Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/3130332e3132342e3139372e302f32342d3234203d3e20313338303936.roa
File:                     3130332e3132342e3139372e302f32342d3234203d3e20313338303936.roa (raw, json)
Hash identifier:          AuU61d37uBYIcf0AJoVtiaY8h70nxtuMJPo5x578oC0=
Subject key identifier:   1B:5F:CC:FC:99:9A:A6:85:AF:DF:C4:E9:F4:4A:E5:CD:B5:C8:5E:15
Certificate issuer:       /CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86
Certificate serial:       2E542045EEAD295D86076F603E61B45DF338D678
Authority key identifier: B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/3130332e3132342e3139372e302f32342d3234203d3e20313338303936.roa
Signing time:             Mon 31 Jul 2023 00:06:19 +0000
ROA not before:           Mon 31 Jul 2023 00:01:19 +0000
ROA not after:            Mon 29 Jul 2024 00:06:19 +0000
asID:                     138096
IP address blocks:        103.124.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl
                          rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 13:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:54:20:45:ee:ad:29:5d:86:07:6f:60:3e:61:b4:5d:f3:38:d6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86
        Validity
            Not Before: Jul 31 00:01:19 2023 GMT
            Not After : Jul 29 00:06:19 2024 GMT
        Subject: CN=1B5FCCFC999AA685AFDFC4E9F44AE5CDB5C85E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d2:a0:88:fe:7f:da:48:08:fa:bc:c0:27:7f:
                    77:a1:f8:f7:6f:e1:21:ac:df:f3:e1:11:c8:c4:b5:
                    15:c1:20:08:9e:18:d8:b5:89:60:e3:b8:50:5c:d0:
                    0d:89:31:17:c6:ad:f8:ae:50:90:bc:fd:92:f7:23:
                    22:e5:29:34:3f:7c:58:65:25:da:6b:8f:51:f8:e2:
                    4a:86:20:21:6e:95:b1:00:6c:1e:37:16:67:d9:e1:
                    a7:89:09:cc:03:c2:8a:0d:5c:cf:e8:3d:f6:a1:2e:
                    50:69:aa:f6:b3:8d:cd:8c:49:26:0a:c4:5e:d0:f0:
                    a4:ff:95:85:aa:16:4c:a4:cc:6b:02:06:f2:95:9e:
                    e3:43:1d:0e:84:dc:a0:3e:b8:98:94:3d:2a:a6:d7:
                    90:78:c6:d5:89:c1:7c:3c:cb:ac:c6:c5:1b:62:cd:
                    63:44:1d:d7:36:5c:b8:aa:1d:ed:8b:b6:b9:b3:e2:
                    9a:3d:3d:2b:38:14:1e:b4:1d:9c:1a:9e:07:98:79:
                    7c:fc:39:11:f1:bf:36:65:da:cc:e6:86:0d:d6:cb:
                    5b:09:d0:e2:d2:9d:cc:57:d9:02:ee:24:38:da:b1:
                    7e:00:63:a8:13:f4:c5:cc:fd:40:54:55:60:7d:b4:
                    c3:90:d5:bc:01:17:da:af:76:68:c5:99:79:9d:fe:
                    ea:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5F:CC:FC:99:9A:A6:85:AF:DF:C4:E9:F4:4A:E5:CD:B5:C8:5E:15
            X509v3 Authority Key Identifier:
                keyid:B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/3130332e3132342e3139372e302f32342d3234203d3e20313338303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:1a:df:8d:9f:1c:ee:b3:11:22:83:ec:b8:fb:d5:a2:50:1b:
         9a:6f:92:de:19:b3:c3:fa:02:fe:f2:b8:18:46:b4:0d:3b:dd:
         52:88:5a:d7:bd:01:9e:9f:74:52:46:66:4b:74:12:64:ab:db:
         9f:ca:3a:e9:26:9d:8a:92:34:e6:f8:ab:e7:cc:1e:0b:f2:d2:
         c0:dc:b6:7a:e2:b2:19:44:30:64:78:fc:b3:ce:e6:9e:2c:d2:
         1c:21:ea:19:33:34:97:5c:03:7a:3f:33:3a:b7:11:69:0e:fb:
         ff:11:ab:4d:ff:68:65:25:0d:5d:e4:c3:6c:ed:4c:e2:23:69:
         e7:15:f4:bb:d0:d9:97:3e:e6:b9:30:6a:1e:36:27:4f:1d:18:
         21:b9:f6:f9:22:b0:13:74:dc:9a:46:40:37:bd:66:64:19:70:
         a7:37:c0:f3:51:ef:db:23:3b:b8:cf:50:20:c7:2c:78:09:64:
         90:77:e8:78:85:69:95:ac:cb:56:7f:60:bf:0a:14:b4:34:ea:
         2a:40:e8:6c:32:91:52:69:21:b6:db:b3:37:3e:0a:74:c5:a4:
         09:b0:5e:c3:67:85:32:09:4d:bd:c5:2d:33:00:7f:cb:54:e1:
         87:ea:89:1e:f5:ca:4e:19:2d:19:6b:14:a5:92:5e:6f:3a:3f:
         52:9d:cc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:30:51 2024 by rpki-client on console-fra.rpki-client.org