Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa
File:                     3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa (raw, json)
Hash identifier:          gnGVBhXBemZaYecV1G3ncNkgbDaRBuG8kTb0s/MyYz8=
Subject key identifier:   B3:25:56:60:8D:19:6B:ED:C8:AC:03:DC:A3:62:68:60:A3:3E:A6:37
Certificate issuer:       /CN=10FC4D9D2403FC433C19BB76131325B776505E51
Certificate serial:       0D936132EAADE7B4FF979D419B3354DD8565D222
Authority key identifier: 10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa
Signing time:             Wed 11 Oct 2023 01:00:01 +0000
ROA not before:           Wed 11 Oct 2023 00:55:01 +0000
ROA not after:            Wed 09 Oct 2024 01:00:01 +0000
asID:                     137315
IP address blocks:        103.109.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl
                          rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:93:61:32:ea:ad:e7:b4:ff:97:9d:41:9b:33:54:dd:85:65:d2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FC4D9D2403FC433C19BB76131325B776505E51
        Validity
            Not Before: Oct 11 00:55:01 2023 GMT
            Not After : Oct  9 01:00:01 2024 GMT
        Subject: CN=B32556608D196BEDC8AC03DCA3626860A33EA637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:36:43:4b:c3:e8:a7:78:4a:b8:51:2e:02:62:
                    c4:4f:e5:80:c7:71:a1:f0:29:69:b7:37:92:e7:91:
                    fb:db:dc:b1:cb:0d:d1:b6:0c:de:de:55:3b:c9:1e:
                    cd:aa:34:87:b3:a3:10:a7:cd:54:04:ba:2f:e1:1b:
                    a3:2f:9f:a6:11:44:46:38:fa:a8:cc:23:a6:67:86:
                    a2:83:c7:56:0e:64:b3:82:70:7c:dc:44:0f:1a:39:
                    7d:55:66:cc:30:4e:76:85:e8:9e:9c:de:6c:e7:8f:
                    c9:b8:45:69:89:b7:e3:b6:1b:7d:ae:4e:20:d4:c2:
                    24:be:d1:e1:da:22:f5:b6:8b:f8:aa:e7:6c:b5:7f:
                    d1:74:f0:b5:e9:e4:d4:74:ee:3b:b7:c4:2d:f1:80:
                    16:d1:ea:02:aa:7d:e6:d0:42:6b:b4:78:5e:21:00:
                    0f:44:12:cf:e9:0f:51:d6:5d:ae:6e:dc:ad:2e:58:
                    32:ce:f1:bc:b6:18:42:14:64:65:6c:af:67:bb:2e:
                    76:3a:df:14:04:c7:a2:10:54:92:07:b6:dc:a5:87:
                    a6:ae:7a:fb:91:68:00:3b:4e:b7:25:da:ed:bc:83:
                    b9:dd:6c:ba:80:71:29:1b:e7:d9:df:b5:6f:44:cd:
                    f0:7d:24:c2:8f:f5:e1:2c:47:4f:41:98:f9:b3:32:
                    04:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:25:56:60:8D:19:6B:ED:C8:AC:03:DC:A3:62:68:60:A3:3E:A6:37
            X509v3 Authority Key Identifier:
                keyid:10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:b5:b7:a5:33:2f:c7:14:4a:21:82:84:82:7d:f6:63:46:11:
         45:87:9f:10:30:8c:dd:63:d7:35:27:c2:ab:3f:36:c6:83:82:
         33:01:e3:b4:f2:86:35:b2:64:04:f0:98:6a:00:46:ad:a3:c5:
         f3:dd:dc:a8:53:9b:ae:0d:eb:fe:17:2b:db:77:9e:2d:88:ea:
         79:de:95:ca:70:13:78:94:57:12:2e:9d:69:e2:02:f8:dc:a2:
         fe:e5:6d:3c:5a:dd:13:59:77:2f:33:17:9a:24:7d:b7:d9:36:
         62:dc:06:d1:d7:a6:45:3d:e9:81:ef:af:0c:03:1c:6c:61:6d:
         c2:c1:16:00:79:4c:0f:fb:e7:93:0a:45:ec:98:de:c9:9a:a7:
         5a:48:07:6b:2d:e5:6c:5a:d3:2c:9f:52:a1:c3:41:2c:19:52:
         b1:4b:e5:36:25:eb:f7:fb:1a:9e:3c:0c:ee:46:83:49:e1:74:
         d3:42:ed:7a:09:42:cf:58:f5:b6:67:0d:76:1c:f3:aa:3e:39:
         d1:35:44:7c:97:aa:55:2c:20:33:1d:ce:9d:56:bc:34:2a:c5:
         ee:75:a9:c1:31:eb:63:0e:67:f0:d0:11:6c:19:b6:05:87:2f:
         96:ea:96:7a:e9:28:3c:6a:12:bf:5e:3c:03:1c:1a:6c:65:17:
         df:a3:75:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:43:48 2024 by rpki-client on console-fra.rpki-client.org