Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa
File:                     3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa (raw, json)
Hash identifier:          t9Nb/xyDfslEA9iB/593OKU25u4XQxGW9UZn5Qg5WFg=
Subject key identifier:   9D:FE:CE:E5:84:C3:79:B2:E1:77:5D:E5:9D:6D:64:21:93:73:2B:20
Certificate issuer:       /CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853
Certificate serial:       5CBF5F7CDE85F18BCDF8DD52830D15D2767479A8
Authority key identifier: 0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa
Signing time:             Tue 26 Mar 2024 09:00:00 +0000
ROA not before:           Tue 26 Mar 2024 08:55:00 +0000
ROA not after:            Tue 25 Mar 2025 09:00:00 +0000
asID:                     132669
IP address blocks:        103.112.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl
                          rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 12:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:bf:5f:7c:de:85:f1:8b:cd:f8:dd:52:83:0d:15:d2:76:74:79:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853
        Validity
            Not Before: Mar 26 08:55:00 2024 GMT
            Not After : Mar 25 09:00:00 2025 GMT
        Subject: CN=9DFECEE584C379B2E1775DE59D6D642193732B20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f4:ef:06:0d:42:9c:cc:60:0a:a7:35:e3:dc:
                    be:dc:42:6e:78:48:96:32:34:4f:20:5d:2a:75:8c:
                    3b:91:37:15:df:62:79:49:69:81:11:fa:ce:cd:3c:
                    9d:f6:85:97:46:54:d9:82:17:27:35:ab:75:56:20:
                    81:f1:09:23:50:dd:b2:28:83:fd:f8:47:d1:df:e6:
                    33:e5:80:26:56:30:8c:7a:a5:8d:1f:f0:5e:29:03:
                    c1:2f:c9:8b:f1:8e:22:8b:e4:48:f0:53:7f:57:12:
                    c9:ce:8f:aa:8e:57:96:cd:7a:0d:4a:31:9b:13:ff:
                    f4:cb:52:9e:74:6d:30:6a:22:ac:01:32:38:4f:1f:
                    b3:20:05:b2:fd:3f:03:7b:d2:ea:e2:5c:4d:9f:e0:
                    ae:12:0b:2c:b2:90:f6:7e:cf:81:74:8d:30:39:a3:
                    06:f0:4c:95:90:42:97:fa:0a:0b:c8:fc:a4:98:fe:
                    b6:65:69:9f:f2:0a:90:f2:93:ad:c3:45:46:b5:24:
                    84:7b:e3:34:84:72:69:01:7b:19:c3:92:e8:a0:e6:
                    7a:55:32:62:d5:31:00:c9:fe:43:e3:e8:02:4d:4c:
                    e6:c9:1e:a4:c2:f2:6a:08:66:9e:d5:22:83:03:91:
                    01:4f:06:80:a2:cf:4c:33:69:97:07:02:9d:01:f8:
                    2a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FE:CE:E5:84:C3:79:B2:E1:77:5D:E5:9D:6D:64:21:93:73:2B:20
            X509v3 Authority Key Identifier:
                keyid:0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:1a:dc:df:97:43:5f:6c:ea:8f:e5:89:3a:10:45:e7:ad:28:
         08:17:0b:37:e5:d3:87:34:b5:4c:a5:67:06:7b:4e:40:5b:69:
         58:3c:3e:19:e4:0c:52:ec:ae:d8:d7:8e:50:00:ed:0a:9c:01:
         6d:83:74:b3:0b:6a:de:5d:c6:84:83:9f:ec:93:2b:95:77:b8:
         6c:6c:08:d3:4e:c7:f4:08:14:c5:4f:86:d4:8a:31:85:69:c8:
         ce:ba:45:48:33:99:55:1b:f4:e0:4d:ae:98:98:79:68:a6:1c:
         f5:9d:91:59:90:61:80:d8:56:d8:b6:bd:8d:49:fa:de:59:72:
         e3:71:d8:1a:fe:1c:00:d0:2b:d7:0e:82:95:88:94:c3:e1:4f:
         d1:f1:14:a0:ad:7e:c8:29:28:94:f6:66:7f:d1:c1:61:10:d0:
         76:c8:11:27:11:79:a4:2f:49:ad:a8:0b:59:60:8f:d4:8a:ae:
         39:6d:20:c9:5d:c4:80:15:e7:68:a3:6f:cc:f1:b0:d9:0b:7c:
         98:c0:a4:99:d4:a6:33:26:8f:1b:1a:30:ed:c9:07:ee:f4:75:
         72:28:2a:e8:d4:e0:09:d7:1f:75:b7:29:9c:3d:f3:17:1f:b6:
         7f:fb:ce:ad:5d:9e:b1:52:fb:45:dc:96:73:ef:11:79:b3:ad:
         f5:bb:99:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 09:36:49 2024 by rpki-client on console-ams.rpki-client.org