Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa
File:                     3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (raw, json)
Hash identifier:          8AtSIkaILj5Jjp9L1lkjmD1Nc5Soqt9lgGPahck8p7c=
Subject key identifier:   DE:6E:30:7C:4F:E0:C4:D8:9E:F4:55:F0:F7:68:0D:F6:FC:F2:88:B4
Certificate issuer:       /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383
Certificate serial:       6AA836067A32A7C6BE7AFA57E276DA912EF64F66
Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa
Signing time:             Thu 16 Nov 2023 09:00:33 +0000
ROA not before:           Thu 16 Nov 2023 08:55:33 +0000
ROA not after:            Thu 14 Nov 2024 09:00:33 +0000
asID:                     136121
IP address blocks:        103.154.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl
                          rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a8:36:06:7a:32:a7:c6:be:7a:fa:57:e2:76:da:91:2e:f6:4f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383
        Validity
            Not Before: Nov 16 08:55:33 2023 GMT
            Not After : Nov 14 09:00:33 2024 GMT
        Subject: CN=DE6E307C4FE0C4D89EF455F0F7680DF6FCF288B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:f3:78:8c:9d:d2:e5:8a:e2:84:8c:49:c7:
                    ec:94:a1:b6:ad:88:6c:fa:72:18:29:11:48:41:8a:
                    7f:77:c6:2a:28:8d:fa:cc:6f:64:64:27:b3:81:f4:
                    7c:be:f7:1f:49:8f:94:f2:65:2b:98:4e:39:0e:29:
                    b2:08:0a:1c:da:7f:da:0a:d4:fc:f0:a7:37:c2:4a:
                    af:37:e7:8d:91:ba:a5:17:96:0f:62:2a:1f:bb:eb:
                    c6:f8:bd:97:5e:e8:c5:de:cb:24:2a:e0:d3:f5:98:
                    4f:8b:5d:4f:19:82:c6:bc:45:89:4c:07:1b:8a:a3:
                    17:73:8b:7e:c8:41:69:71:c6:32:f3:b0:9d:ef:ff:
                    00:74:23:9b:b0:3c:54:99:3c:4c:b8:47:28:db:d7:
                    1f:cf:2c:b4:8d:12:3b:d6:41:fa:d4:6d:62:85:42:
                    56:a0:b1:1d:6c:9b:6b:4f:d5:87:00:bb:66:21:65:
                    11:8e:6e:18:be:41:31:04:da:e1:ab:eb:c5:cb:eb:
                    1c:7d:35:12:91:10:5c:31:f1:01:40:b4:a8:ad:b6:
                    ce:f7:e1:81:87:a8:6c:78:6c:35:6c:6c:85:a6:a8:
                    34:a8:54:6a:b7:12:4d:b3:55:43:15:1a:ac:b7:c5:
                    ff:96:dc:52:2d:84:d5:4d:04:8a:66:62:11:8f:66:
                    96:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6E:30:7C:4F:E0:C4:D8:9E:F4:55:F0:F7:68:0D:F6:FC:F2:88:B4
            X509v3 Authority Key Identifier:
                keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:79:5c:42:0e:4e:a6:38:45:33:ef:3e:f8:47:30:75:28:eb:
         4b:ec:16:55:6f:be:ec:3d:fc:f7:bc:bc:55:69:ca:0f:95:56:
         f9:6a:4f:a4:4a:e8:1f:c5:09:24:9f:3a:69:2d:aa:21:bc:64:
         ee:6e:aa:e0:1d:ef:2f:d6:bb:3b:dd:3e:fc:3c:db:d7:55:40:
         c4:ee:ae:51:fd:ff:c1:68:ee:6a:12:7c:8c:8f:fb:7d:0f:13:
         d6:45:57:74:d4:41:53:e7:16:66:77:9b:45:96:d4:7b:54:e6:
         c9:1c:a2:98:9f:ed:d0:23:85:e2:4f:be:f4:52:95:80:df:0a:
         6e:9c:1d:92:7e:cb:d3:3e:14:2f:f8:9b:a4:8e:b8:ba:26:7f:
         46:29:18:03:32:2a:c9:4c:e0:4d:eb:fa:9a:e3:32:3e:76:4c:
         8c:b4:50:22:fa:eb:1d:c9:e4:f7:c7:8a:21:b8:e1:09:d9:23:
         f3:7f:31:91:ef:8f:b1:ba:97:c6:e4:c2:0f:1d:ff:38:c1:8e:
         6c:d9:91:77:11:aa:26:77:b4:4b:c0:2d:7e:89:5b:92:c4:30:
         5c:5c:ce:88:24:53:28:70:86:30:0b:8d:df:d2:f5:3d:6f:ad:
         e6:08:69:c1:78:68:e2:db:bc:9f:12:b8:93:a8:01:2b:88:e4:
         44:81:87:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:12:37 2024 by rpki-client on console-ams.rpki-client.org