Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa
File:                     3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa (raw, json)
Hash identifier:          zIR+Ykvi5jN1SPGYLDHi0k04x4wWN2YHPJ1BhFoiVFo=
Subject key identifier:   EA:DC:AF:9D:6B:1B:DA:E3:5D:A3:B9:47:7E:7E:04:03:55:E4:64:37
Certificate issuer:       /CN=782659A7F6433029248A38A1C68F2E9971161391
Certificate serial:       6E3A7882B7A19917C63C6E34CA3687821D62CFE3
Authority key identifier: 78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa
Signing time:             Sat 17 Feb 2024 13:07:07 +0000
ROA not before:           Sat 17 Feb 2024 13:02:07 +0000
ROA not after:            Sat 15 Feb 2025 13:07:07 +0000
asID:                     151588
IP address blocks:        103.55.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl
                          rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3a:78:82:b7:a1:99:17:c6:3c:6e:34:ca:36:87:82:1d:62:cf:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782659A7F6433029248A38A1C68F2E9971161391
        Validity
            Not Before: Feb 17 13:02:07 2024 GMT
            Not After : Feb 15 13:07:07 2025 GMT
        Subject: CN=EADCAF9D6B1BDAE35DA3B9477E7E040355E46437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:d5:02:71:bf:56:4d:4c:28:d6:90:ef:9a:
                    b9:53:c2:9d:34:df:9a:be:67:9b:22:10:66:19:43:
                    08:cb:ef:41:bf:30:8e:84:72:f1:2a:4d:a4:09:3e:
                    48:25:d0:89:c0:55:2a:54:e5:c6:e8:4f:b8:5d:34:
                    fb:3d:ac:2a:2f:7c:22:8b:93:60:88:fd:73:f0:68:
                    af:e7:0a:71:76:e3:59:b2:1d:cf:8e:3a:93:59:70:
                    68:c0:f4:66:4a:bb:18:e6:ec:be:62:6b:d1:f3:04:
                    c1:8e:6e:ee:4e:71:94:c7:84:a8:af:1b:30:a5:bb:
                    76:4c:8a:d1:6d:57:a0:f1:cf:5a:9d:97:e0:7b:ed:
                    fd:b4:8d:40:fd:4a:bc:95:04:37:83:98:2a:c8:c8:
                    9d:78:58:65:f3:07:34:b7:14:2f:db:02:38:b7:97:
                    d9:c3:ef:39:5f:a2:88:27:a0:37:bf:5f:06:a0:7d:
                    14:a3:26:99:32:2e:e1:ee:29:f3:c3:fb:bb:8b:4d:
                    a9:c0:c8:d5:b7:78:cf:ae:8a:27:0d:0d:02:82:8c:
                    bd:63:19:ba:9a:22:a9:82:80:84:a0:48:f7:ae:bb:
                    63:3c:bc:d9:0b:f3:84:03:c2:b3:61:7c:c0:c9:76:
                    49:32:8f:d9:b4:da:0d:03:09:70:1f:e6:f4:23:d6:
                    75:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DC:AF:9D:6B:1B:DA:E3:5D:A3:B9:47:7E:7E:04:03:55:E4:64:37
            X509v3 Authority Key Identifier:
                keyid:78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e7:10:c5:ce:f5:ac:2b:0e:51:0a:05:fd:6f:88:d8:65:b1:f2:
         9e:1b:8f:f3:3b:aa:89:1f:91:de:61:d0:88:e2:58:33:63:52:
         cc:02:c5:00:02:9e:05:8b:0c:e7:18:56:be:b0:34:15:49:df:
         43:fe:4b:0a:39:74:0f:74:ec:6d:8f:68:9a:8c:fa:d8:f2:57:
         f8:5c:73:83:eb:00:8a:47:c5:d3:ee:a5:c2:c3:a9:19:0d:4a:
         1d:ca:20:28:41:f9:fe:80:e5:be:83:00:24:a0:81:38:57:4a:
         03:dc:fc:5e:08:fc:af:e4:02:32:17:6c:07:01:84:e8:a3:80:
         63:7c:ce:52:6b:16:78:2c:05:9e:22:47:8d:42:5c:7e:de:25:
         06:73:df:90:81:a9:55:67:f6:b8:72:ff:bd:fc:b0:53:09:f3:
         d1:f5:84:b7:27:ac:d7:66:9b:04:c1:bf:c2:56:6d:88:88:6e:
         42:ae:c0:75:12:05:81:34:e1:61:f1:31:6d:38:a3:01:f7:e2:
         cd:1d:a6:f3:3e:09:d5:4c:fa:84:64:c4:9a:db:83:64:84:5a:
         3a:72:00:12:b3:a6:5b:dd:0d:72:e3:eb:66:fe:af:36:63:b7:
         cc:78:3c:a9:45:29:a5:0a:ab:ac:76:82:9c:80:cf:27:13:15:
         a6:91:f0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:50 2024 by rpki-client on console-fra.rpki-client.org