Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa
File:                     3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa (raw, json)
Hash identifier:          MopGe9c6fWHZFmr4mBLJ6IqRrWkyYuylfNEiFDLR8sE=
Subject key identifier:   AE:B7:6E:4D:6A:1C:3D:14:09:D6:72:C2:84:41:3D:C8:95:53:55:9C
Certificate issuer:       /CN=05BC764F85F9F88CE41FD879C6125E65117E8E79
Certificate serial:       407C7693A23EFEA932A04982D55DA7CDE26FFA5B
Authority key identifier: 05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa
Signing time:             Mon 01 Jul 2024 01:05:24 +0000
ROA not before:           Mon 01 Jul 2024 01:00:24 +0000
ROA not after:            Mon 30 Jun 2025 01:05:24 +0000
asID:                     135451
IP address blocks:        103.96.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl
                          rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7c:76:93:a2:3e:fe:a9:32:a0:49:82:d5:5d:a7:cd:e2:6f:fa:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05BC764F85F9F88CE41FD879C6125E65117E8E79
        Validity
            Not Before: Jul  1 01:00:24 2024 GMT
            Not After : Jun 30 01:05:24 2025 GMT
        Subject: CN=AEB76E4D6A1C3D1409D672C284413DC89553559C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:3e:d2:05:a4:f6:24:23:ec:26:ab:16:e3:
                    cf:6f:ee:95:26:58:8d:98:34:f0:be:8a:79:a8:0d:
                    fe:77:d0:12:34:19:de:7a:40:16:67:4d:13:f3:f3:
                    39:76:d5:1c:18:4d:1b:c9:25:ad:66:c1:1b:ee:ce:
                    e5:99:18:2e:d2:e4:0f:94:4b:45:f4:3a:29:80:b8:
                    6e:03:25:3e:5b:0d:92:7f:7a:f7:12:94:0e:03:15:
                    dd:45:2d:16:22:cf:9a:ca:dd:f2:76:cc:ab:32:73:
                    20:f2:a7:4d:77:9b:dd:b5:62:04:d4:2d:44:10:e6:
                    97:22:b8:36:8d:08:0b:2e:7c:48:10:4f:d4:9f:85:
                    9b:12:ff:e3:80:c8:62:b4:c3:80:85:e1:0c:19:1b:
                    e1:bd:04:c5:51:86:4d:96:94:ee:df:da:ba:70:97:
                    c9:b8:d0:c7:04:66:f3:be:54:da:9d:f1:8e:1c:09:
                    1e:5d:10:cc:ca:95:4d:b6:8f:7b:9b:36:38:c1:75:
                    de:31:3a:66:09:1b:4b:9d:ff:b7:a4:a6:0c:d3:af:
                    4c:7b:e0:e2:e7:90:5d:66:bb:6a:65:dd:6c:c3:d8:
                    db:94:45:85:61:60:06:1d:f2:ad:e6:5e:1d:c1:a9:
                    f9:91:90:84:86:e5:4a:e2:15:94:83:ee:ae:69:5e:
                    54:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B7:6E:4D:6A:1C:3D:14:09:D6:72:C2:84:41:3D:C8:95:53:55:9C
            X509v3 Authority Key Identifier:
                keyid:05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:3f:da:ed:3f:1a:72:35:bf:6a:95:10:bb:74:1a:fe:61:92:
         e6:fd:d1:f5:1f:83:c7:df:45:b4:c1:a6:1c:16:91:81:c2:41:
         b1:74:6d:5c:53:8a:81:d1:a2:d2:df:9a:3f:c3:b6:85:b6:e2:
         b1:d4:59:76:b7:ce:07:fe:94:ee:72:7b:ea:4e:3a:d4:d8:98:
         f2:d3:27:fa:23:6b:6f:39:cf:16:b7:d7:81:fa:34:31:7f:75:
         1f:19:8b:8d:65:db:93:43:45:67:13:af:7f:15:36:e9:8a:6e:
         35:81:2d:13:b4:2b:97:4a:ba:67:6d:30:72:b0:07:4b:be:b3:
         40:46:2f:5a:cf:9e:f0:5a:c2:fb:5d:ce:36:29:b9:0a:6d:e2:
         16:55:9a:67:89:c2:df:22:43:b3:b5:a1:9f:e2:41:58:af:19:
         e4:74:54:45:96:a7:67:c6:d1:97:ac:8b:60:21:45:14:11:70:
         cd:97:6b:3f:7c:37:72:8a:e2:26:32:50:e1:e8:06:bb:c8:c2:
         a0:3f:dd:7d:d1:10:90:13:6f:9b:41:49:54:cd:98:16:1a:1b:
         f0:37:2f:ee:9f:98:05:40:bf:e7:44:5c:3d:19:d9:66:0c:2d:
         b8:9f:58:4a:1f:49:36:d9:3d:ab:75:d0:3e:56:b2:14:1d:3b:
         01:20:2e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:08 2024 by rpki-client on console-ams.rpki-client.org