Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa
File:                     3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa (raw, json)
Hash identifier:          4UlB7i0589nKSOpw5whL7S4/WX5WKZ2ygul1LiJws7M=
Subject key identifier:   73:5B:E3:C9:EF:00:2D:F1:3E:36:8E:8C:03:7E:E9:15:7C:F1:C1:55
Certificate issuer:       /CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33
Certificate serial:       2BC7CBA9FDA7AEB376CF8820570953F966E0D3F7
Authority key identifier: 45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa
Signing time:             Fri 29 Dec 2023 02:35:55 +0000
ROA not before:           Fri 29 Dec 2023 02:30:55 +0000
ROA not after:            Fri 27 Dec 2024 02:35:55 +0000
asID:                     149913
IP address blocks:        103.191.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl
                          rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c7:cb:a9:fd:a7:ae:b3:76:cf:88:20:57:09:53:f9:66:e0:d3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33
        Validity
            Not Before: Dec 29 02:30:55 2023 GMT
            Not After : Dec 27 02:35:55 2024 GMT
        Subject: CN=735BE3C9EF002DF13E368E8C037EE9157CF1C155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:15:0b:24:dd:13:f6:72:07:52:75:ca:95:
                    10:28:bf:49:e3:f2:29:8d:e6:69:1e:c9:3e:94:f7:
                    0e:0e:f6:b2:54:79:66:4c:b4:ae:fa:a7:e3:af:b1:
                    3f:45:c5:18:e3:e8:6e:55:c9:c0:f0:80:12:b6:72:
                    90:5c:63:4b:ef:26:04:09:32:87:2a:1e:ff:43:17:
                    9d:fc:f7:39:93:26:78:d2:bc:a3:01:31:e4:a4:c0:
                    b2:3e:81:86:02:4c:4c:06:01:c5:b9:dd:a3:3c:ea:
                    40:93:82:f2:dc:3b:e3:fe:92:23:2c:54:46:6a:35:
                    81:ae:72:b5:21:f4:14:98:22:2e:0d:30:3b:50:41:
                    65:5d:4f:6f:58:71:81:37:df:95:d9:f5:37:84:c9:
                    3d:cb:b2:e4:ff:43:b7:03:d3:00:5d:cd:97:b1:5d:
                    cd:49:5b:b9:c6:64:da:a8:d1:4d:ec:5d:3f:04:df:
                    a7:5c:49:74:c9:3a:b7:1b:ed:6b:e9:a0:bf:04:37:
                    14:ce:f6:38:67:40:0e:b2:68:5e:88:6a:4f:bb:fd:
                    a6:cf:70:8d:58:54:96:b7:dd:af:7d:0a:bd:1f:fb:
                    50:ed:02:bd:11:52:c5:6f:e7:e9:1c:5a:d2:1b:d8:
                    c0:7f:6c:9c:41:8c:b6:b1:41:53:50:64:02:6a:a8:
                    d7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5B:E3:C9:EF:00:2D:F1:3E:36:8E:8C:03:7E:E9:15:7C:F1:C1:55
            X509v3 Authority Key Identifier:
                keyid:45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:1e:6b:55:b7:60:30:91:26:a7:ac:fd:73:c2:5f:9a:34:0d:
         a3:23:73:1a:db:63:b1:79:77:80:c7:2f:a7:fc:67:7d:20:be:
         3b:5b:55:5d:5f:35:ee:d9:ed:89:ba:36:7c:f8:a9:d6:9a:e9:
         fe:3f:0d:d0:40:da:23:45:02:b3:4f:36:a1:76:57:94:c8:c0:
         58:17:ed:36:4a:c0:e1:a2:d2:62:60:9c:f2:66:ff:c4:b6:f4:
         d7:1b:01:e5:b7:77:d7:48:00:c8:8c:02:6f:1c:53:2f:86:53:
         ad:e7:0a:5e:2a:a0:b2:81:69:8e:9e:55:06:06:29:05:45:b8:
         ec:7e:8e:df:98:a6:e5:05:e0:63:a3:0c:f2:aa:f0:82:c7:e2:
         b5:ed:ef:fe:ab:71:70:6c:dc:30:27:a3:df:8a:3d:6e:9f:01:
         d2:2e:2f:b2:dc:0a:26:26:eb:a7:83:e9:7e:77:f5:34:d8:45:
         e4:c0:6f:94:1e:1e:d1:2d:d9:d7:f2:9b:01:35:3e:0f:4d:cd:
         65:da:e4:a2:6d:23:f1:3e:80:44:ab:c3:b9:75:5d:b4:fd:56:
         89:41:5a:12:8b:af:94:f8:d4:27:e5:2e:5d:2b:e3:79:15:ae:
         8b:75:4a:6f:f1:82:bb:13:0a:a9:d5:e5:42:1f:94:c8:2f:94:
         cb:2e:7a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:18:49 2024 by rpki-client on console-ams.rpki-client.org