXtgYqEvSDjzpRcc+kDwhjRWCa0=
Subject key identifier:   18:C0:79:C2:D5:B3:9D:7B:7F:1F:D4:F2:05:CB:F9:1A:0C:10:F2:70
Certificate issuer:       /CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E
Certificate serial:       770D293964A1D62570AF6B8E7CD31DAAB59EA59B
Authority key identifier: 19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa
Signing time:             Fri 31 May 2024 05:02:32 +0000
ROA not before:           Fri 31 May 2024 04:57:32 +0000
ROA not after:            Fri 30 May 2025 05:02:32 +0000
asID:                     149369
IP address blocks:        103.180.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl
                          rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0d:29:39:64:a1:d6:25:70:af:6b:8e:7c:d3:1d:aa:b5:9e:a5:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E
        Validity
            Not Before: May 31 04:57:32 2024 GMT
            Not After : May 30 05:02:32 2025 GMT
        Subject: CN=18C079C2D5B39D7B7F1FD4F205CBF91A0C10F270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:c5:38:bb:d7:e5:7a:18:1f:cc:ef:e0:95:
                    ac:39:6e:b9:29:0b:2c:47:cd:5a:71:8f:51:43:4e:
                    e1:fd:9e:89:9e:9a:87:ba:51:b1:e7:be:10:61:6c:
                    5f:e5:8f:58:46:dd:be:1a:eb:04:ab:ff:34:b8:7a:
                    2e:cf:ea:4b:23:b9:6c:a0:e8:dd:58:9f:e4:fb:c4:
                    bd:64:04:cd:57:7f:22:05:2c:b6:94:21:63:b5:c1:
                    dc:65:41:db:f0:fe:63:b2:0a:06:ee:b1:4d:23:d5:
                    b9:5c:93:62:b1:72:b1:df:ca:3c:b2:4d:c4:cf:53:
                    dd:24:1e:30:32:27:de:57:6a:52:85:88:79:54:12:
                    db:ec:ab:0f:63:17:a7:f6:65:5a:41:d4:aa:ea:c7:
                    a7:a8:b6:4e:d4:dc:b2:d5:ff:1f:d4:73:6e:c4:10:
                    16:9f:7a:33:86:3e:c0:ee:35:f8:d1:2e:04:db:b8:
                    45:99:3b:c5:6d:f4:0e:8b:26:5d:4c:c1:0f:1e:93:
                    95:ff:61:06:1e:f5:0c:e8:3e:26:e5:c3:02:06:69:
                    9f:1d:62:cb:af:9c:d0:f3:97:26:c2:c6:49:a3:9a:
                    13:56:29:05:b1:e8:7e:fb:3c:2e:75:87:b0:b9:fb:
                    7d:59:4f:1a:46:4f:14:58:c9:99:d5:66:c9:55:cd:
                    0c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C0:79:C2:D5:B3:9D:7B:7F:1F:D4:F2:05:CB:F9:1A:0C:10:F2:70
            X509v3 Authority Key Identifier:
                keyid:19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:99:58:51:3d:d5:38:08:23:12:a6:2f:65:9c:ba:ba:e4:89:
         e9:31:6c:ad:56:a8:22:9d:ae:0e:d1:c8:64:f5:95:bd:4f:b3:
         59:2d:ab:69:49:cc:bb:71:e1:b9:98:88:5b:62:fd:06:bc:41:
         8e:12:30:ca:b9:f3:26:d1:07:56:f5:96:a4:95:4b:d7:dd:ac:
         39:55:df:bf:0c:9c:e9:e6:54:00:f4:ca:e5:f9:2b:12:43:74:
         4d:f6:a7:d5:b4:85:f6:e3:53:c1:41:b0:63:ed:ad:26:61:51:
         f6:53:a3:4f:95:55:e4:b5:80:c7:16:31:dd:1b:7a:87:47:ba:
         03:20:1b:18:27:0f:3a:e6:d1:b7:e0:cf:1d:79:48:41:26:15:
         49:57:0c:75:b4:16:68:51:f5:c7:62:02:a6:75:0d:5f:bc:41:
         f5:5c:17:92:97:b6:53:da:f1:3f:34:ae:47:61:94:f3:39:d7:
         be:7b:af:18:c4:be:b1:30:17:3e:2e:28:94:1c:c5:32:2a:14:
         e5:e8:f2:3c:dc:28:01:52:d6:4a:c0:71:22:f0:56:5f:64:3d:
         53:02:17:73:75:8c:da:93:ac:40:12:6b:ee:2a:dd:5a:f0:ae:
         93:fd:98:15:5a:8c:bd:e2:f9:ba:f8:1f:c2:4a:22:2a:b8:a2:
         cf:d2:06:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org