Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa
File:                     3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (raw, json)
Hash identifier:          3NC+RhLSfcDzEqwAUXfzTq2UHKtv5kcFCeSGV4nqVtI=
Subject key identifier:   A0:16:1C:B4:2E:6F:C4:AA:3E:C3:5A:E0:83:97:6F:26:71:00:18:9D
Certificate issuer:       /CN=743D7544160232918AB5AB2CD90221B4C4E978E5
Certificate serial:       41B53BDE87B9058BB31A8CB86A88BF290A4E021F
Authority key identifier: 74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa
Signing time:             Mon 19 Feb 2024 10:00:52 +0000
ROA not before:           Mon 19 Feb 2024 09:55:52 +0000
ROA not after:            Mon 17 Feb 2025 10:00:52 +0000
asID:                     150553
IP address blocks:        103.81.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl
                          rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b5:3b:de:87:b9:05:8b:b3:1a:8c:b8:6a:88:bf:29:0a:4e:02:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743D7544160232918AB5AB2CD90221B4C4E978E5
        Validity
            Not Before: Feb 19 09:55:52 2024 GMT
            Not After : Feb 17 10:00:52 2025 GMT
        Subject: CN=A0161CB42E6FC4AA3EC35AE083976F267100189D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a2:67:8a:7c:7b:9c:ac:08:87:5f:5f:cc:00:
                    8a:64:4b:2f:0e:16:d3:6d:5b:1c:04:0b:36:17:0c:
                    ce:cb:75:81:ac:70:cd:70:ea:0e:9d:d5:11:be:28:
                    bc:ee:1b:f5:32:97:a7:93:df:a2:25:67:e1:5b:00:
                    d9:48:77:24:84:85:2d:c1:8c:2a:ad:f1:bc:f7:75:
                    98:52:3e:79:45:59:de:c4:47:c0:ed:a3:90:53:b1:
                    d3:9e:59:29:a9:67:a7:83:cd:db:11:0e:c2:c5:f8:
                    6d:5c:2b:4c:37:3f:b6:d7:95:75:de:13:cf:54:75:
                    8a:99:0e:1b:59:47:10:20:4d:92:17:36:9e:57:7f:
                    7a:ce:29:c9:a4:ed:3d:d9:c2:9f:81:a7:ad:f0:73:
                    dc:cb:48:80:af:d9:64:d0:75:d9:9a:72:d5:8a:f3:
                    43:d9:e1:99:12:fb:d9:0a:3a:6a:7e:2e:8c:e6:60:
                    49:01:16:d2:f8:e8:02:b3:34:f2:51:47:3b:77:55:
                    17:f2:3f:b8:5b:83:67:bd:c9:f2:78:35:74:2a:46:
                    e6:c8:ed:7b:45:4d:8d:15:ad:30:a7:cd:e6:00:a5:
                    b5:10:94:1d:fa:ed:ba:c2:5f:ed:58:8f:c7:57:99:
                    80:10:a4:32:17:b7:68:45:ea:52:50:46:d0:28:e5:
                    dd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:16:1C:B4:2E:6F:C4:AA:3E:C3:5A:E0:83:97:6F:26:71:00:18:9D
            X509v3 Authority Key Identifier:
                keyid:74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:8a:a7:bb:bb:ed:6f:e9:e6:85:1e:79:cf:84:d1:f4:9d:a6:
         27:79:77:e4:1c:34:aa:64:ef:0f:35:87:9a:64:14:c5:81:0c:
         0b:8b:23:76:6d:d2:32:11:06:55:22:3a:c0:91:43:55:ec:5c:
         d9:83:ec:d5:04:0c:f5:0b:e8:a8:c8:9b:b4:ff:c1:79:2e:27:
         5b:e1:bf:1a:3b:4e:ca:c0:8e:36:03:db:a5:f0:9c:3b:59:45:
         63:fb:7b:39:c4:c5:95:f2:2e:7c:f0:1c:74:11:ad:db:17:84:
         c3:0a:cc:ec:2f:80:5d:c8:02:ec:c0:7f:2c:70:67:4b:ce:49:
         17:8e:ea:1e:4b:ad:e9:5f:38:ad:2c:bb:04:6f:b2:4a:40:3f:
         45:ec:e2:08:27:3a:18:f7:23:cc:6c:7b:46:1e:27:ca:6c:2a:
         99:c1:43:84:63:d1:a3:34:28:4c:da:22:8b:97:00:ac:42:fb:
         a6:e9:0b:ec:f5:ce:81:e9:d5:6c:dc:5a:28:89:97:f1:ec:f9:
         be:66:37:89:b2:ec:54:7c:85:c4:ca:ef:95:cd:85:4d:00:a2:
         18:a2:da:70:86:e7:90:94:f3:5f:ab:e2:ea:92:74:12:c8:7f:
         96:85:17:63:96:f3:1f:60:0a:a0:5b:6e:a4:f7:19:f6:61:6b:
         48:e0:68:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:21 2024 by rpki-client on console-fra.rpki-client.org