Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa
File:                     3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa (raw, json)
Hash identifier:          JE8HUdHVJ0U83Tps7TYgDUX+YT7M9iS8rOn13rFfngc=
Subject key identifier:   8A:E2:6E:E2:AB:7D:AB:97:27:E9:AC:A9:F5:8F:26:2E:A6:41:5F:64
Certificate issuer:       /CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B
Certificate serial:       2936146CD2F43B6513B7B24EB45702C4D1D2F32C
Authority key identifier: FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa
Signing time:             Sat 03 Aug 2024 05:44:07 +0000
ROA not before:           Sat 03 Aug 2024 05:39:07 +0000
ROA not after:            Sat 02 Aug 2025 05:44:07 +0000
asID:                     150215
IP address blocks:        103.13.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl
                          rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:36:14:6c:d2:f4:3b:65:13:b7:b2:4e:b4:57:02:c4:d1:d2:f3:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B
        Validity
            Not Before: Aug  3 05:39:07 2024 GMT
            Not After : Aug  2 05:44:07 2025 GMT
        Subject: CN=8AE26EE2AB7DAB9727E9ACA9F58F262EA6415F64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:9e:cb:7f:b9:8e:d1:f1:a0:dd:ea:28:f2:
                    00:78:81:47:80:a5:05:50:7b:d2:65:b7:4c:5a:42:
                    82:17:48:58:9b:47:75:8c:a0:7d:1c:d9:b8:76:be:
                    bb:76:2d:af:7a:fd:11:6a:5c:a2:00:e8:92:0a:2e:
                    5b:36:a6:8c:59:b5:d9:a1:83:93:bf:b1:43:05:11:
                    d3:ba:aa:09:b5:99:54:e5:08:1c:a4:7d:ba:89:42:
                    54:14:07:5f:3d:36:a8:7c:53:63:41:45:68:ad:6c:
                    39:0c:52:4e:e5:b9:11:3c:15:66:34:09:56:11:3e:
                    03:f8:49:91:19:05:2f:84:7e:5f:bb:17:5c:7a:bf:
                    45:ca:e4:17:a6:6b:8d:33:8b:92:74:8b:f1:9d:b0:
                    17:52:8a:d5:39:c8:52:d8:54:30:9a:18:67:d7:77:
                    ad:d4:72:9c:94:17:ae:54:b9:1a:6d:31:2c:94:44:
                    d0:c3:ab:a2:2d:27:2a:e3:ae:9a:31:38:75:95:31:
                    65:b4:c8:48:5c:88:f8:56:52:e9:13:f5:14:75:81:
                    40:d6:0b:ab:b4:7c:83:d4:09:76:a1:d7:6d:58:c7:
                    51:43:4e:db:33:03:34:f6:44:78:db:3f:fe:1e:c2:
                    e7:65:91:a0:21:8f:34:6a:fb:e8:5e:76:af:01:f2:
                    e7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E2:6E:E2:AB:7D:AB:97:27:E9:AC:A9:F5:8F:26:2E:A6:41:5F:64
            X509v3 Authority Key Identifier:
                keyid:FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:07:5f:61:3c:75:af:c1:82:65:db:5b:ed:c2:6a:1b:95:99:
         83:80:85:d1:5c:2d:4e:c3:71:a3:70:c0:be:37:ab:b6:2c:e2:
         22:67:be:04:11:36:f7:dc:3f:10:84:7e:c6:28:0f:17:54:d4:
         2f:e4:b8:af:e2:14:96:90:0f:a6:42:07:ce:92:d3:db:ed:eb:
         3e:99:b9:62:c2:39:b0:0e:79:7b:e6:e5:53:e9:5e:65:c3:d1:
         d8:3b:82:15:2d:de:37:85:f0:b7:88:2f:84:13:ec:36:cc:95:
         ca:e2:97:71:90:ff:b2:63:c1:af:25:3d:4f:ee:3c:81:7c:e2:
         e9:1a:8e:ed:56:4f:ea:5e:42:5c:1d:28:0b:0a:ec:05:92:72:
         6c:6b:d9:bb:df:89:03:9c:8f:ad:83:14:b9:8d:21:20:5b:74:
         b2:ce:4d:b1:c9:53:cd:ec:75:05:af:60:56:50:1a:df:23:01:
         26:ca:4d:b3:65:d6:5e:2a:35:7e:74:28:ce:91:8b:13:39:3b:
         d1:ab:b1:1a:1e:ce:48:bb:65:f8:fe:8d:57:0f:cc:9f:a7:b1:
         c4:b1:7d:45:de:7f:92:b3:bc:f7:f3:a8:69:ea:f3:3f:94:1a:
         3e:d9:a3:6c:48:86:4e:52:2d:8b:ef:94:c1:81:56:55:f9:15:
         8d:29:6c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:42:06 2024 by rpki-client on console-ams.rpki-client.org