Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa
File:                     3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa (raw, json)
Hash identifier:          KprE8oJb3ya31nL5BkzFh0dftcryoo6awC4dT+HHI4E=
Subject key identifier:   AC:85:0B:9D:DE:4C:D2:B0:23:D3:38:F4:68:1E:9D:38:99:EC:E8:5B
Certificate issuer:       /CN=EA581458C8710B7F2862361DF5BE327D72423B7F
Certificate serial:       1B92F7701A79E3EB413031ED04D05D8515898ADC
Authority key identifier: EA:58:14:58:C8:71:0B:7F:28:62:36:1D:F5:BE:32:7D:72:42:3B:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA581458C8710B7F2862361DF5BE327D72423B7F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa
Signing time:             Tue 06 Feb 2024 04:01:56 +0000
ROA not before:           Tue 06 Feb 2024 03:56:56 +0000
ROA not after:            Tue 04 Feb 2025 04:01:56 +0000
asID:                     139456
IP address blocks:        103.185.38.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.crl
                          rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA581458C8710B7F2862361DF5BE327D72423B7F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 30 Sep 2024 06:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:92:f7:70:1a:79:e3:eb:41:30:31:ed:04:d0:5d:85:15:89:8a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA581458C8710B7F2862361DF5BE327D72423B7F
        Validity
            Not Before: Feb  6 03:56:56 2024 GMT
            Not After : Feb  4 04:01:56 2025 GMT
        Subject: CN=AC850B9DDE4CD2B023D338F4681E9D3899ECE85B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:57:44:b6:b1:1e:4c:ce:1c:ec:2a:9f:6f:3f:
                    08:87:7f:da:b8:49:8a:6a:c0:8c:fa:bc:0b:35:ec:
                    1f:5b:6f:0d:e0:57:5c:fd:09:f6:de:95:75:fc:20:
                    19:b3:f6:a4:54:9e:80:00:f8:e0:d8:9e:38:31:56:
                    96:8d:8f:cc:9c:e9:77:da:32:c9:fd:d8:dc:a0:bf:
                    39:75:5c:a7:0a:fb:c7:b9:45:50:e2:b0:9d:9e:48:
                    0b:4e:17:02:ec:04:4d:11:54:38:aa:a9:20:45:14:
                    29:41:f8:30:c2:5f:1f:8e:c4:f0:5d:83:a0:9a:57:
                    32:8f:14:b3:0e:f3:a3:2d:fe:87:6a:7a:4d:79:ea:
                    f0:2f:80:cd:2b:e1:2c:ae:e0:ec:b2:a0:c5:f8:27:
                    e2:f4:91:d2:9d:9c:1d:26:49:4c:a1:3a:16:dd:27:
                    c2:81:35:d0:d9:66:11:6f:5d:f8:24:91:a9:71:a0:
                    29:6e:35:3e:0d:bb:18:b8:c4:68:54:5e:33:af:08:
                    25:3b:51:be:27:27:59:73:b8:75:9a:eb:a2:19:c9:
                    54:00:d1:9f:9d:4d:14:2d:52:8c:aa:f2:27:1d:91:
                    41:2c:63:b2:ea:4c:eb:6d:51:fe:40:3d:84:12:61:
                    0b:82:41:16:cd:41:b6:7c:16:d5:60:10:82:21:4c:
                    4a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:85:0B:9D:DE:4C:D2:B0:23:D3:38:F4:68:1E:9D:38:99:EC:E8:5B
            X509v3 Authority Key Identifier:
                keyid:EA:58:14:58:C8:71:0B:7F:28:62:36:1D:F5:BE:32:7D:72:42:3B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA581458C8710B7F2862361DF5BE327D72423B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:5b:23:4a:4a:f9:59:af:83:ac:8a:69:58:5a:ac:76:dd:44:
         9b:d9:8a:d7:09:48:14:bc:41:fc:13:32:b5:e1:84:b2:dc:9e:
         7e:c7:83:61:65:29:0c:5c:5e:90:5c:ba:5d:20:7b:7e:56:cc:
         f7:b5:33:93:02:39:fe:58:aa:7f:55:7b:c2:9c:2c:57:21:89:
         a6:9a:cb:3b:df:fc:c1:70:75:53:3d:82:9d:ca:44:0b:91:ec:
         40:9d:d1:08:a1:00:8a:c3:b2:34:03:bc:f8:86:a1:61:fe:fa:
         e1:cc:b1:ba:2a:21:4c:c0:e5:5d:c2:34:ce:d0:9f:96:1d:8e:
         ab:87:69:67:0f:6c:3b:15:fd:47:26:ba:ea:27:2c:d9:13:05:
         49:65:d3:92:1b:0b:3d:5b:73:41:ba:5c:23:51:35:29:bc:65:
         b0:f8:10:2f:47:f3:da:b8:01:83:a4:d5:cb:2a:e2:9c:23:1e:
         d2:b9:99:51:18:7a:b4:d7:b3:ab:62:8a:ef:11:fb:fd:26:a8:
         fe:6b:ef:7f:aa:f4:0c:d1:f5:f6:30:af:93:7e:1a:11:c4:c4:
         6c:06:cf:b0:b3:1c:4c:89:b9:23:91:57:a8:59:e9:51:c9:1e:
         ee:c5:80:19:d7:88:5f:7c:ed:94:59:8e:9b:87:78:c3:e8:70:
         00:ed:2a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 10:45:37 2024 by rpki-client on console-fra.rpki-client.org