Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa
File:                     3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (raw, json)
Hash identifier:          SEMwogz0Vhns4GGxXwFCwYauwFpZ/8n/7CKqL5mDmB8=
Subject key identifier:   45:C2:88:EC:D5:83:D7:4B:D9:48:4D:DF:A2:B6:F7:CE:CF:A9:D2:EF
Certificate issuer:       /CN=EBA04070CA27E646C332039E07557734C6732ED2
Certificate serial:       604E665A1F0711003E4E8F219F627CDF3965E1BD
Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa
Signing time:             Sun 22 Oct 2023 02:00:01 +0000
ROA not before:           Sun 22 Oct 2023 01:55:01 +0000
ROA not after:            Sun 20 Oct 2024 02:00:01 +0000
asID:                     141461
IP address blocks:        103.111.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl
                          rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4e:66:5a:1f:07:11:00:3e:4e:8f:21:9f:62:7c:df:39:65:e1:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2
        Validity
            Not Before: Oct 22 01:55:01 2023 GMT
            Not After : Oct 20 02:00:01 2024 GMT
        Subject: CN=45C288ECD583D74BD9484DDFA2B6F7CECFA9D2EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:09:a9:8f:2c:2a:3b:93:04:9e:0b:1d:e2:36:
                    d3:12:4f:6c:ba:a9:b5:16:ba:98:db:97:37:68:16:
                    a9:bb:af:d1:62:c2:79:45:d4:20:08:e5:47:26:6a:
                    d0:ac:2d:13:d2:f1:fc:12:53:c2:94:8c:74:65:59:
                    6e:c4:9a:a9:59:78:24:3d:f0:11:fc:61:8a:fe:6b:
                    d5:c8:03:ad:d7:65:75:fe:ea:af:fa:fb:c9:db:1a:
                    8f:68:1a:22:be:8b:09:83:db:18:13:45:24:e8:8d:
                    a3:42:43:c9:3d:b0:d8:7a:bd:65:e1:d2:c7:1d:2f:
                    0f:7c:6a:8a:63:a4:ae:2a:2f:d9:1b:e6:3b:4d:fc:
                    5d:79:a8:78:73:cc:22:fe:fe:c8:8a:3c:90:54:d7:
                    e3:ad:02:08:11:8d:04:b9:09:2d:c3:13:82:01:75:
                    fc:4e:49:db:a0:45:88:ab:dd:77:73:b9:f4:4c:66:
                    2e:08:2e:f6:ba:5f:85:69:d5:62:61:1f:ae:c5:a2:
                    fb:cc:5f:58:91:87:1e:f9:d3:60:77:8e:1d:dc:8b:
                    75:84:25:4a:cc:ae:a3:3b:18:ab:36:b9:b8:c9:fb:
                    c5:b1:dc:44:a6:a3:41:22:fa:b8:3d:25:8e:23:56:
                    34:8d:61:27:9f:c1:81:67:1c:7a:9f:17:c6:53:d0:
                    23:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C2:88:EC:D5:83:D7:4B:D9:48:4D:DF:A2:B6:F7:CE:CF:A9:D2:EF
            X509v3 Authority Key Identifier:
                keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:43:de:5b:f8:b6:e7:50:78:cb:4e:2d:ae:dc:44:05:0d:cc:
         74:78:11:93:c8:25:da:d8:d6:1e:e7:f8:0d:cb:08:7d:f0:e8:
         47:f7:71:6b:64:f9:14:44:81:07:cb:7f:1c:0c:53:d9:72:bf:
         3e:08:fe:3b:1e:92:d6:13:d8:de:6c:62:10:34:b5:a3:e2:84:
         42:c1:f2:56:2b:c8:41:cb:5b:aa:27:12:4f:0a:b7:5b:f9:e2:
         41:63:07:d5:f7:9d:62:30:bb:69:36:e6:2f:d7:25:bd:7c:7d:
         8f:7f:9b:65:08:db:8c:52:c1:a1:ee:50:d5:08:35:30:6b:f1:
         87:57:65:2f:f2:37:65:26:a1:86:5a:e7:f1:bf:3f:29:6f:96:
         43:16:fc:a8:42:66:3c:37:6e:0e:b5:06:31:a6:46:37:a8:7e:
         42:04:ce:9d:93:ad:f2:ca:59:a0:fb:fd:25:2e:91:71:60:e6:
         9d:e3:b8:04:2c:76:72:4f:68:61:f3:df:3e:a2:78:63:67:51:
         0d:b8:15:ca:84:0b:a1:bc:3a:99:ad:60:15:be:98:33:80:f0:
         ce:61:5d:75:74:9c:c2:ed:28:af:02:15:9e:3b:90:37:c9:4f:
         89:79:c9:cd:cf:f0:d4:ba:c2:6a:bd:4d:fb:2c:11:ac:af:b0:
         5b:a5:c3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:43:04 2024 by rpki-client on console-fra.rpki-client.org