Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/3130332e3130322e32362e302f32342d3234203d3e20313530323833.roa
File:                     3130332e3130322e32362e302f32342d3234203d3e20313530323833.roa (raw, json)
Hash identifier:          12uOr6HaVyr0gZiixYXjTu8yU822YFZ7jX5XTfDRMgk=
Subject key identifier:   2E:26:F0:39:93:6A:D5:FD:ED:6E:08:04:4A:75:6C:C4:86:BF:AB:E0
Certificate issuer:       /CN=056930DE7F7401B4CCAB5EC010FBE292D6553EE0
Certificate serial:       71F37A5E9BB65FAAFFF5DC9B84D9A0900AD277C5
Authority key identifier: 05:69:30:DE:7F:74:01:B4:CC:AB:5E:C0:10:FB:E2:92:D6:55:3E:E0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/3130332e3130322e32362e302f32342d3234203d3e20313530323833.roa
Signing time:             Tue 30 Jan 2024 06:00:00 +0000
ROA not before:           Tue 30 Jan 2024 05:55:00 +0000
ROA not after:            Tue 28 Jan 2025 06:00:00 +0000
asID:                     150283
IP address blocks:        103.102.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.crl
                          rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f3:7a:5e:9b:b6:5f:aa:ff:f5:dc:9b:84:d9:a0:90:0a:d2:77:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056930DE7F7401B4CCAB5EC010FBE292D6553EE0
        Validity
            Not Before: Jan 30 05:55:00 2024 GMT
            Not After : Jan 28 06:00:00 2025 GMT
        Subject: CN=2E26F039936AD5FDED6E08044A756CC486BFABE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:53:67:a2:5d:67:5e:2f:a3:92:f7:ab:ee:
                    47:49:4f:8e:5d:92:d0:d4:5a:2e:db:d4:f2:c8:2d:
                    2d:a9:8f:82:55:92:4e:1d:ae:68:f8:89:a2:05:6b:
                    f0:f2:3f:b5:b1:ab:2f:97:1c:7d:28:20:55:cb:7f:
                    41:0e:b2:cf:d3:14:2a:70:2c:53:cc:f4:13:37:c4:
                    2f:ed:0d:8e:ca:bb:25:d2:82:39:85:5d:42:29:75:
                    7c:83:c8:82:d3:32:42:27:09:f9:57:08:9e:96:71:
                    58:66:48:ed:74:7d:62:d7:8b:90:1a:b6:60:79:c4:
                    9a:4f:c9:5e:a8:d7:38:66:8c:52:25:c1:a6:74:1a:
                    83:d2:65:99:24:82:df:a1:30:4b:76:f0:4f:45:3c:
                    c8:37:b5:9c:88:cc:a2:17:36:81:2d:02:e3:fe:57:
                    70:1a:77:dd:c7:c6:a3:1b:7f:99:6e:95:98:2e:c6:
                    c8:42:62:15:9f:6f:57:58:aa:f8:ab:2f:36:a9:eb:
                    f7:eb:db:82:b4:1a:84:47:74:75:4a:20:53:60:7f:
                    e3:e8:16:20:e6:30:8f:a2:0c:ce:02:4c:8d:f4:21:
                    24:d3:55:f5:0c:c6:57:8f:21:86:e5:7a:5b:76:4e:
                    50:72:49:4f:c8:64:9a:35:56:a2:33:55:ec:85:fd:
                    aa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:26:F0:39:93:6A:D5:FD:ED:6E:08:04:4A:75:6C:C4:86:BF:AB:E0
            X509v3 Authority Key Identifier:
                keyid:05:69:30:DE:7F:74:01:B4:CC:AB:5E:C0:10:FB:E2:92:D6:55:3E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/3130332e3130322e32362e302f32342d3234203d3e20313530323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:5a:6a:42:39:43:ee:30:e6:76:f3:13:99:10:a6:80:f1:be:
         a7:27:2c:1d:6d:b9:e2:49:be:51:50:88:5b:bc:4a:77:2c:2f:
         a5:f6:5b:75:d4:68:18:c3:3a:86:78:e2:8d:d2:d0:49:e7:8e:
         dd:ed:c3:ba:4c:0a:46:37:f7:a1:fd:9d:60:9b:2b:37:61:15:
         9f:17:7e:b7:c4:fd:54:06:ee:98:5c:21:b8:d1:af:28:a8:16:
         04:95:24:d6:c2:8c:92:35:50:df:d3:8f:00:de:b9:eb:8a:6b:
         5c:da:82:9d:19:d1:46:e3:8c:cf:88:7f:4a:d4:1c:d6:63:7c:
         95:0b:40:4e:71:d4:30:e8:e8:68:d0:bd:64:1c:d9:76:77:5d:
         84:e1:f0:31:0e:a8:ec:69:c4:b4:7f:46:4c:73:cf:00:3e:5f:
         53:08:46:2d:3b:02:ee:a0:eb:44:58:ca:51:de:a6:46:70:1b:
         46:5b:72:c6:b4:49:c6:1f:c3:4c:88:6c:b1:9b:2b:f6:74:66:
         98:38:e1:f3:be:aa:8d:c7:5a:cd:8b:7e:b6:af:9a:77:81:ce:
         a6:bf:bf:62:e5:ef:c0:b2:1e:ac:44:ae:c0:30:d1:b0:d9:60:
         2c:a8:52:3c:28:61:04:75:a5:fc:31:e6:f3:7c:cf:3f:c0:05:
         94:fd:9f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:25 2024 by rpki-client on console-ams.rpki-client.org