Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa
File:                     3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (raw, json)
Hash identifier:          DXanr9rCtx6i+k0G2tD3+Tmn8iY0iPRqbe6UxiR1gjo=
Subject key identifier:   AC:A6:47:A7:F6:41:EC:0E:A2:CB:29:E1:08:8F:29:62:43:E0:49:01
Certificate issuer:       /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
Certificate serial:       3FC4ED9E8D98D96F5E423D4CC84466B6E9FA2270
Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa
Signing time:             Sun 07 Jul 2024 05:00:01 +0000
ROA not before:           Sun 07 Jul 2024 04:55:01 +0000
ROA not after:            Sun 06 Jul 2025 05:00:01 +0000
asID:                     138881
IP address blocks:        103.140.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl
                          rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c4:ed:9e:8d:98:d9:6f:5e:42:3d:4c:c8:44:66:b6:e9:fa:22:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
        Validity
            Not Before: Jul  7 04:55:01 2024 GMT
            Not After : Jul  6 05:00:01 2025 GMT
        Subject: CN=ACA647A7F641EC0EA2CB29E1088F296243E04901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a6:56:9c:f9:74:67:73:5f:8f:66:89:04:e0:
                    f6:42:5f:c7:9f:28:f7:f1:05:d4:14:00:dc:2a:e7:
                    36:26:09:f7:90:9e:0f:c0:25:53:30:f4:c9:93:6e:
                    b2:4f:72:0d:28:aa:aa:26:c6:3f:85:1b:13:3e:bf:
                    45:b5:be:81:0f:b4:7b:7a:6e:2a:53:1a:17:62:6c:
                    4f:4e:8e:1a:1c:87:b3:ef:6a:9f:d4:96:80:fd:46:
                    cf:91:4b:9b:db:33:55:9d:60:13:ed:c1:f8:cf:46:
                    06:f1:e7:ea:31:da:b6:64:4b:36:6d:2c:b5:7a:85:
                    36:ac:91:29:58:c5:ea:5a:7c:ed:61:f6:7d:5a:e9:
                    9d:1f:28:e3:0e:ec:53:e7:d1:d7:c6:75:27:a7:3c:
                    9b:f4:9d:35:bf:49:20:d4:42:d5:e2:e2:44:71:37:
                    e5:34:36:bd:27:6b:01:b2:45:4e:c3:af:31:c5:9f:
                    1c:7e:87:3d:78:30:c8:6a:de:e9:01:d5:70:b1:6b:
                    c1:47:fe:d5:ea:e5:1a:2d:18:63:00:56:da:6d:a6:
                    82:3a:ef:b2:2e:5b:18:35:77:a7:03:1a:a4:cc:28:
                    0b:e0:3c:3a:ab:8e:6c:78:c3:be:12:88:a0:06:d1:
                    70:8e:08:84:cd:9f:38:39:57:60:64:a3:81:a0:f3:
                    14:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A6:47:A7:F6:41:EC:0E:A2:CB:29:E1:08:8F:29:62:43:E0:49:01
            X509v3 Authority Key Identifier:
                keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:6d:53:65:bc:c8:34:2e:6b:b0:58:61:18:85:03:c7:d9:fc:
         16:e7:1d:e5:89:d2:62:fc:f4:3d:9c:53:3c:6b:c1:e2:84:85:
         b9:86:f9:49:c0:2a:d6:5c:8a:3f:c6:56:f7:58:59:ec:f2:dd:
         79:24:a2:3d:75:c5:c0:26:b8:f5:17:2b:2f:f4:14:05:29:f0:
         16:66:f7:f6:11:ff:7b:3c:eb:7f:73:87:63:2f:5e:9b:76:10:
         b1:4f:fc:bb:3b:39:3b:e8:19:0f:ae:19:aa:47:5a:ec:e1:5d:
         a9:80:be:53:2e:ac:dd:34:ec:dd:ed:4d:71:5c:98:1c:be:d5:
         31:07:22:9b:7d:ad:ea:1f:40:b8:e3:43:89:1f:a0:58:21:4d:
         00:19:93:7a:68:b4:c0:fe:b0:e8:c4:37:8c:5d:68:d9:76:a2:
         19:5e:e0:18:69:d6:ec:5b:a2:09:dc:15:a1:33:63:a2:29:73:
         b0:e9:1e:a3:e4:38:1f:ae:7e:60:3b:46:77:f6:7b:c0:9f:65:
         40:dd:f8:40:ff:58:db:ae:f6:6d:71:18:99:cc:a9:13:4f:59:
         81:86:bf:3b:c0:cf:07:f6:bb:05:a2:cf:7e:99:fe:b9:00:74:
         d5:10:25:c0:ac:be:70:1e:7a:e1:a3:93:be:63:3f:ef:75:5b:
         eb:3d:2d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org