Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa
File:                     3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (raw, json)
Hash identifier:          0+qcXyOM459GvXr11ILbIyaO+4mOEJI08TRNe5Oxh/A=
Subject key identifier:   1B:87:A3:B8:EF:31:B4:FC:87:BD:78:25:12:DA:C3:81:F8:21:6E:AA
Certificate issuer:       /CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768
Certificate serial:       0EB18AF9D3AB35125C25FB4D3736BFA407E98B0E
Authority key identifier: 9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa
Signing time:             Mon 31 Jul 2023 00:03:06 +0000
ROA not before:           Sun 30 Jul 2023 23:58:06 +0000
ROA not after:            Mon 29 Jul 2024 00:03:06 +0000
asID:                     138115
IP address blocks:        103.126.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl
                          rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 16:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b1:8a:f9:d3:ab:35:12:5c:25:fb:4d:37:36:bf:a4:07:e9:8b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768
        Validity
            Not Before: Jul 30 23:58:06 2023 GMT
            Not After : Jul 29 00:03:06 2024 GMT
        Subject: CN=1B87A3B8EF31B4FC87BD782512DAC381F8216EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:96:de:d6:a7:50:ba:5b:86:ec:d5:71:8d:1c:
                    76:8e:56:e6:10:3d:d7:5d:26:fd:06:c6:07:78:3c:
                    e1:5b:36:b7:b6:27:23:f2:cc:79:5d:c9:0f:5d:01:
                    bc:bc:ac:ca:03:f9:72:2b:67:61:19:84:3b:4d:68:
                    26:5a:e2:6a:b5:8f:a6:83:62:be:90:55:5d:81:5e:
                    cf:97:5f:3e:93:22:58:cc:a0:f7:4f:45:79:aa:d0:
                    a4:12:f9:bf:7c:c2:ec:a5:23:51:70:87:24:65:15:
                    7b:9a:c1:03:34:f8:16:67:a4:14:1f:ec:35:da:c1:
                    21:1a:c9:21:7b:39:01:6c:cc:47:1d:cb:71:3d:e1:
                    c4:06:54:d6:d8:25:2f:7d:e0:f4:91:71:2f:13:90:
                    0f:ba:14:e2:cd:fa:4c:2f:d9:e1:9d:5a:89:a7:d4:
                    b9:a4:8b:51:fb:b5:2b:1e:d1:4f:18:7b:05:9e:31:
                    fc:9d:54:f1:13:bb:e2:28:d7:e8:2e:65:19:9b:db:
                    27:83:54:2f:2c:92:a1:4b:e3:9b:cd:b9:85:1a:85:
                    f6:12:8d:c6:33:cb:69:a0:89:c8:d3:d9:d4:46:da:
                    a5:ad:23:d4:dc:09:5f:6c:b9:76:b5:64:5c:80:0b:
                    d0:ed:5e:ef:1b:8b:f9:cb:45:06:8a:96:c6:94:7e:
                    b3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:87:A3:B8:EF:31:B4:FC:87:BD:78:25:12:DA:C3:81:F8:21:6E:AA
            X509v3 Authority Key Identifier:
                keyid:9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:a5:41:2f:04:5f:ad:b6:cc:6e:0b:68:c7:9b:b9:a2:f2:82:
         66:b4:46:29:39:d9:40:05:cb:c6:a2:5e:17:c4:11:23:56:d1:
         33:34:7a:51:4b:10:d3:a1:d3:c0:19:d5:e1:27:69:6f:86:71:
         b2:f2:06:46:7f:a8:cf:ee:63:91:72:ba:37:c5:8c:75:8b:03:
         ee:26:7c:58:8f:43:d1:6d:2f:90:11:ff:74:dc:2c:50:2d:55:
         2d:fd:3f:b2:dc:6c:0c:06:9c:0b:0f:46:eb:6e:b7:0a:21:44:
         69:d6:b5:ad:2a:6f:a9:c3:12:dd:a7:20:d4:a1:b6:fe:c5:ce:
         39:88:48:bc:a2:cc:3f:4c:6b:74:ac:ec:ba:49:a5:13:31:95:
         ad:83:36:e5:ba:34:2f:0a:7b:fa:8d:0d:fa:f3:25:bc:37:3d:
         f0:e0:cb:64:36:d3:8a:ae:46:3a:39:f8:1a:93:fa:76:e8:5c:
         fa:2c:ff:d3:f1:2e:86:d1:9c:f3:fb:12:a5:31:45:91:c2:6a:
         58:ad:39:b8:01:4b:be:85:47:b9:75:9d:4b:84:a2:8d:b5:f4:
         ab:e5:a1:a9:4d:ff:12:14:56:2e:fa:bf:c4:b7:18:3a:f0:e9:
         39:df:a1:5b:83:23:d6:e1:4e:71:d6:a9:0c:0a:f5:92:ab:41:
         84:0f:52:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 23:03:29 2024 by rpki-client on console-fra.rpki-client.org