Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa
File:                     3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (raw, json)
Hash identifier:          vn/jzJM/u7azecE9ydE9MylwAQT3zN9oIJjnMwqLrw4=
Subject key identifier:   F2:B3:C0:1E:8D:A6:E3:0D:5F:0D:12:32:06:53:18:20:CA:AA:77:3F
Certificate issuer:       /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383
Certificate serial:       6D661DC973713CA9511ADB37B79D7C3B5689234C
Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa
Signing time:             Thu 17 Oct 2024 09:02:51 +0000
ROA not before:           Thu 17 Oct 2024 08:57:51 +0000
ROA not after:            Thu 16 Oct 2025 09:02:51 +0000
asID:                     136121
IP address blocks:        103.154.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl
                          rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:66:1d:c9:73:71:3c:a9:51:1a:db:37:b7:9d:7c:3b:56:89:23:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383
        Validity
            Not Before: Oct 17 08:57:51 2024 GMT
            Not After : Oct 16 09:02:51 2025 GMT
        Subject: CN=F2B3C01E8DA6E30D5F0D123206531820CAAA773F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e8:4f:43:9e:6b:8c:64:55:c4:ae:20:83:48:
                    74:80:02:56:3c:bf:04:f3:b6:19:13:c7:b1:1c:6e:
                    be:18:93:ca:c0:1d:11:b1:40:05:66:f5:0b:b3:5e:
                    01:2b:45:50:0f:e2:f7:99:6f:ff:e1:ce:ad:a8:3b:
                    26:c0:d8:25:23:22:68:97:b3:32:eb:c8:5d:bc:f2:
                    7e:57:d5:4b:70:bf:45:9b:66:c8:af:8a:16:66:63:
                    42:5a:9f:d6:36:71:6e:20:8a:f4:1e:29:73:81:d8:
                    e3:b9:25:a4:6f:97:84:36:bd:30:f4:7f:76:8b:5b:
                    0f:f7:76:bc:d8:6e:b8:4a:68:d3:4c:90:51:00:9d:
                    58:0d:e4:24:43:2d:1d:7c:2e:f0:24:05:f4:af:6c:
                    51:93:fc:80:81:fd:d9:55:fb:fc:cf:39:82:f8:48:
                    00:cc:bf:74:ea:e4:23:20:f2:a9:39:6f:05:22:fd:
                    29:a9:90:4a:97:3c:d5:bc:92:34:38:4b:11:c2:dc:
                    02:b5:fc:88:60:6b:cd:e4:16:cd:28:a0:b5:cf:2c:
                    15:6b:ed:b4:20:93:93:1c:89:36:e4:d9:ac:42:1e:
                    5a:b6:df:d3:87:97:c8:c9:e9:1d:d7:83:4e:18:ce:
                    e2:27:1a:d0:66:6f:3a:66:04:9f:81:28:0d:c4:a5:
                    2d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B3:C0:1E:8D:A6:E3:0D:5F:0D:12:32:06:53:18:20:CA:AA:77:3F
            X509v3 Authority Key Identifier:
                keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:77:fd:79:9d:4d:87:23:5b:7c:9d:de:d8:91:ad:56:42:06:
         42:44:1c:38:90:41:47:47:83:39:1a:14:20:6d:94:85:a5:63:
         45:05:2e:e6:cd:1e:35:12:c2:95:e2:ce:f2:9a:f0:8e:a8:b3:
         e2:c3:ee:f6:14:ed:35:8f:02:8a:4e:87:78:e5:4b:75:20:fc:
         58:b0:d9:af:04:67:88:38:f7:2b:bb:43:9c:1e:df:0d:2e:d1:
         9e:33:27:29:a5:4e:65:bd:3d:1f:32:be:0f:f5:5f:f2:dc:1d:
         bf:fb:40:b3:27:48:41:d2:ea:ed:22:6a:35:2f:31:68:f1:2d:
         bf:12:14:f0:31:19:9f:e5:7c:db:03:3e:72:73:90:c5:09:c7:
         32:41:25:2b:6e:69:3c:69:ef:09:69:3d:36:24:85:98:ba:d2:
         53:44:8e:0c:36:82:c6:ed:bd:37:cb:ec:ce:47:04:22:ae:40:
         59:51:3f:c7:c5:56:29:43:df:f5:ff:4e:88:14:e1:31:d3:f7:
         3a:c0:6c:26:ca:1e:1b:cd:88:f7:68:10:29:37:7a:0a:79:97:
         27:a4:84:a4:1f:22:d2:a8:3a:66:3a:f6:0a:31:db:7b:6a:0c:
         54:2d:9b:51:ef:e7:e5:60:4b:13:af:75:3e:9e:d3:ae:6e:6e:
         0a:85:28:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:43 2024 by rpki-client on console-fra.rpki-client.org