Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/3130332e3135312e33342e302f32342d3234203d3e20313430343133.roa
File:                     3130332e3135312e33342e302f32342d3234203d3e20313430343133.roa (raw, json)
Hash identifier:          bggwzPR+vYNZ0Kko2I08TpbpDhGua8+T2ALvuPJuOeI=
Subject key identifier:   C4:31:3C:A2:9E:3A:8F:65:96:C8:6E:3F:A8:9A:04:5E:49:74:B5:57
Certificate issuer:       /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial:       28D966F3C3ACF4D6E782DE4355089B37676AE299
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/3130332e3135312e33342e302f32342d3234203d3e20313430343133.roa
Signing time:             Mon 07 Oct 2024 07:02:09 +0000
ROA not before:           Mon 07 Oct 2024 06:57:09 +0000
ROA not after:            Mon 06 Oct 2025 07:02:09 +0000
asID:                     140413
IP address blocks:        103.151.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
                          rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d9:66:f3:c3:ac:f4:d6:e7:82:de:43:55:08:9b:37:67:6a:e2:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
        Validity
            Not Before: Oct  7 06:57:09 2024 GMT
            Not After : Oct  6 07:02:09 2025 GMT
        Subject: CN=C4313CA29E3A8F6596C86E3FA89A045E4974B557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bb:4d:fb:f2:94:03:2d:bc:5b:a6:de:17:9a:
                    6e:c2:0e:c7:d2:ae:71:7c:a2:2e:b0:5d:07:4b:8a:
                    a8:b3:4d:ef:e3:2e:ff:eb:9a:33:ff:86:1b:77:c8:
                    00:0f:29:57:e7:23:ba:b2:48:e0:d8:33:be:67:f5:
                    87:76:95:10:b1:d3:88:31:dd:6d:49:38:e8:aa:13:
                    92:1e:f0:9a:22:68:a5:8d:8f:2a:c7:76:e0:ca:f9:
                    e4:1b:20:f0:80:ba:aa:78:8b:95:bb:67:c4:f3:bf:
                    de:bb:f6:2e:d4:d0:9b:79:c2:ac:ad:6c:51:69:a7:
                    7d:65:98:dc:a0:db:18:28:4a:f5:40:f8:10:41:a2:
                    50:9f:3b:99:5d:bc:e3:c2:60:53:aa:0f:86:1a:3f:
                    20:24:84:bf:5e:79:78:dd:2c:40:08:f7:c5:c2:05:
                    87:ed:d0:ca:d4:e9:e7:8c:bd:dc:20:37:45:a4:4d:
                    25:c7:59:cb:f4:cc:f8:fc:38:99:50:2a:7a:48:00:
                    63:72:f5:1d:bb:ea:98:07:e7:55:06:7d:be:40:4b:
                    3f:58:e8:89:0f:09:a3:62:3c:b9:73:8d:05:43:d5:
                    53:b3:c5:38:25:ea:73:81:94:ef:11:1e:f4:a4:1a:
                    b8:40:57:16:da:70:04:7f:e5:65:02:b3:ec:2e:7d:
                    9c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:31:3C:A2:9E:3A:8F:65:96:C8:6E:3F:A8:9A:04:5E:49:74:B5:57
            X509v3 Authority Key Identifier:
                keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/3130332e3135312e33342e302f32342d3234203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:6c:25:95:47:74:41:6c:f9:1b:94:80:82:99:33:d2:8e:64:
         6b:a7:ce:c6:17:ae:e5:f5:5d:8a:fc:07:7f:f5:57:26:f4:d9:
         a5:a8:3c:e0:6e:25:06:28:a2:38:85:ee:83:8b:d3:a7:47:96:
         11:97:47:21:5a:82:ff:c6:cb:f9:b0:3f:32:96:3c:7d:2b:b6:
         83:f7:64:a3:82:c4:8b:48:54:06:0a:48:a6:f5:15:26:96:9c:
         9a:21:ed:71:69:7c:45:02:b0:f6:5b:c0:75:16:c1:c0:52:8c:
         89:ad:89:31:6c:45:be:94:8c:88:c4:e2:ac:19:40:65:5e:69:
         0d:fd:47:e8:d9:48:f2:2f:54:ee:8e:ce:11:5c:e8:33:54:3e:
         4a:64:97:9e:46:8b:49:a2:f1:e6:19:b3:0b:58:7b:7f:3a:a6:
         4d:c8:ab:de:f8:26:2e:91:0e:fa:97:69:8a:42:34:ab:6e:f1:
         9a:d8:87:4a:8b:fb:cb:ca:62:3d:5a:e0:55:8e:a9:76:ad:f0:
         c0:99:be:10:9b:6e:d7:a2:fe:c6:0f:dd:7e:c1:6f:ac:23:0c:
         ac:63:36:93:54:1a:10:c9:48:19:ee:ba:c4:b1:1c:02:a2:94:
         04:2b:2a:98:e3:fa:74:1f:f4:71:7f:54:46:22:0c:8a:11:bd:
         41:59:29:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 21:51:28 2024 by rpki-client on console-fra.rpki-client.org