Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa
File:                     3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (raw, json)
Hash identifier:          up3pd1gZKdk0AH5XnuX6e6FX8RY9ZHuPm9IS7ydQYYA=
Subject key identifier:   C8:B6:5C:8B:C1:79:22:5E:4A:29:F3:FF:91:61:5F:10:28:C9:A1:FD
Certificate issuer:       /CN=1B42B2BB5674F23468744614CDF9B0B00D510190
Certificate serial:       662C39E24EC21215948E57C19B0F8AF8EEBAACF2
Authority key identifier: 1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa
Signing time:             Tue 17 Sep 2024 12:00:01 +0000
ROA not before:           Tue 17 Sep 2024 11:55:01 +0000
ROA not after:            Tue 16 Sep 2025 12:00:01 +0000
asID:                     150234
IP address blocks:        103.19.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl
                          rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:2c:39:e2:4e:c2:12:15:94:8e:57:c1:9b:0f:8a:f8:ee:ba:ac:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B42B2BB5674F23468744614CDF9B0B00D510190
        Validity
            Not Before: Sep 17 11:55:01 2024 GMT
            Not After : Sep 16 12:00:01 2025 GMT
        Subject: CN=C8B65C8BC179225E4A29F3FF91615F1028C9A1FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:70:4c:0b:6e:fe:12:d9:d3:05:82:b3:80:73:
                    6c:d1:e6:79:14:8d:b5:80:ca:4d:47:b7:3c:76:1a:
                    a7:ae:3d:f6:4c:c1:b8:9e:f6:6b:45:c7:57:bb:32:
                    c2:db:d2:88:3f:eb:7e:d6:ef:61:14:68:13:d6:d3:
                    ea:59:c1:c6:08:78:8f:db:96:e1:25:b5:c1:08:43:
                    e7:2f:15:d6:4a:f3:63:0d:15:e1:fd:24:28:dd:71:
                    6c:c4:6b:62:c1:b1:c2:44:8e:0f:15:c4:8d:d6:47:
                    01:ab:50:52:5c:4b:9b:51:64:d4:3c:d7:9c:f0:d2:
                    49:46:80:d4:fd:47:fd:a7:71:fc:cb:80:84:72:c9:
                    6c:3b:6d:25:60:66:73:dc:40:b7:f3:9c:59:21:7b:
                    58:22:8e:62:6e:3a:34:57:9b:14:59:89:97:64:0e:
                    e3:93:bc:0f:ef:9c:b6:5c:49:fe:af:ea:87:42:04:
                    2c:f0:9d:6a:46:46:be:04:93:e9:be:cd:9d:c7:d9:
                    98:cc:49:98:d4:de:54:76:c4:64:a1:2d:0c:8d:94:
                    18:1b:29:d8:dd:20:d8:d2:30:e4:36:70:ab:91:9b:
                    a9:c9:3f:07:9f:c2:53:c4:ec:4b:c5:c6:f8:0a:12:
                    57:be:be:3a:4c:f6:68:8a:a3:f0:29:3d:ce:4a:79:
                    fc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B6:5C:8B:C1:79:22:5E:4A:29:F3:FF:91:61:5F:10:28:C9:A1:FD
            X509v3 Authority Key Identifier:
                keyid:1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:b7:ec:12:94:d4:6e:c1:29:b2:78:7a:7f:25:e1:cd:7c:5f:
         f5:08:c6:0c:86:bf:b6:f6:b6:0d:d2:85:54:b6:41:de:15:27:
         c0:fd:51:37:cc:66:2f:06:3e:7f:92:40:1c:2c:e2:18:e5:85:
         e1:ca:05:a6:d2:b2:5e:c3:8a:c3:b0:98:0b:63:33:e4:e0:b9:
         75:cf:fe:54:c0:33:98:04:c4:b4:d4:76:e1:9a:94:9d:a7:cf:
         4b:de:0b:80:06:f5:1f:7d:d4:b3:52:8d:09:87:b7:d8:5c:49:
         6c:ec:0e:26:9d:5d:1f:47:d2:7c:01:96:2b:42:57:cd:3a:06:
         70:40:49:6a:76:b7:c6:3c:51:c3:d5:b8:95:79:89:ee:3c:c0:
         de:f1:09:13:7f:82:1a:6f:28:4a:0a:1f:d7:bc:84:41:61:8a:
         6a:e9:2c:f9:1b:d4:d8:4f:6c:03:80:b8:e4:17:aa:fc:bf:90:
         fc:74:87:46:e9:39:ac:72:28:f9:88:3e:10:ab:36:fc:79:24:
         d8:f9:3d:6c:eb:7f:30:e8:c0:15:49:8c:ca:0e:26:f3:5f:50:
         a4:6b:26:65:2a:7d:dc:c4:08:42:56:d5:d5:2b:3b:fb:36:06:
         25:80:ab:71:b8:91:be:04:06:c0:31:a2:62:ae:dd:5c:0d:e5:
         eb:a7:15:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:43 2024 by rpki-client on console-fra.rpki-client.org