Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa
File:                     3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa (raw, json)
Hash identifier:          w12N/uYx27kZZwmhbBAPGCXLuSyR2+QhhurllIrq3Bc=
Subject key identifier:   82:2D:B8:8B:37:DA:59:EA:D1:19:F3:38:CA:0A:5A:55:2B:85:EC:93
Certificate issuer:       /CN=923816C042C964B6465A7BA06B2D44BDAF28D827
Certificate serial:       0FB60434F3450B0AF02B5EFEB8F1A069A27FCEE6
Authority key identifier: 92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa
Signing time:             Mon 14 Oct 2024 09:02:14 +0000
ROA not before:           Mon 14 Oct 2024 08:57:14 +0000
ROA not after:            Mon 13 Oct 2025 09:02:14 +0000
asID:                     149758
IP address blocks:        103.189.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl
                          rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b6:04:34:f3:45:0b:0a:f0:2b:5e:fe:b8:f1:a0:69:a2:7f:ce:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923816C042C964B6465A7BA06B2D44BDAF28D827
        Validity
            Not Before: Oct 14 08:57:14 2024 GMT
            Not After : Oct 13 09:02:14 2025 GMT
        Subject: CN=822DB88B37DA59EAD119F338CA0A5A552B85EC93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:91:42:cf:42:cb:f1:c1:36:69:b6:fe:80:
                    71:59:00:aa:ed:ab:43:5b:98:33:97:21:76:22:71:
                    62:2b:bc:61:2d:3e:89:ba:9b:fa:f1:8e:32:dd:5b:
                    5e:69:91:23:df:44:39:8e:ac:48:e6:ed:f6:6c:d5:
                    aa:02:1d:68:43:a7:59:ad:6f:d0:d7:4b:c6:23:17:
                    67:18:b4:9c:3a:e4:da:28:1f:e1:5c:36:d5:4e:10:
                    9a:13:ab:26:f0:b3:4c:7a:92:c5:38:47:ad:eb:b2:
                    e9:6e:61:51:7e:76:c2:5d:17:be:1d:28:c6:9c:47:
                    dc:73:4f:3c:24:7b:de:0e:73:8f:c5:3d:f3:6a:85:
                    21:a5:e0:70:b7:b9:17:a8:55:26:fc:e0:d9:cc:31:
                    8c:e7:13:da:22:1e:69:2c:b0:11:b5:12:f1:45:34:
                    7e:29:d7:62:82:7a:58:db:9a:22:c5:88:66:8e:c5:
                    82:ef:f6:93:48:34:4a:ee:78:32:e0:f7:91:cd:48:
                    55:4b:f6:58:8b:e4:53:8b:b8:c8:a6:37:d6:5e:04:
                    07:da:ae:1e:45:64:74:5b:e7:22:75:b0:9a:e1:65:
                    b4:c2:18:c6:2a:3b:f4:e8:65:37:bd:d1:6e:e4:7d:
                    0b:d1:48:a8:63:dd:86:f8:d5:48:b3:e2:da:78:7b:
                    e6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2D:B8:8B:37:DA:59:EA:D1:19:F3:38:CA:0A:5A:55:2B:85:EC:93
            X509v3 Authority Key Identifier:
                keyid:92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:95:6e:97:e0:e7:7c:e8:de:25:47:07:aa:ba:e1:ca:94:d8:
         a5:46:a0:c1:8c:da:00:71:72:69:59:09:b7:2e:90:ba:dc:a7:
         36:90:6a:7e:cf:f5:6b:50:eb:15:00:ee:6c:02:79:54:61:cd:
         f2:07:47:5f:9d:a0:a9:11:63:f7:bf:f5:25:a2:37:b0:f7:28:
         c5:fb:7f:6d:25:3e:20:66:78:8b:c0:f0:9a:25:b6:27:1d:84:
         22:6c:a4:c0:6c:4b:fa:c8:30:75:93:3e:6b:4b:85:dc:cb:88:
         e7:83:02:4a:10:2a:d8:af:70:ff:a2:84:2f:15:c1:fe:38:f2:
         e2:21:43:62:05:72:2f:fb:64:fe:15:b5:6b:60:a2:5b:40:da:
         9a:e9:bb:ec:9d:bf:b3:d8:db:91:66:35:56:94:8c:f8:9c:fb:
         bb:66:99:72:96:c1:91:3b:40:7d:9e:e2:07:d2:2c:31:c9:8a:
         74:56:6a:29:fc:5d:8d:2a:f7:4d:90:36:61:1e:1b:99:49:31:
         d0:6d:7c:8b:26:16:38:2c:9a:90:f8:2e:ea:5b:8b:46:0e:cd:
         c6:da:7f:6a:96:b4:d9:55:a4:2a:90:92:19:2b:fd:29:64:d3:
         0c:e6:86:ef:26:e7:dc:43:f2:e3:2f:10:5d:82:18:84:ff:00:
         55:46:21:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org