Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa
File:                     3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (raw, json)
Hash identifier:          MeEd/Ro5wDh3435Ok3avWaDRb9M+pVKmccKrncFYuEQ=
Subject key identifier:   BD:A8:8B:AB:4B:5F:92:9F:95:FC:1B:59:47:6A:77:67:7E:C1:44:05
Certificate issuer:       /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710
Certificate serial:       6CFE04C4D947349831340E3FD00DA38CE2C78520
Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa
Signing time:             Fri 08 Mar 2024 02:00:01 +0000
ROA not before:           Fri 08 Mar 2024 01:55:01 +0000
ROA not after:            Fri 07 Mar 2025 02:00:01 +0000
asID:                     141078
IP address blocks:        103.155.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl
                          rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 23:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fe:04:c4:d9:47:34:98:31:34:0e:3f:d0:0d:a3:8c:e2:c7:85:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710
        Validity
            Not Before: Mar  8 01:55:01 2024 GMT
            Not After : Mar  7 02:00:01 2025 GMT
        Subject: CN=BDA88BAB4B5F929F95FC1B59476A77677EC14405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:39:82:7e:f5:60:94:ae:04:d9:2c:a6:d0:9b:
                    14:af:2a:65:07:25:67:9f:07:7b:e6:4a:ec:e8:9a:
                    58:67:54:96:a2:77:d3:03:d9:af:72:ee:2d:31:79:
                    a7:79:49:b7:ec:85:4b:71:f1:43:62:d6:b2:16:a0:
                    f3:be:67:1f:61:86:42:cf:51:5a:c1:83:ea:b5:17:
                    68:7a:b4:2a:b2:96:7c:0b:44:b1:f7:d7:b3:0a:a6:
                    e8:b2:c6:7b:2d:eb:55:7e:e6:1f:c9:39:4e:a5:b3:
                    a3:1d:f3:bf:17:4e:bd:aa:6c:7b:7e:3e:ac:e8:fd:
                    66:a5:4c:63:88:76:4d:c5:b7:ae:38:6e:ef:a5:50:
                    6b:c9:14:5b:86:8b:12:a3:ee:21:3d:82:a1:a6:fa:
                    15:db:72:9d:7d:8b:53:af:04:fd:5e:41:f3:e7:48:
                    b2:f7:18:81:d1:6a:cc:de:d6:b6:14:86:e7:12:fe:
                    20:29:19:04:02:57:72:e2:47:df:5a:b0:8a:2a:c2:
                    06:cc:a4:b9:e7:9e:84:5e:d0:98:6a:22:5d:9b:76:
                    08:ef:c7:ba:1a:bd:ba:77:cb:91:ee:31:9d:4d:b7:
                    d7:f3:29:9e:42:89:64:43:13:86:13:2a:98:9e:55:
                    1b:1a:45:5a:b8:54:6e:f6:76:f7:a7:8b:d4:cd:ea:
                    d1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A8:8B:AB:4B:5F:92:9F:95:FC:1B:59:47:6A:77:67:7E:C1:44:05
            X509v3 Authority Key Identifier:
                keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:b6:33:55:b2:09:d3:48:d6:ce:a5:e0:4f:07:6b:9a:f3:e0:
         9e:5a:f3:e2:52:80:fe:d0:56:33:e0:87:46:e4:9f:f4:f6:99:
         e7:ca:10:83:19:ee:5d:39:f1:cf:47:52:58:e4:56:f8:86:7c:
         97:cb:26:40:68:b5:bf:3f:5d:5b:d3:cf:fc:b6:b9:78:43:40:
         9b:eb:41:9e:82:bf:06:c1:c2:fa:ae:ad:12:89:ce:91:28:ce:
         a4:43:22:fc:1d:2f:f4:96:29:ef:63:98:3a:f1:e6:7d:9b:95:
         e9:1b:90:dc:87:f9:d4:b8:56:40:b0:5f:d0:f7:3e:cb:e9:20:
         7a:86:2c:1a:d9:6e:38:03:b8:4c:1c:00:a6:0e:f8:b4:3d:21:
         ed:a4:f0:bb:2b:98:40:1f:37:95:4e:49:96:20:53:36:66:e7:
         e2:59:64:7a:c1:76:f1:22:7d:4f:32:52:a3:27:59:37:b7:8a:
         f5:c8:4d:85:4b:cb:81:0a:3a:e0:60:90:ad:44:2d:1f:7d:93:
         f3:bf:69:d3:d8:44:f0:bb:b5:75:3c:16:03:32:2f:a1:79:23:
         3b:c8:4a:da:8b:05:27:9e:2d:70:29:ff:f8:bc:f2:d7:96:18:
         1a:13:0c:5d:bb:87:d8:b9:dd:45:df:f0:3c:fe:b2:7b:1f:81:
         af:f2:65:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 00:18:57 2024 by rpki-client on console-ams.rpki-client.org