Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa
File:                     3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (raw, json)
Hash identifier:          lkOBGNn2AJWIi+TpBDjIZfkm3ctiv119XuzaX4+/4fI=
Subject key identifier:   B0:E6:A0:76:C6:AC:E6:BA:13:69:2F:AE:1B:C6:24:B2:9E:BD:9B:6A
Certificate issuer:       /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8
Certificate serial:       186C8ACCB4B8FC859B846FDCF9C3B81843EACBE3
Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa
Signing time:             Mon 10 Jun 2024 14:00:02 +0000
ROA not before:           Mon 10 Jun 2024 13:55:02 +0000
ROA not after:            Mon 09 Jun 2025 14:00:02 +0000
asID:                     149944
IP address blocks:        103.73.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl
                          rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6c:8a:cc:b4:b8:fc:85:9b:84:6f:dc:f9:c3:b8:18:43:ea:cb:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8
        Validity
            Not Before: Jun 10 13:55:02 2024 GMT
            Not After : Jun  9 14:00:02 2025 GMT
        Subject: CN=B0E6A076C6ACE6BA13692FAE1BC624B29EBD9B6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:89:58:34:c7:0c:67:13:12:65:af:80:c2:d0:
                    80:08:6f:44:81:b7:b8:26:8a:b2:55:25:38:af:b8:
                    8c:ae:7f:0a:5a:d2:95:ce:a4:a1:f8:3b:81:8c:42:
                    42:c5:c6:54:b5:09:a4:fc:f3:73:8a:02:fa:78:7f:
                    3e:9b:1f:34:32:50:2e:2c:40:29:57:fd:54:9c:f4:
                    04:76:a5:95:ac:4a:eb:c9:c4:30:f5:d2:ca:5a:45:
                    93:8f:20:d1:52:f5:7c:1a:05:55:4d:7d:b3:bc:55:
                    a0:15:b1:7b:1b:f5:e2:a8:1c:f1:11:be:32:60:6f:
                    a5:68:04:f2:9d:1a:01:ab:20:1f:32:7d:04:46:73:
                    c2:61:29:4f:fb:e9:80:ed:2f:2f:98:0b:4a:77:78:
                    35:18:0d:99:af:b8:5c:1c:c4:13:cb:e2:4c:56:d6:
                    2a:9c:ed:ef:46:ab:51:42:5a:28:ee:ae:3f:6c:8c:
                    59:62:11:c4:60:7b:87:29:df:cd:5e:e3:f8:37:fe:
                    c4:a5:18:01:1c:d0:59:ac:6e:96:e8:02:5a:d6:d8:
                    96:d3:e1:d3:6b:f3:76:15:5c:4f:3a:8a:4a:88:aa:
                    94:b7:82:ff:4f:9f:74:d7:6a:2e:0d:c6:6e:05:e0:
                    47:af:a2:1c:9b:af:36:91:2e:39:5f:d7:d0:dc:b1:
                    22:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E6:A0:76:C6:AC:E6:BA:13:69:2F:AE:1B:C6:24:B2:9E:BD:9B:6A
            X509v3 Authority Key Identifier:
                keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:3f:3c:bc:20:69:88:a3:0b:e0:be:01:9b:93:63:aa:97:55:
         87:b6:bb:18:2f:25:ed:29:e9:52:2d:5f:85:45:63:bc:96:c0:
         35:8f:e2:9d:35:b3:5b:ef:e2:18:e5:64:d5:3e:54:14:9a:35:
         fa:0f:6d:2f:d3:d1:1e:da:4b:16:b1:64:66:e4:7b:87:61:5d:
         a8:76:93:13:32:eb:dd:ad:92:d7:a3:09:2a:ca:4b:fb:9d:8b:
         a2:b4:14:75:ed:f4:69:8d:33:4b:40:39:aa:cb:bf:5e:f8:03:
         92:54:64:87:c0:a0:ae:b9:56:6e:e2:27:b5:a2:93:f5:11:ac:
         a7:b6:60:27:00:31:69:27:b9:66:91:33:47:52:c7:59:d1:f7:
         ec:f0:9d:7d:70:6d:c8:90:26:23:af:52:f3:4d:04:ac:b6:26:
         1a:ee:fe:b4:7c:cd:c7:a2:56:18:d7:a7:57:45:2c:3f:ef:ff:
         39:5b:00:4e:1a:25:8a:7a:97:56:9d:38:58:cd:27:ef:b1:c2:
         5b:c8:2a:5b:91:e5:48:52:7c:51:24:d7:c4:fd:7c:ae:a4:e6:
         d6:23:15:9a:77:bf:5d:8a:45:19:36:d8:b8:40:86:7a:92:12:
         e8:4e:97:0c:bc:e3:e7:3d:ba:e4:48:a6:ef:16:a0:4d:99:0c:
         65:72:d6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org