Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa
File:                     3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (raw, json)
Hash identifier:          Z4LRNVaLQ1hi8Ydy7xrl21o+50Pt9MglpRIcPSCMBxs=
Subject key identifier:   A3:84:CB:3F:E1:9F:FB:5D:17:9C:36:06:0F:44:04:67:A7:41:3D:7F
Certificate issuer:       /CN=A0098405BC0A535E6E4D613793C362C743319143
Certificate serial:       474FFC1EBDE3A7D97F536E95A53A48989337DB44
Authority key identifier: A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa
Signing time:             Wed 30 Oct 2024 07:40:49 +0000
ROA not before:           Wed 30 Oct 2024 07:35:49 +0000
ROA not after:            Wed 29 Oct 2025 07:40:49 +0000
asID:                     141113
IP address blocks:        103.157.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl
                          rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4f:fc:1e:bd:e3:a7:d9:7f:53:6e:95:a5:3a:48:98:93:37:db:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0098405BC0A535E6E4D613793C362C743319143
        Validity
            Not Before: Oct 30 07:35:49 2024 GMT
            Not After : Oct 29 07:40:49 2025 GMT
        Subject: CN=A384CB3FE19FFB5D179C36060F440467A7413D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7a:34:ba:e4:f8:2a:cd:55:bc:82:a0:7a:c7:
                    e1:ff:0d:e1:77:93:7e:48:4b:59:3a:31:b4:7d:26:
                    22:20:5a:a7:8b:f9:39:21:ba:78:4e:d2:12:ae:1c:
                    aa:fd:9a:d6:96:be:10:78:03:87:64:10:f7:81:ae:
                    84:52:87:32:6c:88:d3:ec:7b:c9:11:ef:ef:4f:e8:
                    26:ec:e7:69:6f:e7:cb:50:f5:ed:5e:5f:f7:fd:e5:
                    d4:a2:d7:6b:04:ea:de:d6:ee:e9:67:3d:ff:cc:00:
                    7a:c2:c0:f1:5a:cf:53:f7:51:f2:1c:19:c8:f2:ba:
                    66:e0:1c:a3:2a:f0:e5:c7:b4:cc:ac:06:db:b2:f2:
                    a6:02:01:9d:9c:4f:a9:58:5d:f8:a1:53:79:82:51:
                    e4:f1:94:37:b8:a3:92:fe:c3:66:79:18:a4:e2:d1:
                    a1:78:77:72:49:35:60:cb:91:e9:e0:b8:38:30:9b:
                    1d:ba:db:db:81:af:9d:41:b7:46:c1:54:97:a3:52:
                    77:94:6f:7a:55:6d:a2:59:1f:77:c7:e9:46:58:6e:
                    fd:0b:6c:a8:b4:49:b1:11:0b:d6:96:b1:2c:c8:7a:
                    bc:74:7c:e1:5b:f1:2f:e5:4c:45:e1:20:ae:e5:82:
                    32:ca:95:96:d3:40:6d:f6:3b:aa:40:a3:a7:cd:4f:
                    c2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:84:CB:3F:E1:9F:FB:5D:17:9C:36:06:0F:44:04:67:A7:41:3D:7F
            X509v3 Authority Key Identifier:
                keyid:A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:25:6a:35:61:7c:0d:89:ad:12:01:f2:66:f8:f1:02:23:fc:
         13:a4:19:71:10:6d:b2:dd:45:0c:76:07:bc:0a:c9:98:ef:98:
         55:ae:0b:cc:d4:10:13:16:7f:34:39:4c:96:6f:a9:de:7e:84:
         e8:2c:b3:ac:f0:0d:61:a2:93:d1:70:c4:ad:9a:87:31:45:39:
         96:77:7e:c6:f0:43:21:b8:c8:d3:86:bf:13:90:df:e5:1b:75:
         db:08:97:74:5e:b5:bc:50:8f:e9:e0:0a:91:96:82:02:3d:de:
         e8:fb:d8:d3:1a:00:5c:af:48:46:2a:4c:62:9d:57:90:68:79:
         91:86:8b:fa:f7:46:ef:76:18:60:30:fd:2f:e7:91:f6:3b:6c:
         d9:ef:48:d2:ac:48:c9:50:4b:cc:07:b5:76:db:ac:47:46:d0:
         5a:2e:60:1f:6a:1b:d2:64:16:31:12:0e:0f:88:da:29:c7:66:
         2b:05:a4:91:2a:05:92:05:db:37:06:ea:57:67:bc:4c:a1:23:
         25:df:be:81:06:64:ab:f0:35:bb:e8:b3:86:a0:54:28:4c:98:
         91:b4:cc:ab:3a:9e:62:8e:1b:ee:8b:fa:cb:4b:be:77:47:e1:
         bc:be:5a:9a:7b:a1:71:82:d2:e5:71:a5:fa:c2:88:63:f4:8d:
         ef:c6:d3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:02 2024 by rpki-client on console-fra.rpki-client.org