Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa
File:                     3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (raw, json)
Hash identifier:          rUukeYK4Zqg4ZieNKX5lrjFSuIjsnEWDw/8/1rhOgoA=
Subject key identifier:   ED:A4:3D:B2:0E:74:52:61:0C:F5:21:EE:9A:2E:FF:BA:68:19:15:8B
Certificate issuer:       /CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7
Certificate serial:       5595397FA725798AE96F4560DC3FF2991A25D0F7
Authority key identifier: 6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa
Signing time:             Tue 31 Oct 2023 00:40:52 +0000
ROA not before:           Tue 31 Oct 2023 00:35:52 +0000
ROA not after:            Tue 29 Oct 2024 00:40:52 +0000
asID:                     45701
IP address blocks:        103.156.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl
                          rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:95:39:7f:a7:25:79:8a:e9:6f:45:60:dc:3f:f2:99:1a:25:d0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7
        Validity
            Not Before: Oct 31 00:35:52 2023 GMT
            Not After : Oct 29 00:40:52 2024 GMT
        Subject: CN=EDA43DB20E7452610CF521EE9A2EFFBA6819158B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:86:f7:3b:aa:b9:62:1b:0e:14:9d:11:c1:
                    bb:f7:7a:8e:af:87:ad:ca:1f:01:94:8c:f7:c5:43:
                    32:92:2c:04:3a:c1:a5:b4:4f:f8:db:01:04:60:86:
                    3f:69:9b:2a:93:ab:13:68:8c:42:0d:ae:45:0c:67:
                    dd:c4:60:47:db:83:9b:05:5b:b8:f4:18:b5:0e:dd:
                    27:c7:e0:6f:54:a1:7c:35:10:52:a9:e8:38:50:71:
                    78:86:b7:57:58:1c:26:27:d8:d9:b6:0c:8f:b2:90:
                    9d:3e:55:cc:d2:4d:1d:ad:8b:73:0a:99:c4:f3:06:
                    f1:e0:43:83:d9:5d:c2:4e:84:1f:c1:c0:f0:38:56:
                    42:76:45:f0:28:df:1f:45:27:31:a8:e3:19:8f:4b:
                    a3:4e:65:6f:dd:7b:b0:43:6e:4d:87:4c:66:2f:58:
                    28:20:1c:38:d7:4b:f9:ff:16:49:90:7b:c3:dd:7a:
                    ee:04:60:bf:6b:b0:48:61:15:27:04:c8:1f:08:c6:
                    15:da:59:c0:7d:27:59:8d:e8:84:c2:9a:ea:33:3c:
                    29:86:36:d9:0d:12:82:41:7e:f5:9b:5a:db:de:08:
                    91:3e:83:21:9b:ad:1f:56:16:cb:97:2b:ce:f7:ae:
                    5c:d6:b9:f1:2e:10:3c:b9:e7:40:13:2c:fc:ca:5f:
                    db:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A4:3D:B2:0E:74:52:61:0C:F5:21:EE:9A:2E:FF:BA:68:19:15:8B
            X509v3 Authority Key Identifier:
                keyid:6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:d9:cf:ee:de:f2:10:04:53:56:30:df:2f:b2:42:1e:44:a6:
         4a:2a:22:dd:d4:c9:77:03:17:44:73:d9:da:af:37:11:68:34:
         b0:26:0a:ce:5c:0d:cd:72:4b:d2:71:92:1a:2d:fd:00:2a:bd:
         ad:1f:03:37:62:ea:53:8a:43:5f:3d:00:35:65:c5:a4:14:04:
         6c:d4:3e:67:de:d7:cc:b4:fb:b2:de:e9:a4:0d:59:9b:07:91:
         bc:b7:b6:db:b3:e2:9e:7f:4f:94:bb:b0:c1:6a:a7:54:eb:c3:
         49:ac:05:3b:ea:60:90:20:38:64:f7:c8:83:8b:c2:f6:0b:c9:
         dc:f6:6e:73:36:0e:ea:89:30:36:b1:2d:ee:af:05:1a:ea:c0:
         94:8f:4b:a1:0a:9a:b4:9a:15:02:4e:f9:72:8d:2f:b7:fc:52:
         40:16:83:82:10:be:8d:d1:37:41:30:37:98:d4:e0:f2:50:fe:
         46:e5:1f:9e:1a:92:62:85:c7:14:2b:23:ca:80:47:10:ad:2d:
         17:ab:07:26:e8:6a:26:48:0b:fd:cd:f2:66:9b:5b:50:1e:d9:
         e6:47:29:88:41:9a:2f:24:f2:06:df:a1:5a:a0:37:e3:68:24:
         5d:e3:6f:cc:31:4a:89:59:92:ef:e0:f0:26:1a:93:04:eb:47:
         c0:17:0c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:20:10 2024 by rpki-client on console-ams.rpki-client.org