Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa
File:                     3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (raw, json)
Hash identifier:          Zb3AnlfbFhVJYgt+3s/L7gam23czVP4/MNsn6mEPSpA=
Subject key identifier:   26:FA:6D:CD:79:CB:4D:24:21:92:01:B3:E5:29:03:0B:9A:54:71:14
Certificate issuer:       /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126
Certificate serial:       1AD26FE9C59B9849C42470E44964ED657168858B
Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa
Signing time:             Mon 01 Jul 2024 01:05:23 +0000
ROA not before:           Mon 01 Jul 2024 01:00:23 +0000
ROA not after:            Mon 30 Jun 2025 01:05:23 +0000
asID:                     137331
IP address blocks:        103.112.162.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl
                          rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 17:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d2:6f:e9:c5:9b:98:49:c4:24:70:e4:49:64:ed:65:71:68:85:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126
        Validity
            Not Before: Jul  1 01:00:23 2024 GMT
            Not After : Jun 30 01:05:23 2025 GMT
        Subject: CN=26FA6DCD79CB4D24219201B3E529030B9A547114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:6e:23:6c:b9:bb:e5:db:0d:25:24:ad:27:
                    7a:40:11:72:cf:e3:d4:82:2d:26:7b:00:ff:c1:c2:
                    a5:96:52:cf:25:47:11:7d:9c:6b:23:66:7f:39:54:
                    7b:68:1e:61:13:7f:ad:68:5a:42:7b:85:36:a6:53:
                    0c:2f:fe:4e:41:b6:47:9f:47:62:92:17:54:5a:d8:
                    7a:55:73:a2:5c:c7:13:1e:5d:c9:8f:90:b7:e3:71:
                    c8:17:3b:d2:8f:72:8e:ab:a8:90:d9:07:a2:d4:a1:
                    7f:ac:18:b5:07:8a:d2:70:d2:08:3d:1b:cf:0f:c2:
                    8f:e7:68:45:f0:37:1f:5a:e7:98:bc:86:39:77:bf:
                    b2:ee:62:bc:dd:f7:30:0b:53:6b:9b:05:c1:4a:b3:
                    ec:0d:73:67:43:e6:e2:0e:63:e4:08:59:de:09:02:
                    6c:a8:97:96:ea:38:61:89:a1:dc:bd:c9:da:24:3a:
                    b2:7c:ef:fe:db:df:88:96:fc:be:63:ca:8a:b4:17:
                    4d:f2:71:e9:a1:dd:8a:7b:38:26:4b:69:e7:82:0c:
                    6a:df:02:c8:6f:d2:1d:37:96:57:3b:60:77:a9:17:
                    9e:49:77:78:77:d8:94:49:2d:2e:5b:ab:dd:b7:d9:
                    3a:d4:52:dc:3d:ea:b8:50:8d:eb:fc:10:69:dc:31:
                    4c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FA:6D:CD:79:CB:4D:24:21:92:01:B3:E5:29:03:0B:9A:54:71:14
            X509v3 Authority Key Identifier:
                keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:1b:f2:d0:18:e6:ff:ea:62:da:49:d9:d7:83:e7:de:44:f7:
         61:9b:2f:b2:86:8a:91:d6:18:21:02:e8:67:c6:88:10:03:c4:
         5a:5b:c0:49:52:e2:dc:13:04:bf:e8:0a:0f:97:50:7d:27:d3:
         21:e6:55:34:dd:b8:d9:6f:c2:90:d6:7f:ce:51:b1:c8:4a:67:
         41:e2:d4:a2:4f:c1:c8:e1:83:90:a7:9c:66:fb:45:3f:24:85:
         1c:16:c5:a3:c6:3d:0e:17:2e:63:23:ce:b5:c5:63:f6:06:41:
         d1:c5:bf:2a:7f:bb:35:96:ce:53:4f:91:c4:46:8d:b0:96:a6:
         ca:69:5a:1a:3d:63:0c:67:a2:54:cd:b4:a8:1d:74:6b:1d:88:
         2e:c0:ff:8c:c5:b2:a7:df:3d:59:57:9c:30:93:ac:80:65:8e:
         12:51:b9:58:e1:8b:b1:62:2a:43:dc:6c:22:a7:ed:a5:d1:c0:
         18:1f:55:da:4a:9b:dd:fe:9a:02:20:03:df:84:c0:60:b7:fe:
         a8:6a:ed:d6:ca:ac:a7:73:12:1e:7c:67:f4:ba:7d:ab:de:70:
         8c:53:87:cd:3c:df:bf:d7:e5:58:9c:42:22:57:4d:0b:42:14:
         7d:d3:57:ca:77:e2:62:74:c2:0f:e8:df:be:fb:5e:b8:0f:60:
         d9:38:95:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:08 2024 by rpki-client on console-fra.rpki-client.org