Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa
File:                     3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (raw, json)
Hash identifier:          vVvUq1BM4IXJnjUjaJzrbJtppGiuFcpZIMf5EXy+aBk=
Subject key identifier:   F7:06:66:4E:83:95:C4:89:A0:52:B2:28:E7:60:5B:C5:0E:60:B5:73
Certificate issuer:       /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383
Certificate serial:       55767029E68CE521EA65F036BA706C6B35BD7539
Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa
Signing time:             Thu 16 Nov 2023 10:00:01 +0000
ROA not before:           Thu 16 Nov 2023 09:55:01 +0000
ROA not after:            Thu 14 Nov 2024 10:00:01 +0000
asID:                     136121
IP address blocks:        103.154.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl
                          rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:76:70:29:e6:8c:e5:21:ea:65:f0:36:ba:70:6c:6b:35:bd:75:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383
        Validity
            Not Before: Nov 16 09:55:01 2023 GMT
            Not After : Nov 14 10:00:01 2024 GMT
        Subject: CN=F706664E8395C489A052B228E7605BC50E60B573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cd:2d:26:33:45:e1:b4:e8:ad:fb:7c:62:fd:
                    e6:fd:8f:3c:94:0a:f5:bc:2d:01:00:9f:bb:69:20:
                    55:fd:8d:14:2e:1e:ca:60:ec:ab:27:e2:ec:e8:e2:
                    e1:79:91:e7:fa:fc:d2:98:f3:d7:d7:b5:73:4b:98:
                    b1:fd:65:e3:6b:98:6c:a1:39:1d:b2:34:26:9f:c5:
                    78:f0:26:cf:9d:c3:fa:61:32:bf:64:1f:e3:e5:9e:
                    8c:b8:2e:bf:da:76:ac:bc:7b:ea:1e:f7:c1:4a:59:
                    6f:60:84:24:c7:34:b1:57:f9:20:f6:62:63:d4:ed:
                    20:19:83:3f:d5:0a:14:32:f3:26:8b:c1:d7:4b:12:
                    17:57:e4:64:cc:2a:b7:02:0d:d7:72:74:f7:76:d6:
                    b7:a7:2d:4a:52:46:a5:f8:14:b2:f2:06:d0:b7:66:
                    3d:05:13:96:c0:a6:ba:47:9f:58:c0:3c:72:a8:f1:
                    d0:f3:2b:34:9c:f9:d1:ef:cb:2e:7e:6c:38:37:ed:
                    8b:49:d7:25:af:06:34:f7:57:70:cc:12:bf:52:38:
                    38:73:ba:35:1c:40:df:e8:3c:7a:18:fb:60:f7:c5:
                    4c:ff:87:6d:02:39:09:e4:11:46:18:ad:6a:77:b2:
                    86:19:c6:82:5f:6f:f0:23:8f:ac:2b:3e:5e:bd:e2:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:06:66:4E:83:95:C4:89:A0:52:B2:28:E7:60:5B:C5:0E:60:B5:73
            X509v3 Authority Key Identifier:
                keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:eb:a4:e2:92:6f:fc:9b:51:52:ef:3b:65:b0:0f:37:9b:fd:
         5a:c2:ff:ee:7a:a6:0b:44:d1:a8:49:71:0c:3b:fa:74:71:59:
         da:8f:c8:53:44:95:a6:a1:7b:05:38:e1:96:3d:54:89:eb:c9:
         6c:6c:6d:15:7c:e5:da:65:7c:44:b9:c8:c0:5b:44:7a:47:6b:
         51:3a:9b:d6:08:cd:6e:14:59:20:63:0d:ba:56:3e:b1:9c:0d:
         17:d2:e5:36:fb:97:2f:28:b4:7a:85:4b:c5:3b:80:0e:80:e9:
         ac:58:32:3e:3f:7a:8e:43:dd:00:a0:1a:27:0a:dc:f8:ad:a4:
         e5:26:ed:d0:75:e8:61:19:88:a6:e4:49:ca:fb:18:b9:0c:a5:
         9e:46:6f:e3:9d:cc:5b:0e:1f:bd:20:e6:70:d3:6c:d4:0a:12:
         a0:9c:4f:ee:3d:d2:b9:85:04:ec:db:99:9a:10:93:d3:d1:fc:
         39:c2:67:ec:b2:ca:c0:33:2e:28:07:60:0a:48:82:86:a9:6b:
         14:d2:67:3c:28:47:b6:60:ee:01:40:f0:ff:ad:67:c8:79:d2:
         4e:29:a8:c6:61:f4:7d:64:79:ed:83:c2:cc:da:a1:47:ab:23:
         24:d3:3a:73:fd:fc:a9:ca:49:7a:2e:52:71:72:7c:6c:81:dc:
         fb:d8:18:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:54 2024 by rpki-client on console-fra.rpki-client.org