Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa
File:                     3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa (raw, json)
Hash identifier:          EcFXjiBFgpM0EFq475DNDSffbGfpictm7Po6O/3zApw=
Subject key identifier:   B5:F3:9B:63:54:3D:4D:CB:47:81:81:D0:6B:C5:CF:92:4A:2F:3E:F1
Certificate issuer:       /CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD
Certificate serial:       387A18DF4BC128BFAF2D8299EC6C8FD4B2B9AD5E
Authority key identifier: DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa
Signing time:             Mon 03 Jun 2024 04:00:41 +0000
ROA not before:           Mon 03 Jun 2024 03:55:41 +0000
ROA not after:            Mon 02 Jun 2025 04:00:41 +0000
asID:                     150266
IP address blocks:        103.91.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl
                          rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7a:18:df:4b:c1:28:bf:af:2d:82:99:ec:6c:8f:d4:b2:b9:ad:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD
        Validity
            Not Before: Jun  3 03:55:41 2024 GMT
            Not After : Jun  2 04:00:41 2025 GMT
        Subject: CN=B5F39B63543D4DCB478181D06BC5CF924A2F3EF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:09:0a:98:e9:ab:dd:8e:8e:f8:83:91:6c:84:
                    d2:f6:f7:63:7d:63:2c:90:a2:ad:95:5d:74:94:5d:
                    60:d7:6e:de:56:79:ee:07:15:66:0b:0b:35:df:d3:
                    5d:c6:88:43:4f:e3:b0:39:38:a2:b1:74:f8:1e:c0:
                    52:e7:db:61:9d:74:4b:08:11:ff:3a:6e:4a:39:85:
                    da:1f:36:7d:80:3d:6c:8a:d2:bd:11:37:e1:73:9d:
                    57:aa:fe:dd:4a:e4:fa:32:bd:02:de:88:b0:99:37:
                    ff:41:72:ea:c3:6d:36:d7:f4:67:5c:47:9a:4c:3f:
                    89:99:fa:ae:63:cc:4a:1b:08:c8:8c:b6:3a:3a:b3:
                    34:17:5f:16:aa:6f:18:fc:22:f9:f5:b8:c1:3a:e4:
                    2b:0c:1d:2f:de:66:9f:5b:b9:d6:17:e4:46:07:70:
                    ab:18:59:09:8b:c0:9e:ff:7b:6c:52:0b:cd:ec:3a:
                    7f:3b:2d:f0:1e:30:4e:36:82:76:12:56:47:c1:dd:
                    ff:3f:98:85:b1:09:cf:08:fe:84:d1:85:60:64:c2:
                    af:10:39:95:a6:6c:d6:81:9b:c8:b3:d7:26:c5:b3:
                    0a:5e:e8:16:af:ce:11:88:44:65:ca:69:8b:24:02:
                    84:a5:86:5c:83:45:d3:60:91:de:74:48:8c:6c:bd:
                    73:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F3:9B:63:54:3D:4D:CB:47:81:81:D0:6B:C5:CF:92:4A:2F:3E:F1
            X509v3 Authority Key Identifier:
                keyid:DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:23:e5:04:4e:c9:9a:7e:86:80:cf:26:a7:c4:60:9a:c4:45:
         d5:82:24:a1:dc:b3:be:72:ae:5c:13:bb:ef:e4:b0:3e:55:89:
         60:2e:3a:15:18:c8:69:7a:24:d1:d6:22:bd:92:e0:6c:ad:52:
         23:17:1f:45:fa:5b:2c:d8:a4:e8:92:a2:d8:0b:80:c2:30:fa:
         c3:98:5d:34:0a:ec:8e:6c:29:0a:60:5f:d8:21:59:de:31:f9:
         20:30:c2:15:87:b5:66:01:c4:47:e2:17:2f:f6:ef:3c:f2:3a:
         5a:f7:73:21:1e:65:d4:0f:61:7d:4d:47:3a:ba:43:34:17:d7:
         39:2f:00:24:0c:27:3d:18:13:51:fe:75:d3:c4:50:74:04:c3:
         89:79:45:55:ba:6e:59:ae:5c:b5:1c:73:c8:61:3b:82:e7:83:
         f8:06:99:b0:44:bb:6f:d7:1c:ef:37:99:25:ce:ac:44:fd:a0:
         3e:11:70:21:cc:6c:9a:c9:f0:1b:c7:d3:0a:9a:57:b3:23:27:
         3b:c8:4a:e2:71:e4:39:a9:d1:55:41:10:ae:6d:86:eb:98:dd:
         b7:fc:45:b6:02:dd:d8:ac:62:ac:0f:5d:58:74:5b:de:da:b3:
         4e:e8:d3:f3:a6:a2:8b:91:6b:d9:48:3a:5c:e9:fb:e4:44:8e:
         0e:11:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:44 2024 by rpki-client on console-fra.rpki-client.org