Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa
File:                     3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa (raw, json)
Hash identifier:          8VmqQFT2kMSGnHr4ixWEkYkyahaLljWvQ44GHmpZk/w=
Subject key identifier:   90:95:66:37:EA:5E:5D:FE:4D:86:12:BF:24:B9:6B:6C:F0:4C:65:67
Certificate issuer:       /CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E
Certificate serial:       05A8BD6A4325F147900DB2298F52D1478E8F63B8
Authority key identifier: 19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa
Signing time:             Fri 31 May 2024 05:02:32 +0000
ROA not before:           Fri 31 May 2024 04:57:32 +0000
ROA not after:            Fri 30 May 2025 05:02:32 +0000
asID:                     149369
IP address blocks:        103.180.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl
                          rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 06:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a8:bd:6a:43:25:f1:47:90:0d:b2:29:8f:52:d1:47:8e:8f:63:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E
        Validity
            Not Before: May 31 04:57:32 2024 GMT
            Not After : May 30 05:02:32 2025 GMT
        Subject: CN=90956637EA5E5DFE4D8612BF24B96B6CF04C6567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:84:53:3a:81:6b:32:47:53:87:10:2d:c9:f2:
                    14:15:f1:19:7d:8e:06:25:20:ad:56:27:67:32:2e:
                    7f:8f:d0:c6:3e:43:b9:ce:c3:67:93:de:1a:0a:a3:
                    e9:f2:d3:84:81:57:a4:e0:a9:89:3e:9f:33:10:9c:
                    ba:56:f1:a0:76:df:e6:16:98:9a:a1:9f:81:d5:1d:
                    ff:40:44:51:2b:d0:19:0e:80:3d:33:b0:a4:a6:fa:
                    67:55:79:6c:31:bd:57:a5:38:dd:d8:95:9a:ad:07:
                    a0:85:2a:ed:3e:84:ee:86:49:73:e6:64:f7:10:d1:
                    22:1b:04:08:f5:dc:d6:da:a5:36:14:3e:dc:99:4c:
                    b5:92:67:3a:a3:e6:ff:ff:19:75:89:dd:86:2f:90:
                    ce:3b:ed:d7:8d:f5:f1:04:a3:6c:41:88:27:6f:ac:
                    86:2c:19:45:09:ea:6f:84:21:48:bb:e7:5d:37:c5:
                    7e:82:00:12:ff:ec:87:63:67:8b:26:9c:39:6b:a0:
                    5f:e5:04:39:1a:ad:e0:ee:27:ad:72:20:e9:3a:15:
                    9d:51:23:d8:4a:6f:23:67:0b:79:fa:40:d7:a8:1c:
                    0d:12:6b:33:b5:21:29:96:55:eb:48:ed:51:3e:61:
                    32:e3:59:55:8d:10:f7:ca:ec:25:e4:63:6d:cf:65:
                    fd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:95:66:37:EA:5E:5D:FE:4D:86:12:BF:24:B9:6B:6C:F0:4C:65:67
            X509v3 Authority Key Identifier:
                keyid:19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:ab:07:bb:9a:3b:f8:0d:1a:7a:bd:c7:e9:b1:1c:42:93:56:
         e0:9d:bc:50:05:8c:a1:e2:33:36:35:78:5a:a8:98:d7:bd:34:
         cc:98:70:f0:17:21:2a:3a:ae:12:85:15:0d:64:2a:04:35:3c:
         11:c8:53:92:07:bf:4c:d6:a3:c9:11:4c:8e:60:33:6e:2e:1e:
         c9:a2:47:6b:a0:e8:e4:70:1b:27:b7:69:27:18:9d:ae:83:18:
         c4:47:70:cc:b5:c9:98:ac:cc:29:a8:31:01:12:5e:5f:0b:02:
         0d:8d:39:bd:1f:d9:2f:5f:1d:17:14:6a:c2:7e:83:db:fd:cb:
         43:23:d1:19:f9:53:89:5b:6b:35:c0:11:a9:36:b1:03:bf:26:
         b1:45:68:9f:ca:07:f8:3d:ee:99:17:89:d3:31:62:ab:e2:12:
         ae:6e:e4:bb:44:34:c0:e7:49:cf:2d:a6:29:62:7f:a8:14:a6:
         aa:e8:00:4f:b7:17:56:37:44:69:8a:9d:93:67:61:13:e1:6a:
         ab:a6:17:2c:89:5b:f4:05:63:a5:55:eb:f4:a3:9b:39:3b:48:
         10:9e:de:ff:4d:76:ab:47:6d:cc:94:9a:d1:a5:ea:5f:55:c3:
         8c:69:76:db:28:82:72:43:59:86:48:aa:87:e4:2e:97:1a:e4:
         84:fc:63:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:00 2024 by rpki-client on console-fra.rpki-client.org