Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa
File:                     3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa (raw, json)
Hash identifier:          beOgJqF9SR6yAMoG/prCpBhIFQxOYIlEjQwipXSEGTQ=
Subject key identifier:   4E:36:8B:37:79:87:09:1A:9D:F9:1F:04:A3:06:75:39:8C:CC:1C:93
Certificate issuer:       /CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86
Certificate serial:       665BAA7D33D4C828CE6E6893022AE4B0A27BA857
Authority key identifier: B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa
Signing time:             Mon 31 Jul 2023 00:06:19 +0000
ROA not before:           Mon 31 Jul 2023 00:01:19 +0000
ROA not after:            Mon 29 Jul 2024 00:06:19 +0000
asID:                     138096
IP address blocks:        103.124.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl
                          rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Mar 2024 16:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5b:aa:7d:33:d4:c8:28:ce:6e:68:93:02:2a:e4:b0:a2:7b:a8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86
        Validity
            Not Before: Jul 31 00:01:19 2023 GMT
            Not After : Jul 29 00:06:19 2024 GMT
        Subject: CN=4E368B377987091A9DF91F04A30675398CCC1C93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:8b:2a:7c:e1:20:f6:48:f4:66:aa:cc:ee:
                    02:43:25:3e:a1:30:03:47:b9:e5:40:6a:0c:41:ec:
                    bf:0b:41:25:b9:6d:75:cb:47:09:60:4d:1c:0e:cc:
                    ab:06:ba:72:16:ea:28:a4:a5:52:47:3d:82:d2:a6:
                    62:57:0a:53:72:b5:cd:ab:d3:80:5c:62:29:31:26:
                    76:63:2a:6c:7e:e5:b8:6f:88:cb:13:81:da:fd:5e:
                    62:38:83:5a:1a:35:3f:ff:98:d6:6a:ff:40:5d:aa:
                    ac:20:c0:aa:dd:97:8e:8b:f8:36:53:f7:bb:b9:dd:
                    dd:e4:00:e3:a8:0b:6b:21:50:79:f5:23:19:5f:94:
                    7b:d2:e9:12:ff:c0:86:77:c6:da:b0:f7:f0:5b:69:
                    78:6b:91:13:0e:a9:a0:8f:be:51:87:32:76:33:88:
                    ac:a4:6a:5b:35:3d:0d:8e:81:e5:62:40:d4:62:2f:
                    4c:b1:b0:79:ee:aa:48:c8:68:e7:c0:e4:86:4c:ab:
                    09:55:d6:ab:99:0f:11:35:cc:e9:b2:74:48:5f:b2:
                    7d:aa:16:df:fb:da:50:de:85:4d:68:b0:7f:be:2d:
                    14:c5:cf:03:f9:b8:3e:64:c8:7b:c6:71:b7:ef:2c:
                    ad:32:d8:60:f9:98:4c:e1:62:18:23:a1:06:3e:d6:
                    ea:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:36:8B:37:79:87:09:1A:9D:F9:1F:04:A3:06:75:39:8C:CC:1C:93
            X509v3 Authority Key Identifier:
                keyid:B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:f8:6b:5f:65:11:5e:65:27:91:c1:16:13:38:98:00:b6:a5:
         0b:e8:97:10:b7:97:4a:eb:e7:10:42:47:e2:1a:1d:63:8d:73:
         75:85:c7:2c:cf:73:69:bc:d7:5d:c0:18:74:6a:54:b2:2b:06:
         83:fa:d7:48:f5:7d:88:68:09:21:6e:ba:a0:bf:be:3b:c9:41:
         63:8a:49:b6:d1:e0:0d:f9:ea:75:06:e9:97:e3:90:a1:d0:9a:
         6e:d2:42:4d:a9:68:f0:50:13:f0:3d:ab:c0:1f:41:86:d4:51:
         3f:0b:e1:c7:75:d2:8f:d8:b6:df:9a:d9:95:cf:80:89:01:d8:
         ae:c1:28:0f:2d:d9:8f:51:85:57:66:a2:81:ad:04:94:ba:f3:
         96:dc:3e:74:5a:33:d6:c4:0e:4b:da:b3:71:87:af:f6:2b:a4:
         fe:93:7b:dc:cc:1b:8c:6c:4f:d7:e0:fd:b7:23:50:bc:b8:08:
         ee:b6:ae:db:f3:18:a1:f5:45:f2:28:5f:e7:50:b4:ea:4f:48:
         b3:5e:1a:92:27:f3:6c:26:22:1f:0c:ab:42:ad:fa:89:c9:87:
         5f:f2:92:1d:15:8e:9e:7d:83:1d:56:99:af:85:8d:0c:e6:d9:
         b2:88:39:67:26:65:ea:b7:4a:24:21:00:64:1a:00:6d:f3:82:
         f1:d2:0f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 21:01:35 2024 by rpki-client on console-fra.rpki-client.org