Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa
File:                     3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa (raw, json)
Hash identifier:          u1lfWy0MDbubQseV6f0yVaeg4S5wTkc4cbrHCMmY4Yw=
Subject key identifier:   C9:45:52:3E:49:D3:84:BA:BC:CC:6F:F3:3D:9E:B0:C0:66:36:42:7D
Certificate issuer:       /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
Certificate serial:       0B94B675F13F7D838E74A582AFD7BE39A125D82C
Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa
Signing time:             Fri 26 Jul 2024 02:00:45 +0000
ROA not before:           Fri 26 Jul 2024 01:55:45 +0000
ROA not after:            Fri 25 Jul 2025 02:00:45 +0000
asID:                     137330
IP address blocks:        103.112.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl
                          rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:94:b6:75:f1:3f:7d:83:8e:74:a5:82:af:d7:be:39:a1:25:d8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
        Validity
            Not Before: Jul 26 01:55:45 2024 GMT
            Not After : Jul 25 02:00:45 2025 GMT
        Subject: CN=C945523E49D384BABCCC6FF33D9EB0C06636427D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0b:a9:bf:e6:0f:a8:1f:bb:ef:fd:61:a0:71:
                    7d:ad:f2:05:72:93:eb:3c:90:b7:4b:56:9c:aa:92:
                    1c:76:da:42:54:40:75:1e:86:2a:63:0e:d2:dc:ba:
                    c0:2d:40:a9:48:3f:bc:90:3f:07:53:1e:11:c3:d2:
                    67:5d:3f:37:66:e1:44:b9:b5:1e:a3:1d:bb:7c:6b:
                    f0:c5:55:e9:79:56:4c:16:6d:77:7f:6c:75:2b:3b:
                    00:fd:4b:44:10:00:31:5a:42:81:86:a7:94:ee:fa:
                    27:6a:36:bb:61:42:2e:1d:38:af:d5:d1:d9:75:9f:
                    d8:08:06:e2:1c:5c:d0:7b:aa:bc:59:07:c8:f4:03:
                    fc:8b:bf:0f:11:4e:fc:82:7f:5f:4d:57:e7:c0:ec:
                    11:8f:04:9d:e4:d7:d9:b4:7e:f9:92:3d:88:52:9e:
                    b7:4d:73:13:42:eb:0e:bc:86:7b:88:45:f0:55:08:
                    60:8a:bc:4c:4d:fb:05:a3:61:38:63:8f:3c:ab:36:
                    b4:84:27:f6:9c:8f:b5:38:cb:f5:b8:7a:81:f1:e9:
                    c6:a1:8b:34:fd:8f:09:72:79:ee:07:4f:68:3a:be:
                    a5:5f:6a:23:c2:94:66:86:ce:ba:32:1b:72:2d:cd:
                    e9:ba:18:7e:23:25:2d:eb:d1:82:2a:1b:3a:5f:8b:
                    e4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:45:52:3E:49:D3:84:BA:BC:CC:6F:F3:3D:9E:B0:C0:66:36:42:7D
            X509v3 Authority Key Identifier:
                keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:bf:7d:bd:98:9a:53:ee:b2:b1:fc:f1:14:5a:9b:bf:88:ec:
         d5:4f:5d:89:69:5b:ff:dc:ba:5f:74:4e:19:e0:76:4f:f3:7e:
         4a:e9:98:63:8b:9d:42:29:4b:9d:51:f6:41:49:a5:3c:51:4f:
         e6:6f:78:17:5e:43:25:d2:47:9f:f4:f5:da:6b:39:00:a4:0c:
         bb:6e:39:a5:eb:d4:8c:61:07:49:98:5f:79:42:44:f6:3b:21:
         98:99:b5:4a:7d:c5:fd:d5:a2:2e:37:2d:85:1a:d1:43:f8:5e:
         f2:82:ee:0b:32:0c:64:66:a8:f4:86:72:25:7a:1b:fb:e0:f6:
         ed:cb:56:79:e3:9b:ff:d9:47:88:d0:4d:8d:65:90:94:89:83:
         45:21:27:1c:6a:51:fc:3f:26:81:eb:d1:39:c7:0c:a4:50:f1:
         14:20:4b:16:59:fd:11:d8:19:d6:c9:26:45:47:d5:26:ed:ad:
         06:17:d2:0e:8c:d7:9a:59:82:a0:32:aa:4a:ab:90:54:02:5a:
         75:86:d2:9c:43:fb:6e:51:13:80:42:77:ec:62:68:cc:e3:95:
         66:9a:3e:89:71:18:e7:d5:4b:e6:18:ba:96:51:28:de:96:e3:
         17:c9:d1:53:b0:3e:2b:2f:66:c7:ac:f1:3d:e8:26:8e:89:ac:
         eb:ba:69:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:45 2024 by rpki-client on console-ams.rpki-client.org