Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa
File:                     3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa (raw, json)
Hash identifier:          JY2bPsN/h2XvI0KNv7dNbkISGxdKRjLA5ws9fnRuMVw=
Subject key identifier:   15:E4:87:FE:11:5C:6D:59:06:8D:16:32:C4:14:DE:D0:23:39:EF:BC
Certificate issuer:       /CN=B1015FDC3ABDC9EC594F6E8A82A116F769CA5665
Certificate serial:       06DA35D5B6ADD5C2751DFAD2344922BF456F8C42
Authority key identifier: B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa
Signing time:             Mon 04 Mar 2024 09:02:04 +0000
ROA not before:           Mon 04 Mar 2024 08:57:04 +0000
ROA not after:            Mon 03 Mar 2025 09:02:04 +0000
asID:                     131769
IP address blocks:        103.141.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.crl
                          rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 08:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:da:35:d5:b6:ad:d5:c2:75:1d:fa:d2:34:49:22:bf:45:6f:8c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1015FDC3ABDC9EC594F6E8A82A116F769CA5665
        Validity
            Not Before: Mar  4 08:57:04 2024 GMT
            Not After : Mar  3 09:02:04 2025 GMT
        Subject: CN=15E487FE115C6D59068D1632C414DED02339EFBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:78:9c:14:c4:99:46:82:1d:93:8d:43:e8:8d:
                    4d:26:7d:8a:c8:d1:be:0c:49:99:c7:51:8e:25:1d:
                    39:22:fc:56:9f:21:35:bb:5b:3d:31:dd:0f:a1:92:
                    3f:21:ed:13:d2:85:71:dd:f8:eb:f2:88:91:dc:35:
                    05:89:b0:db:60:5b:37:bc:4c:00:0a:d8:e9:ab:a5:
                    fe:ef:66:e8:b8:33:b2:9a:7b:c9:45:f1:a8:6e:37:
                    19:aa:f3:3d:a9:64:da:df:f7:68:ca:6c:52:c5:5d:
                    44:48:f4:e9:b6:8d:45:f9:6c:64:cb:e5:b8:ec:10:
                    3d:7f:69:4f:b3:0e:13:ec:42:b2:07:bc:a9:cd:7c:
                    21:ed:8c:1e:e5:1e:61:e6:01:f9:1c:9a:d2:a2:8d:
                    c7:01:70:c0:b5:7f:0d:8c:72:e8:55:e9:b3:6e:1b:
                    5c:2f:c5:b6:d7:07:6a:46:63:fe:10:0b:0f:99:81:
                    b9:e7:e7:a6:56:c6:da:d2:77:6e:19:d7:0f:db:6e:
                    2a:e1:90:41:c5:8f:a2:c9:13:c9:cf:9b:b1:7e:79:
                    03:a2:fa:ad:4c:92:89:d8:94:d4:62:81:71:0d:e9:
                    a6:9e:79:21:18:71:21:23:b2:00:8c:29:5d:f7:2c:
                    83:68:3c:88:7c:0e:ee:e1:c0:4c:e8:9c:17:77:20:
                    3b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E4:87:FE:11:5C:6D:59:06:8D:16:32:C4:14:DE:D0:23:39:EF:BC
            X509v3 Authority Key Identifier:
                keyid:B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:68:04:54:48:d2:7f:26:c4:84:59:9c:f7:c3:32:70:15:87:
         be:a5:bc:10:f5:73:21:eb:d0:80:77:43:72:69:41:d2:f1:57:
         20:4b:5a:33:c3:53:91:86:7f:dd:57:22:cb:97:52:9e:b4:2c:
         28:6a:26:00:73:c2:64:b0:d5:8d:2b:32:ec:08:d8:85:c6:ec:
         8e:3e:8e:67:e5:70:e1:89:23:cb:8d:a9:ab:d9:4e:61:e4:c3:
         92:b6:51:53:6e:6e:f0:cf:88:f0:bf:9c:58:14:ee:f3:a4:58:
         d0:00:6c:e2:81:3f:4a:b3:44:b8:49:7f:6d:88:a2:ba:6d:29:
         d9:08:80:be:25:da:53:f0:5a:ed:e9:10:d5:57:78:d0:ef:de:
         3d:60:76:70:8b:55:2a:82:e5:ce:0f:b8:7d:77:47:ca:1c:01:
         83:55:5e:2d:f1:0e:e9:26:1b:7f:73:a4:96:b9:b9:aa:25:61:
         7e:94:f4:2a:53:37:62:f3:aa:c0:97:aa:3f:c8:c6:14:df:28:
         ae:71:b5:b5:82:ae:3e:a2:ce:e9:db:70:54:20:ae:76:b4:42:
         b9:f8:29:b8:e6:2b:b6:bb:5e:b6:ea:b3:a1:96:6f:50:19:8e:
         0a:4d:9b:3a:93:b3:f5:74:4b:47:2c:71:4c:cf:70:25:e0:3f:
         9d:b9:af:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 05:56:37 2024 by rpki-client on console-fra.rpki-client.org