Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa
File:                     3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa (raw, json)
Hash identifier:          fLXVT7lGT6QWujn3tIusyMzrLDKrWbnN+mifeaCOu/U=
Subject key identifier:   09:77:2B:39:09:5C:75:6F:5D:1B:2A:F7:46:F9:BC:4F:D3:3E:F9:C2
Certificate issuer:       /CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337
Certificate serial:       2F229CBE8774F4CB7F2246FB320DA7C9DCF0CFF3
Authority key identifier: BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa
Signing time:             Mon 01 Jul 2024 01:02:20 +0000
ROA not before:           Mon 01 Jul 2024 00:57:20 +0000
ROA not after:            Mon 30 Jun 2025 01:02:20 +0000
asID:                     141056
IP address blocks:        103.155.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl
                          rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:22:9c:be:87:74:f4:cb:7f:22:46:fb:32:0d:a7:c9:dc:f0:cf:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337
        Validity
            Not Before: Jul  1 00:57:20 2024 GMT
            Not After : Jun 30 01:02:20 2025 GMT
        Subject: CN=09772B39095C756F5D1B2AF746F9BC4FD33EF9C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5c:55:b8:5f:82:ee:34:41:21:e3:43:7b:ae:
                    cb:a7:da:ec:23:8d:88:09:5c:78:14:45:8e:36:42:
                    09:d1:5a:dd:ef:48:45:f9:d0:19:0d:3f:1c:a0:2b:
                    bc:d6:ce:06:7e:db:5e:62:74:3f:e3:94:c8:b3:8f:
                    eb:d1:c8:1e:40:68:92:1e:85:4a:72:f2:d3:76:eb:
                    9b:f7:4d:f0:6c:09:e4:23:b3:17:79:11:da:cd:fe:
                    bd:f5:8a:86:ec:e9:60:81:6e:5c:8d:36:80:3c:73:
                    f9:cf:54:16:a3:a4:ac:64:6b:d6:a7:a1:0b:d4:85:
                    d0:6d:0a:7a:09:ab:2e:a7:b7:89:99:ac:6d:3d:0f:
                    7c:4c:1a:78:51:b9:37:ca:c3:b6:93:86:d4:47:be:
                    b0:eb:60:86:e4:72:d2:ec:3c:dc:a4:b8:b9:24:09:
                    40:2b:74:06:a3:df:a4:7f:e6:dc:b1:46:93:f8:75:
                    fc:99:17:d5:a9:2a:be:ae:c7:3e:b8:47:46:20:b3:
                    8c:d0:74:0b:f7:77:f9:37:c8:41:c1:8e:b4:68:06:
                    04:f2:e2:9d:be:20:27:96:0d:ff:cd:aa:4c:fc:28:
                    5d:f5:2d:40:ab:2a:a8:9e:ff:d4:50:c0:2c:39:ce:
                    c9:b9:e9:51:d6:12:af:97:c4:87:95:9a:f5:e8:03:
                    7a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:77:2B:39:09:5C:75:6F:5D:1B:2A:F7:46:F9:BC:4F:D3:3E:F9:C2
            X509v3 Authority Key Identifier:
                keyid:BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:19:09:bc:48:01:d1:38:30:fd:ed:2e:4b:fa:04:aa:94:a7:
         1c:5a:21:43:0a:7a:49:99:4b:71:1a:b5:75:48:ba:69:62:69:
         72:73:de:35:5f:f6:de:4e:a9:35:d1:5f:0b:1f:1a:4d:21:a3:
         59:29:8f:b6:d1:4c:07:76:dc:2c:6e:5a:c3:07:60:38:3a:3c:
         23:8e:45:e6:7d:83:c3:ad:c6:fe:21:e4:91:1b:15:80:ac:b9:
         8a:c6:5d:e0:f2:e6:3f:fe:a9:7f:44:42:ae:4b:4b:1b:39:03:
         b0:20:78:c8:8e:06:18:d8:02:9c:b7:0e:77:0b:83:4b:f3:6f:
         5c:54:a3:8a:d7:25:a2:95:e4:86:bb:84:e1:ef:fe:70:1f:3b:
         22:47:ca:33:00:21:53:b2:00:eb:0c:c2:3e:35:13:c1:47:b0:
         2f:d4:38:77:5d:27:8a:58:0a:87:fb:0b:bc:4b:9a:8f:24:9d:
         32:ab:21:a9:b6:c1:b2:c8:f0:43:40:62:cd:44:93:ee:3a:0a:
         b3:c2:95:3b:54:15:e4:6b:6c:cc:a4:85:05:05:5b:f6:58:d1:
         a3:01:70:79:73:1b:4a:2f:4d:af:1c:d6:90:5b:36:08:26:1c:
         30:b7:7e:33:00:16:0b:ad:b3:3e:f4:fb:f6:11:57:a1:ad:9f:
         f9:16:7f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:18:49 2024 by rpki-client on console-ams.rpki-client.org