Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa
File:                     3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa (raw, json)
Hash identifier:          zuK6tSBVOcL0DoRiCvl574IutmMM3i+15NF8Mt7HjNY=
Subject key identifier:   DE:EC:AB:EB:AA:B8:70:3C:77:00:66:17:7F:D8:45:E0:7F:B3:27:4C
Certificate issuer:       /CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337
Certificate serial:       23ACC25EAD04A34D66E63214D24CBC9DF16D65E3
Authority key identifier: BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa
Signing time:             Mon 31 Jul 2023 00:02:28 +0000
ROA not before:           Sun 30 Jul 2023 23:57:28 +0000
ROA not after:            Mon 29 Jul 2024 00:02:28 +0000
asID:                     141056
IP address blocks:        103.155.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl
                          rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ac:c2:5e:ad:04:a3:4d:66:e6:32:14:d2:4c:bc:9d:f1:6d:65:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337
        Validity
            Not Before: Jul 30 23:57:28 2023 GMT
            Not After : Jul 29 00:02:28 2024 GMT
        Subject: CN=DEECABEBAAB8703C770066177FD845E07FB3274C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a3:d7:6f:96:0c:06:0a:53:fe:99:0c:2a:b1:
                    f5:d8:1c:82:c8:be:2c:22:e9:07:d8:1b:96:22:7d:
                    4d:88:f8:27:d4:cf:5f:be:dc:62:11:c9:3d:5a:ea:
                    04:59:79:13:da:30:f6:cd:24:24:20:69:d2:4d:28:
                    a4:e8:d8:d1:e1:e1:8c:01:8c:7e:9f:28:e8:9e:8e:
                    16:0a:b9:b7:8a:9c:dd:4d:83:0c:2a:a2:50:a7:bf:
                    4a:68:a6:61:a6:63:66:ac:8d:77:3f:3d:a7:36:e0:
                    26:32:a3:71:5a:2b:ee:48:72:fd:94:c3:d7:d8:ca:
                    29:31:6e:68:8a:45:a5:a4:10:da:93:ea:2f:1e:40:
                    aa:f4:9a:a1:15:8d:00:c6:50:b8:a6:ba:e4:7b:dc:
                    8e:16:2c:d4:6f:36:98:69:54:eb:46:1b:73:e5:cc:
                    18:8d:f1:63:a6:ac:7f:8b:7e:62:b7:e3:3e:47:5f:
                    3f:dd:d4:94:6c:5c:7a:98:48:03:87:58:05:df:7b:
                    da:ef:70:a3:c0:2f:2b:df:86:b2:85:37:ca:12:a1:
                    a8:c9:26:4f:70:00:18:c4:55:f8:2e:3f:13:9e:cf:
                    9b:02:37:f0:1f:46:ce:a0:ea:e1:c2:b5:95:3d:f2:
                    d4:dc:15:4f:a2:18:06:10:4d:d3:85:b5:6a:a0:25:
                    1c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EC:AB:EB:AA:B8:70:3C:77:00:66:17:7F:D8:45:E0:7F:B3:27:4C
            X509v3 Authority Key Identifier:
                keyid:BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:89:de:fe:da:b1:fd:06:44:d2:62:22:6d:7c:46:6c:c5:6d:
         c3:81:10:66:63:8e:d6:b0:63:f2:70:53:a9:6f:c7:0d:ce:c5:
         4e:8b:a1:45:c8:84:1b:54:82:23:42:3b:92:f5:de:83:5f:e2:
         48:47:ce:45:73:6f:3f:34:af:0f:86:8c:07:05:87:38:73:39:
         ab:7c:07:b0:26:59:9a:ab:e1:77:68:66:94:f4:46:b9:3a:f8:
         d2:2b:3b:05:1b:44:5a:2c:99:1d:86:6f:3b:5f:b1:ab:b7:b2:
         b4:63:9f:9d:c3:0a:ec:2b:df:ad:da:d3:62:8a:5b:f2:4a:1e:
         c0:c7:5e:8a:db:6f:7e:54:b1:ff:c6:3d:56:20:7d:fb:73:c4:
         f1:df:d9:33:b1:63:4b:41:54:10:14:a5:ba:2e:13:42:44:c7:
         d6:34:b5:1a:11:7f:64:c7:c1:08:88:d3:cd:83:1a:c4:2c:c6:
         83:31:60:5f:77:ee:80:6c:9d:60:67:82:d9:72:4d:91:d7:c3:
         53:b3:b5:e8:da:a8:64:4a:5a:db:bf:f0:7c:0d:8b:b7:26:f9:
         e0:55:be:3a:83:47:b0:92:e2:6e:da:6a:46:c7:a8:4d:db:e8:
         74:ad:c2:c5:29:a2:15:d0:77:8e:cd:02:df:d7:26:d8:dc:92:
         a1:3d:c9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:34:54 2024 by rpki-client on console-ams.rpki-client.org