Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa
File:                     3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (raw, json)
Hash identifier:          ZIvgL7/TSUjSQgis1M5EWea31F4jkT0hl76IfkMAhxg=
Subject key identifier:   3A:15:B9:85:38:80:51:0A:8A:C0:0B:AA:C6:40:2D:F3:AB:3F:67:C0
Certificate issuer:       /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB
Certificate serial:       264E0F07F9531BB2FC1D8897B5D6F5F5E8996E50
Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa
Signing time:             Thu 11 Jul 2024 14:00:42 +0000
ROA not before:           Thu 11 Jul 2024 13:55:42 +0000
ROA not after:            Thu 10 Jul 2025 14:00:42 +0000
asID:                     138860
IP address blocks:        103.152.92.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl
                          rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4e:0f:07:f9:53:1b:b2:fc:1d:88:97:b5:d6:f5:f5:e8:99:6e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB
        Validity
            Not Before: Jul 11 13:55:42 2024 GMT
            Not After : Jul 10 14:00:42 2025 GMT
        Subject: CN=3A15B9853880510A8AC00BAAC6402DF3AB3F67C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:15:20:b0:5a:bd:71:54:b8:33:5c:68:46:
                    4a:a1:2e:97:3f:e1:72:2c:4a:f8:da:a8:ac:2b:b0:
                    d9:5b:29:4c:79:72:54:24:55:2a:fa:68:dc:da:5e:
                    e2:89:e5:fa:1f:e6:4b:08:16:1e:6c:00:d4:60:ff:
                    cd:24:a1:df:f6:4a:55:1e:b9:fb:67:89:37:a5:8d:
                    49:ae:ec:d8:71:b9:0d:74:8d:18:6b:a5:43:88:c1:
                    7a:11:7c:1e:fe:25:72:83:25:51:47:18:7d:9a:83:
                    59:ca:64:6f:92:d5:b4:d6:e8:7b:87:0d:1c:fa:55:
                    32:24:4a:ea:0d:09:2e:f9:34:f0:c3:51:20:e5:c7:
                    3a:95:83:94:fa:3d:3b:c6:5c:cf:c3:9d:a5:1f:73:
                    b0:f1:ee:57:71:e0:78:09:77:e3:ef:a3:1c:28:fe:
                    26:25:9a:15:a7:be:25:df:17:ea:3e:d9:94:c5:bb:
                    33:80:f9:7c:96:fc:a1:4c:61:a5:dd:e5:ee:43:82:
                    06:52:32:41:36:ed:48:e3:b0:14:d5:03:9c:20:e4:
                    6e:80:d2:50:fb:3d:d6:97:fb:01:83:8b:5e:6d:2a:
                    c0:c0:71:8b:25:9b:2e:6f:fb:eb:f8:a1:2b:e7:21:
                    a2:c8:d6:05:4b:81:49:65:e4:3f:ab:f3:e9:be:54:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:15:B9:85:38:80:51:0A:8A:C0:0B:AA:C6:40:2D:F3:AB:3F:67:C0
            X509v3 Authority Key Identifier:
                keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:12:be:5e:6a:be:d6:a1:ab:a6:84:8e:37:f5:d2:d7:4c:c3:
         48:0b:1f:a4:b1:9f:e5:7a:11:ff:92:2b:d2:b9:63:a3:eb:85:
         25:84:b1:0c:a2:19:b7:5d:2a:99:d0:6c:7b:05:14:4b:cb:18:
         09:d6:92:02:3f:7b:4c:19:cb:4a:08:01:cb:a1:86:bd:e9:46:
         61:ad:26:ee:36:f5:aa:89:48:b5:a0:91:6b:0b:59:b8:2a:7a:
         79:01:15:23:68:88:34:58:93:0a:2b:0e:58:75:5f:ea:d5:cb:
         fe:de:d5:f3:91:73:bf:ed:00:04:5b:df:43:08:36:03:7e:a4:
         26:91:0a:ae:d4:96:38:4a:46:a1:05:dc:24:9c:be:65:4b:d0:
         79:7c:0c:72:41:fb:33:fe:a3:c7:fa:ae:b9:fd:77:3a:23:09:
         a6:d7:b4:1b:e0:9e:e4:db:b9:c7:cb:1d:b2:cd:5e:04:6f:31:
         da:8b:b0:f4:04:14:97:50:f7:1e:a0:35:e8:0f:88:8b:a1:cc:
         9f:ae:19:81:58:f8:42:92:8e:59:47:1e:ec:79:c2:df:97:18:
         3f:31:1c:9f:93:47:66:95:25:7f:4b:76:f7:04:14:80:02:7c:
         2d:b7:37:c0:e9:8e:17:ed:04:78:0b:c6:37:ef:61:75:5a:fa:
         bb:be:02:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:13:11 2024 by rpki-client on console-fra.rpki-client.org