Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa
File:                     3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa (raw, json)
Hash identifier:          C1HDysyBAYIV87MX2nkoQa8+J2k0ll26INQNAzhcixM=
Subject key identifier:   E6:49:0E:65:AE:AA:84:19:5F:BA:DF:B7:6C:85:6F:31:DA:81:5F:DD
Certificate issuer:       /CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3
Certificate serial:       40D0679E4C49CE2C9BFFC9B2E846D59B66604B48
Authority key identifier: 3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa
Signing time:             Fri 19 Jan 2024 06:19:54 +0000
ROA not before:           Fri 19 Jan 2024 06:14:54 +0000
ROA not after:            Fri 17 Jan 2025 06:19:54 +0000
asID:                     138127
IP address blocks:        103.132.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl
                          rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d0:67:9e:4c:49:ce:2c:9b:ff:c9:b2:e8:46:d5:9b:66:60:4b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3
        Validity
            Not Before: Jan 19 06:14:54 2024 GMT
            Not After : Jan 17 06:19:54 2025 GMT
        Subject: CN=E6490E65AEAA84195FBADFB76C856F31DA815FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7d:22:27:59:80:14:df:8b:9e:ef:09:7a:99:
                    4f:8a:80:b4:23:68:68:c0:cc:6a:17:1e:bf:e7:35:
                    93:44:60:f4:f2:0e:73:b6:8f:a2:2b:3b:50:86:c8:
                    5a:44:89:c2:8b:78:71:1b:64:91:81:5c:14:14:ec:
                    35:e2:9c:a7:48:7a:80:6f:cb:b7:c8:34:71:a0:5c:
                    84:78:3e:a8:5f:df:7e:66:70:b7:c5:cb:b9:fd:fd:
                    57:e0:37:86:61:5e:30:e9:dd:3e:85:64:5a:c2:51:
                    3e:da:c1:7a:91:b9:d5:23:c4:56:8b:2a:1d:09:f7:
                    bb:ce:3b:47:04:e7:52:44:8a:b2:ea:ba:87:20:14:
                    7d:7c:b4:8e:8d:93:d1:ce:3e:84:20:15:cb:9d:b2:
                    55:a1:0a:92:df:c6:a1:d0:cb:66:c2:0d:ed:5d:70:
                    63:4a:d0:76:3b:f1:74:aa:37:a2:e2:1a:30:a4:51:
                    11:30:bf:4f:c1:e8:9e:7c:f7:83:45:9d:22:38:5f:
                    1f:c1:81:08:73:d7:8b:9f:d5:88:10:08:69:00:c5:
                    94:30:73:a9:41:80:a9:7f:74:ad:13:86:73:29:a0:
                    dd:ec:58:fc:55:75:de:aa:67:4d:45:60:6d:80:90:
                    3a:4d:0f:37:b8:ac:28:2e:5b:ff:a9:db:ec:87:de:
                    7c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:49:0E:65:AE:AA:84:19:5F:BA:DF:B7:6C:85:6F:31:DA:81:5F:DD
            X509v3 Authority Key Identifier:
                keyid:3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:2e:1c:ba:31:b5:a2:42:c5:9e:03:1a:d6:71:52:57:b4:40:
         99:a7:fa:d8:67:af:85:4d:34:4c:b5:01:2c:bb:f6:44:e0:dd:
         90:ea:c2:17:cc:77:74:2e:28:d9:95:92:26:39:91:f1:27:32:
         a7:1c:78:26:39:1f:cd:7f:69:1f:70:70:54:39:e6:2a:81:6e:
         67:14:bf:fc:b7:e9:8a:62:48:aa:58:13:79:ca:66:60:3e:4c:
         4f:4c:f7:0a:b4:da:f7:bd:71:35:fe:68:53:d4:6b:7f:12:a7:
         25:01:99:e1:5d:f2:9d:df:3d:94:34:92:2d:46:9e:e5:47:c6:
         13:72:31:b7:64:b4:ca:f7:9e:83:25:42:d7:61:06:32:c9:17:
         dd:dd:c1:52:f7:e5:a7:1a:fa:6b:5c:d1:24:1c:43:80:b1:fa:
         c4:14:52:3b:c0:23:e8:2d:00:8c:2c:5c:f1:b6:61:37:eb:ea:
         df:4f:7f:9b:e6:57:67:b7:e4:68:5d:70:2d:a2:6f:69:5e:95:
         d9:61:89:54:1c:b6:10:6e:ea:8d:e3:cc:43:e6:62:e2:0e:45:
         8a:0a:2f:6f:7c:9e:91:ad:76:0c:02:83:04:45:84:55:ec:57:
         f1:0f:e8:1c:40:44:6a:d1:d9:b8:a7:c6:00:d2:7f:7c:82:21:
         97:4a:98:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org