Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa
File:                     3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (raw, json)
Hash identifier:          RyhWfwXlCMBs8cAhQi/uQxc2R18CBVPiQdjWG6YKEkE=
Subject key identifier:   A4:CB:35:8F:04:38:BB:37:45:1C:DD:DD:C6:10:31:0F:D7:C8:C2:C3
Certificate issuer:       /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C
Certificate serial:       5741BD8E27CCB95196D8C503FA5A8F9921EBAC0E
Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa
Signing time:             Tue 06 Feb 2024 13:00:00 +0000
ROA not before:           Tue 06 Feb 2024 12:55:00 +0000
ROA not after:            Tue 04 Feb 2025 13:00:00 +0000
asID:                     140462
IP address blocks:        103.153.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl
                          rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:41:bd:8e:27:cc:b9:51:96:d8:c5:03:fa:5a:8f:99:21:eb:ac:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C
        Validity
            Not Before: Feb  6 12:55:00 2024 GMT
            Not After : Feb  4 13:00:00 2025 GMT
        Subject: CN=A4CB358F0438BB37451CDDDDC610310FD7C8C2C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:7b:79:44:18:19:91:31:4b:f6:54:98:1e:
                    0f:1d:c1:75:0b:da:cc:2c:45:23:0c:07:ae:f5:e5:
                    14:60:8a:0b:28:42:f0:e2:22:6b:6c:25:4d:71:65:
                    e9:89:f7:c8:08:92:a2:21:99:c1:81:60:61:ce:52:
                    d0:3d:1c:b9:3c:cb:34:48:90:7d:a1:d4:1b:9a:42:
                    38:a7:2e:65:ca:55:5f:ce:50:3a:ed:18:89:c6:ac:
                    2c:6c:41:66:bb:b2:ad:ea:5e:b1:fd:e6:f6:76:d0:
                    dc:ab:d3:71:ef:1b:f3:d2:3d:a7:c6:02:2c:40:d1:
                    47:29:3e:d9:1a:21:18:52:c9:e1:f8:86:63:2d:dc:
                    83:3a:5b:e4:1a:d8:78:c8:ab:de:53:b1:82:14:95:
                    37:e7:39:9c:e0:c3:d3:c5:0a:08:29:63:fc:3a:3f:
                    94:a0:a6:32:d1:49:07:c2:6c:2e:8d:7c:5d:61:dc:
                    60:51:88:58:6a:b0:1b:50:72:e0:45:a6:55:78:39:
                    8c:0a:2c:22:44:5a:2c:ff:75:53:dc:8a:25:9b:02:
                    6c:5b:21:a6:53:13:ff:46:1f:06:d5:6d:de:66:98:
                    b0:67:7b:32:75:29:96:9e:99:08:4f:0b:41:a0:a3:
                    35:6f:6e:11:11:5e:e1:08:ab:36:ae:a2:c3:18:df:
                    58:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CB:35:8F:04:38:BB:37:45:1C:DD:DD:C6:10:31:0F:D7:C8:C2:C3
            X509v3 Authority Key Identifier:
                keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:dc:ed:ca:ab:e0:fa:64:15:34:4b:5a:44:c3:36:8a:26:07:
         40:3e:a7:f6:72:e4:f3:ba:11:ca:c4:21:bb:83:70:0b:7d:f5:
         3c:32:af:d5:3a:c9:a8:1a:1b:60:12:8b:eb:4b:14:94:c7:46:
         11:46:2f:7f:bd:9a:5f:d5:ab:9f:62:b8:c4:24:98:58:17:5d:
         f7:46:7d:53:4e:7e:c1:ea:72:f8:0e:32:20:b5:f4:83:42:b8:
         80:48:6a:93:bb:5f:f1:0e:09:86:b5:2e:10:aa:eb:31:30:86:
         fd:45:fa:31:d9:30:92:c0:d5:bf:0b:0a:18:58:8b:cd:2f:1a:
         c0:20:87:39:5d:c6:f7:62:95:44:8f:b5:b2:01:de:4b:f6:70:
         e7:8e:2c:1c:57:d8:82:14:0d:dc:86:de:5f:36:7f:d9:2e:b7:
         d5:2f:8d:98:92:1f:aa:fe:36:1f:67:53:b3:94:31:48:15:a2:
         f1:44:3f:17:88:c6:c4:60:90:71:e3:0e:51:a5:6f:8a:b4:53:
         93:c3:a5:be:8a:3d:bc:cc:2e:91:51:69:d0:ac:0c:51:0d:0d:
         40:86:fa:ec:e7:b9:23:2d:fb:6b:dc:39:83:2a:3e:13:ab:47:
         a3:9e:af:85:bc:97:57:8e:18:ee:09:ea:19:97:8e:ac:f5:a9:
         11:03:e2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-ams.rpki-client.org