Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36342e302f32342d3234203d3e20313336303535.roa
File:                     3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (raw, json)
Hash identifier:          RNWBZnujJkB5kmH/EjVN6qJCJQz1ml47hBaVhETVidA=
Subject key identifier:   18:02:46:EF:47:85:A1:A5:C6:4D:72:0B:40:58:FC:B9:BF:05:1D:5C
Certificate issuer:       /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
Certificate serial:       0770CD1D2C77EBBDA8B71142AE1A2A70DDB1799B
Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36342e302f32342d3234203d3e20313336303535.roa
Signing time:             Tue 27 Feb 2024 04:00:00 +0000
ROA not before:           Tue 27 Feb 2024 03:55:00 +0000
ROA not after:            Tue 25 Feb 2025 04:00:00 +0000
asID:                     136055
IP address blocks:        103.81.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl
                          rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:70:cd:1d:2c:77:eb:bd:a8:b7:11:42:ae:1a:2a:70:dd:b1:79:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
        Validity
            Not Before: Feb 27 03:55:00 2024 GMT
            Not After : Feb 25 04:00:00 2025 GMT
        Subject: CN=180246EF4785A1A5C64D720B4058FCB9BF051D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ea:99:8f:0b:a8:86:57:19:35:69:60:eb:97:
                    09:a9:1a:c4:01:ca:43:f6:06:dc:ef:6c:41:a4:07:
                    6e:52:7f:38:a5:f1:66:a4:08:07:54:ad:8a:6c:36:
                    10:92:7a:fa:26:37:07:22:4b:0b:7e:0b:45:db:1a:
                    cc:1e:e2:aa:e5:ef:36:f8:e0:bb:6b:5a:09:a2:c0:
                    1f:bc:99:db:fe:a8:97:ff:69:39:95:de:3b:90:d9:
                    ed:b5:a7:3c:92:20:e4:cc:60:b2:0f:8f:33:e3:7d:
                    de:bb:98:4f:70:fc:1d:f6:f0:4e:29:76:04:da:61:
                    80:06:f7:7d:6e:d1:df:03:be:76:82:11:25:3b:0b:
                    3c:16:17:0c:b6:cd:ec:f1:49:b6:b7:dd:14:0a:26:
                    b3:50:05:80:78:2b:28:af:da:28:e3:89:3f:7e:57:
                    21:86:27:63:f1:3e:70:38:2f:94:4c:b7:66:e5:d7:
                    c1:8a:89:74:38:63:b9:e3:20:12:80:db:5f:22:17:
                    b6:ab:9f:d3:85:0d:5d:6c:b0:cc:47:f4:55:58:47:
                    3e:42:ce:6c:46:10:a7:95:d3:12:00:1e:a7:cb:53:
                    2e:0e:4a:28:b6:bc:36:01:19:0c:d9:93:9d:ed:6a:
                    5b:e2:ce:64:45:77:9a:02:26:b4:fc:8b:d8:c6:0a:
                    ab:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:02:46:EF:47:85:A1:A5:C6:4D:72:0B:40:58:FC:B9:BF:05:1D:5C
            X509v3 Authority Key Identifier:
                keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36342e302f32342d3234203d3e20313336303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:3b:fc:c5:43:5a:89:e6:b4:74:74:26:30:4c:61:41:b4:e0:
         c1:58:e9:82:34:d2:88:c8:ea:ec:3f:9b:9c:cd:b5:19:ac:05:
         cc:fa:55:da:0c:26:c7:8d:9c:b4:2e:88:3a:6f:c4:93:6c:2e:
         0a:98:47:a4:98:f9:c2:46:55:b6:4e:05:a9:b8:d3:f9:31:64:
         29:36:84:10:be:db:3b:6e:54:2f:15:1a:9d:74:30:72:0f:60:
         4b:92:6f:42:4b:b7:06:da:85:bd:53:19:bc:5e:82:57:e0:ff:
         b1:c8:6b:0b:ba:46:0f:b6:41:15:a2:54:2e:8d:9f:dd:b6:b9:
         f5:a2:3c:9f:11:f7:86:f3:ea:48:1a:ce:9e:ea:8e:f0:04:d5:
         63:bc:13:1f:f1:8d:79:c9:88:78:6e:ff:2f:86:79:57:c1:55:
         65:a4:db:d4:a4:74:c2:79:6c:df:ec:d1:4a:0e:fe:2b:63:19:
         b9:43:ac:58:74:73:6f:ae:96:8d:96:60:3b:bc:01:f8:76:5d:
         b9:0b:39:ee:a9:90:a1:03:aa:ef:92:69:b6:cf:b8:d9:4d:8d:
         2a:8a:79:29:04:73:17:a4:29:16:c8:fe:43:9f:83:ab:bb:37:
         86:dc:e5:9a:77:78:b7:c2:1b:2a:1c:d7:63:df:6b:e0:18:95:
         e0:9f:4a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org