Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa
File:                     3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa (raw, json)
Hash identifier:          /tsulZ2LMnJp6UXJDN+AaVc6c4OfvqPf+pFesEQfj6s=
Subject key identifier:   95:74:54:6B:10:28:01:6F:2F:D0:53:C7:2D:E5:F4:45:BC:46:0D:A4
Certificate issuer:       /CN=27A3131BB606D93657151019C1A9735DF861C9D4
Certificate serial:       1CAD14B510EF33D581E518D203C87F56A46A619D
Authority key identifier: 27:A3:13:1B:B6:06:D9:36:57:15:10:19:C1:A9:73:5D:F8:61:C9:D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa
Signing time:             Tue 04 Jun 2024 05:00:30 +0000
ROA not before:           Tue 04 Jun 2024 04:55:30 +0000
ROA not after:            Tue 03 Jun 2025 05:00:30 +0000
asID:                     138084
IP address blocks:        103.131.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.crl
                          rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 17:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ad:14:b5:10:ef:33:d5:81:e5:18:d2:03:c8:7f:56:a4:6a:61:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27A3131BB606D93657151019C1A9735DF861C9D4
        Validity
            Not Before: Jun  4 04:55:30 2024 GMT
            Not After : Jun  3 05:00:30 2025 GMT
        Subject: CN=9574546B1028016F2FD053C72DE5F445BC460DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ad:0c:48:3a:f6:54:0d:b9:07:34:e0:90:b3:
                    73:35:fd:43:67:d1:a8:44:7b:93:bb:0e:ff:28:ed:
                    27:81:64:c7:4c:cb:f8:3c:33:35:c4:be:a0:5a:54:
                    c6:99:bb:95:d3:9a:66:1c:a4:58:9a:54:87:4c:70:
                    fb:a0:a7:09:a7:71:d7:78:9b:86:ee:e8:30:52:2a:
                    89:29:69:0c:b5:f7:3e:8f:11:be:73:63:32:35:05:
                    11:25:cc:eb:f0:00:e4:d0:c0:c9:d2:80:2a:17:81:
                    b8:a3:51:41:02:61:dc:3d:65:cd:65:8b:ec:ac:84:
                    45:e2:1d:41:98:ad:24:2b:fd:f6:f0:7a:d8:fd:f5:
                    70:84:1d:f2:0b:06:74:df:df:54:41:49:32:94:2f:
                    67:29:ff:9b:d2:95:d9:5b:71:77:87:d2:3e:1e:b7:
                    3b:34:f6:6d:91:a6:b4:49:68:f6:47:61:e2:99:83:
                    24:c4:6b:8f:8b:b8:db:98:9b:d0:fd:84:63:be:b8:
                    d5:be:9a:1a:91:74:c2:a7:53:41:eb:05:08:b6:81:
                    57:04:01:97:02:40:31:7d:43:e5:48:2f:1a:6d:71:
                    da:af:ec:13:19:59:df:6d:90:a0:c3:f9:ab:de:d2:
                    71:37:d2:43:d0:7b:c5:e9:c8:7b:96:2e:25:cb:36:
                    55:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:74:54:6B:10:28:01:6F:2F:D0:53:C7:2D:E5:F4:45:BC:46:0D:A4
            X509v3 Authority Key Identifier:
                keyid:27:A3:13:1B:B6:06:D9:36:57:15:10:19:C1:A9:73:5D:F8:61:C9:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:90:af:2c:9c:89:88:50:ab:fe:99:d2:26:48:33:cb:3a:b7:
         4b:b1:9f:9d:85:62:36:08:96:86:3e:f0:5c:56:50:3f:01:b3:
         e9:64:46:f8:04:58:6b:4d:90:30:04:f0:e8:91:f0:df:82:84:
         08:93:b8:6a:02:32:fc:b9:a0:66:17:d4:e4:ed:50:f2:c0:0e:
         3d:d1:8c:90:9e:ec:b7:8c:04:48:ea:a4:3b:fa:c5:10:f6:54:
         8c:1a:b5:6a:56:2b:dc:1e:9c:f9:aa:5d:9a:94:87:a0:8b:39:
         f3:b1:49:61:1e:aa:28:3a:67:8d:89:a9:50:b4:68:9f:e7:4e:
         f3:07:ba:8e:82:02:4b:a7:01:3f:db:28:2b:c5:ed:5d:c7:d0:
         fe:39:cd:a3:e5:93:da:34:94:d7:e3:a5:e9:98:f4:a8:7b:f2:
         13:26:ac:e8:e8:51:e4:6e:84:b9:a4:69:91:74:14:e1:ac:b8:
         24:09:eb:73:ec:49:9c:f7:a4:45:6b:6e:38:50:f3:a3:78:ae:
         0a:32:c4:b7:73:ab:5f:c2:30:b7:8f:52:0a:c0:36:ba:c4:fa:
         98:3a:8d:18:b0:e4:2f:c4:51:4a:b6:d2:1b:36:9d:c2:5b:65:
         d3:5a:61:02:55:47:e1:87:68:f2:6f:4f:c3:f6:dc:8c:0b:c5:
         5b:d7:29:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-ams.rpki-client.org