Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/3130332e3132362e382e302f32322d3234203d3e20313338313036.roa
File:                     3130332e3132362e382e302f32322d3234203d3e20313338313036.roa (raw, json)
Hash identifier:          CFj+K+liKZAqcSf36DIkxqcEF84Z38vPTkYjTuanCG4=
Subject key identifier:   61:98:66:6F:23:B5:D1:C7:E3:10:6E:0A:1E:5A:D8:1E:FA:8E:6E:2F
Certificate issuer:       /CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15
Certificate serial:       42CBF517E00FEFBF1E794370D741ED470DF52C67
Authority key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/3130332e3132362e382e302f32322d3234203d3e20313338313036.roa
Signing time:             Mon 01 Jul 2024 01:06:02 +0000
ROA not before:           Mon 01 Jul 2024 01:01:02 +0000
ROA not after:            Mon 30 Jun 2025 01:06:02 +0000
asID:                     138106
IP address blocks:        103.126.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl
                          rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:cb:f5:17:e0:0f:ef:bf:1e:79:43:70:d7:41:ed:47:0d:f5:2c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15
        Validity
            Not Before: Jul  1 01:01:02 2024 GMT
            Not After : Jun 30 01:06:02 2025 GMT
        Subject: CN=6198666F23B5D1C7E3106E0A1E5AD81EFA8E6E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:40:3a:3b:24:31:ce:98:5d:d8:6b:79:e7:
                    94:ec:40:95:2d:af:86:4e:b1:fe:e7:75:8f:8c:4a:
                    4c:2e:87:21:93:28:82:30:9f:60:8d:4c:5b:7c:c3:
                    28:4c:4b:9d:52:a5:48:9b:a1:f1:4a:be:b2:ae:10:
                    ec:b0:7d:74:cb:d6:f9:0f:76:fa:7a:a1:28:6c:58:
                    c8:c3:55:67:0a:c8:8a:a4:13:8e:25:e8:bc:a0:15:
                    3a:b1:52:ee:47:76:d7:19:ba:9e:85:fb:c4:4a:2a:
                    7e:49:fd:72:cc:4b:28:fb:85:37:1f:58:74:94:bc:
                    1c:41:16:8a:67:a2:8b:b0:9b:da:19:2f:c0:fd:13:
                    28:76:5d:d1:5f:43:11:92:a0:a9:96:c4:e8:1a:f8:
                    95:c2:96:db:78:63:7f:9c:1f:49:50:48:fd:ff:0c:
                    4a:f4:1a:9b:e8:90:66:56:5e:30:95:37:9f:2e:1b:
                    94:ca:63:86:50:e7:c0:01:d0:6e:80:75:aa:81:9f:
                    15:56:61:7d:45:f7:b0:78:6c:28:b7:d3:26:72:c5:
                    8a:71:85:9a:8a:8a:c4:2e:a1:63:1c:cf:9d:fa:8e:
                    39:38:86:47:7d:94:1e:90:29:6a:f8:0d:42:05:7f:
                    9b:1c:7f:95:d0:b1:69:53:2d:82:ae:72:3c:db:81:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:98:66:6F:23:B5:D1:C7:E3:10:6E:0A:1E:5A:D8:1E:FA:8E:6E:2F
            X509v3 Authority Key Identifier:
                keyid:25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/3130332e3132362e382e302f32322d3234203d3e20313338313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:f2:2f:0c:6d:ba:58:47:b8:d7:1c:f5:e5:ac:3a:86:f4:77:
         bc:0e:4a:9c:91:1f:ad:c3:3e:45:ba:46:95:7b:db:9d:52:5d:
         51:8b:85:ae:93:da:9b:46:bb:75:53:2b:d9:e8:9b:c7:d8:f9:
         bb:23:40:6a:e8:39:14:ed:80:43:f7:66:62:a6:60:27:92:f3:
         73:6b:44:f6:c1:20:dd:99:57:be:c0:f1:f3:ec:dc:9c:e6:18:
         a6:ff:1d:33:34:f7:d8:4f:6b:fb:5d:8c:7f:09:45:7c:03:b5:
         72:34:8f:07:b8:76:c7:9a:07:fb:70:62:c6:7f:80:3a:75:1d:
         2a:3b:50:fe:3e:c3:3d:45:76:5b:22:9f:b2:08:6f:fd:02:40:
         7b:ae:f7:67:95:80:d1:40:62:ab:40:fe:4a:eb:32:28:86:a2:
         ea:6d:5b:f2:6d:35:e8:4d:5b:df:0d:b4:d1:15:7d:59:71:e7:
         71:de:a0:73:0e:35:8f:7d:f3:70:d6:5f:42:d2:05:d9:19:1c:
         7d:75:cf:14:a6:de:00:89:4e:c2:26:cc:a8:dd:eb:5f:07:b7:
         a0:ea:5c:c7:9d:9e:35:93:d6:af:79:45:a9:74:e4:1f:45:38:
         95:8d:86:04:21:ad:be:49:28:2b:13:8d:de:78:ef:4f:e6:77:
         d0:b7:cb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:13 2024 by rpki-client on console-ams.rpki-client.org