Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa
File:                     3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa (raw, json)
Hash identifier:          MyyHAf7985s2kxyxSU9s4YJu7rUlw3VFFCZcdksfFgo=
Subject key identifier:   0E:35:08:80:DE:FB:7A:65:C1:4D:F7:BA:14:E7:0E:13:7F:B2:86:17
Certificate issuer:       /CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337
Certificate serial:       738616296CEDEFF1F3A586F0C9B4AD7150FD0F88
Authority key identifier: BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa
Signing time:             Mon 31 Jul 2023 00:02:28 +0000
ROA not before:           Sun 30 Jul 2023 23:57:28 +0000
ROA not after:            Mon 29 Jul 2024 00:02:28 +0000
asID:                     141056
IP address blocks:        103.155.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl
                          rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:86:16:29:6c:ed:ef:f1:f3:a5:86:f0:c9:b4:ad:71:50:fd:0f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337
        Validity
            Not Before: Jul 30 23:57:28 2023 GMT
            Not After : Jul 29 00:02:28 2024 GMT
        Subject: CN=0E350880DEFB7A65C14DF7BA14E70E137FB28617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:06:31:94:8f:ad:02:1a:ae:fc:95:b2:83:
                    75:d6:25:14:37:6e:ef:f8:aa:b5:88:f5:6c:20:de:
                    59:0d:0e:9b:8b:96:45:f3:fd:f1:11:9d:2e:ba:08:
                    33:f4:db:39:0d:71:06:98:b8:0d:14:46:11:20:17:
                    bd:91:fc:c8:58:cb:20:7b:b9:f2:9c:39:37:42:fa:
                    59:e3:d3:bd:13:00:49:21:4e:68:11:e4:b6:72:9d:
                    ed:bc:59:2a:36:b1:85:d7:4d:16:44:01:86:5a:55:
                    08:4e:ff:76:a1:72:42:b9:84:0a:f5:b9:9e:25:8f:
                    8b:03:c2:4f:1b:5f:a6:25:8b:7b:f1:cf:b2:d9:d3:
                    df:ce:dd:9a:27:30:85:95:b2:9d:6d:c6:56:b1:39:
                    16:db:26:ff:ee:7e:ce:bb:fc:26:1a:ae:24:74:ab:
                    e8:c8:e0:40:9d:2e:3e:70:04:e7:bb:9c:14:b3:64:
                    d2:63:0d:ea:71:db:2e:78:07:81:1b:a2:34:ed:78:
                    10:74:8b:13:ca:89:75:f6:db:24:7d:12:17:4f:57:
                    79:6d:64:49:9f:43:34:32:fa:9a:56:20:b0:c9:de:
                    11:06:e5:13:2c:22:bc:cc:73:91:f1:0d:3c:09:0e:
                    89:74:12:48:f5:f0:aa:56:cd:71:51:36:44:e6:5d:
                    32:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:35:08:80:DE:FB:7A:65:C1:4D:F7:BA:14:E7:0E:13:7F:B2:86:17
            X509v3 Authority Key Identifier:
                keyid:BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:d9:da:ca:97:a2:ce:49:75:db:81:38:95:8f:98:25:3d:4b:
         6f:ad:20:d2:7e:40:71:30:cc:d4:5f:0a:1d:15:7e:2a:be:1f:
         13:0a:52:05:50:72:58:92:74:4c:24:07:b4:49:4e:ab:44:3a:
         54:c4:11:b3:df:00:9d:64:1f:44:06:9d:90:8c:cd:77:52:04:
         b6:9e:10:60:ff:fe:fe:fe:72:df:8f:1a:8b:94:b4:f2:e0:36:
         44:f2:e4:9f:e3:22:c3:e9:d9:45:47:87:9d:10:31:77:e2:46:
         9c:ac:9e:69:6d:e2:5d:dc:47:42:54:cc:65:98:6a:da:a5:08:
         56:1e:55:62:8a:a6:ee:02:92:67:8d:ec:aa:c5:f4:e4:7b:41:
         b4:a9:f2:37:39:3b:7b:90:19:3d:28:30:02:33:e6:25:78:96:
         95:14:a3:a9:03:61:45:74:85:b2:79:e4:f3:75:2e:d4:95:65:
         09:15:14:da:75:75:39:e1:84:db:d2:b2:2b:e3:3a:91:a5:c1:
         7d:b9:11:58:73:94:54:8c:eb:06:95:f6:21:3d:a9:35:53:c5:
         73:83:c6:19:ae:c7:37:d9:3b:81:45:52:47:d9:8e:0f:b6:68:
         1d:2d:13:6f:31:35:3f:df:4f:f8:a7:76:3f:68:b6:5b:ff:4e:
         ed:c6:ae:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:34:54 2024 by rpki-client on console-ams.rpki-client.org