Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa
File:                     3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (raw, json)
Hash identifier:          0aoBwt+h97D/BWgv9F1UKeVjETegL18nlQ0MJHeXSDM=
Subject key identifier:   E3:F1:63:C2:47:5A:64:7D:88:D0:2A:2A:9A:2B:9D:8C:5C:59:1F:DB
Certificate issuer:       /CN=A0098405BC0A535E6E4D613793C362C743319143
Certificate serial:       207955ACCC85E880D79026E59B0029DC7B5800C5
Authority key identifier: A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa
Signing time:             Wed 30 Oct 2024 07:40:27 +0000
ROA not before:           Wed 30 Oct 2024 07:35:27 +0000
ROA not after:            Wed 29 Oct 2025 07:40:27 +0000
asID:                     141113
IP address blocks:        103.157.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl
                          rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:79:55:ac:cc:85:e8:80:d7:90:26:e5:9b:00:29:dc:7b:58:00:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0098405BC0A535E6E4D613793C362C743319143
        Validity
            Not Before: Oct 30 07:35:27 2024 GMT
            Not After : Oct 29 07:40:27 2025 GMT
        Subject: CN=E3F163C2475A647D88D02A2A9A2B9D8C5C591FDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:70:24:66:7a:d7:5e:74:76:cc:cf:88:73:
                    cf:88:a4:44:d2:3a:c4:18:24:c1:d5:79:08:31:e2:
                    7f:8b:5c:34:a7:f9:5d:df:05:ba:29:eb:25:66:7e:
                    ea:65:a6:dc:11:d0:d2:c8:02:06:05:1e:bc:16:fe:
                    dc:91:da:71:47:9d:73:d6:98:80:32:22:48:28:5a:
                    5e:e4:79:1a:ff:4e:42:c5:e6:12:34:01:a2:2c:b3:
                    62:09:4a:89:57:ca:b4:64:43:c3:14:2c:af:99:20:
                    93:0b:d2:4c:d7:85:bf:79:8d:87:35:df:c2:8c:d2:
                    66:56:13:4c:29:38:00:7a:f9:9b:f9:85:e3:04:63:
                    62:95:88:6a:e2:49:8c:8d:2d:8d:99:55:b8:51:db:
                    5a:b2:72:69:b8:fe:a3:e6:68:74:b8:45:d7:57:d0:
                    29:a3:5b:37:42:fb:45:3a:ee:c3:25:98:76:91:f8:
                    d9:2a:e4:de:c6:7f:b4:cb:77:88:78:62:82:64:68:
                    6c:3c:3a:ff:53:7f:b3:81:f9:3c:1f:db:11:b2:2f:
                    59:28:b8:eb:71:c6:11:51:8c:91:be:86:7f:61:f2:
                    b2:d7:f3:b8:7e:1e:c2:29:77:41:8c:10:9b:9a:b4:
                    3a:28:57:43:37:2e:1a:91:b3:7c:41:78:1c:b1:8a:
                    78:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F1:63:C2:47:5A:64:7D:88:D0:2A:2A:9A:2B:9D:8C:5C:59:1F:DB
            X509v3 Authority Key Identifier:
                keyid:A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:52:6e:da:d1:bb:a4:93:9f:54:67:f3:e6:13:e2:78:e0:74:
         ee:28:ef:d5:ee:f7:9c:1b:2c:88:a3:db:13:06:50:3d:08:01:
         95:f9:62:39:19:e4:b4:d1:b8:11:c9:f5:57:25:52:b8:5c:3d:
         b1:10:e8:1c:2b:48:40:67:a1:1f:2b:39:ee:f0:bb:e8:60:1b:
         05:a9:e2:27:d6:32:86:21:69:b1:c8:a8:dc:b5:ed:64:f5:88:
         a3:80:3c:0d:56:00:7b:b7:75:a3:ad:25:c5:84:f2:fe:3e:e0:
         29:05:d1:43:45:74:14:6e:b8:0c:be:f9:92:d3:84:1c:bb:45:
         26:52:a2:32:d3:1a:24:41:42:98:0c:aa:8c:a7:cb:c1:27:7c:
         3b:cf:4c:e0:0a:cb:05:50:43:eb:0c:74:c5:0e:a5:89:5f:b5:
         ac:2a:79:9d:8f:4f:cd:ad:1d:d7:f3:13:ab:1c:a8:ae:cc:1a:
         15:7a:f9:ac:b1:3b:a0:cd:76:7b:b1:06:5e:51:39:34:f8:5d:
         9c:69:fe:c9:54:8d:39:e3:76:19:06:a8:dc:f6:be:a5:91:2d:
         d9:66:a1:55:a6:8e:e9:7c:d5:45:ae:8f:5b:69:8a:89:80:6a:
         b6:4c:a2:81:9d:7d:b5:d8:f5:ee:20:25:6b:a3:0d:02:c2:ac:
         be:b6:cc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:02 2024 by rpki-client on console-fra.rpki-client.org