Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36362e302f32342d3234203d3e20313336303535.roa
File:                     3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (raw, json)
Hash identifier:          Ew00lLJ4KWjRbTc+6hMLhQEtb2s7eFTTs9QqPSOZ0yc=
Subject key identifier:   2C:67:2B:ED:C0:8C:51:98:CB:C2:CA:E4:CD:B7:B1:5E:2F:55:9F:8A
Certificate issuer:       /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
Certificate serial:       7D0FC54200ABDBA457C09D28E3AC46EDFCB6A53B
Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36362e302f32342d3234203d3e20313336303535.roa
Signing time:             Tue 27 Feb 2024 04:00:00 +0000
ROA not before:           Tue 27 Feb 2024 03:55:00 +0000
ROA not after:            Tue 25 Feb 2025 04:00:00 +0000
asID:                     136055
IP address blocks:        103.81.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl
                          rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0f:c5:42:00:ab:db:a4:57:c0:9d:28:e3:ac:46:ed:fc:b6:a5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
        Validity
            Not Before: Feb 27 03:55:00 2024 GMT
            Not After : Feb 25 04:00:00 2025 GMT
        Subject: CN=2C672BEDC08C5198CBC2CAE4CDB7B15E2F559F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:0b:8e:8d:9c:8c:fb:33:e4:04:95:86:0a:
                    d6:38:f7:1c:89:9b:24:36:67:b8:fa:ba:9b:dd:88:
                    2f:67:3f:80:73:34:11:01:ad:26:89:47:70:2a:61:
                    a7:3a:bc:3e:ed:7f:d4:26:58:18:2f:c4:34:f0:be:
                    2e:77:66:2b:12:c9:95:d4:5b:79:60:d4:fb:fa:e3:
                    35:5a:2a:39:64:b2:dd:6c:b7:b4:fc:70:3e:11:81:
                    1f:f3:4c:68:29:7c:28:44:0d:26:03:6e:b4:e7:d1:
                    34:0d:5c:29:c7:4d:da:99:df:31:0c:20:04:b3:7b:
                    29:e0:8d:08:12:37:5a:34:05:17:a4:6a:2a:81:f2:
                    9a:ad:fa:a1:6b:ee:19:f9:2b:00:27:e6:ce:a0:85:
                    12:07:b8:6b:53:cc:27:35:45:14:af:f7:73:df:3e:
                    0a:7e:48:27:b3:08:d9:5c:9e:76:1a:92:79:3e:2d:
                    07:26:42:f0:4a:41:b4:c6:fe:6d:dd:ad:1e:5e:56:
                    84:b6:11:89:a0:dd:9e:29:56:79:bc:11:00:2f:a5:
                    37:b6:fd:da:22:a1:54:a6:33:3d:01:a4:6f:44:8b:
                    ca:a8:69:82:fc:51:fa:6f:b3:ee:16:d4:64:97:c4:
                    76:b9:06:a7:7a:f4:8b:f4:f4:76:49:5f:ad:60:93:
                    29:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:67:2B:ED:C0:8C:51:98:CB:C2:CA:E4:CD:B7:B1:5E:2F:55:9F:8A
            X509v3 Authority Key Identifier:
                keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36362e302f32342d3234203d3e20313336303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:b5:54:2b:86:34:23:48:88:cc:a9:d9:eb:05:a0:56:3f:cc:
         5e:28:23:06:20:cc:49:c7:64:17:1d:dd:f7:9b:7b:d7:e5:0c:
         d9:a3:0b:a0:84:d2:e6:27:b2:63:d6:c6:31:bd:80:88:cb:f2:
         c3:1b:c8:a7:91:f0:87:9a:30:42:b0:98:a9:48:b1:45:ea:82:
         cc:d0:3c:03:30:23:43:e8:d2:5a:ec:f6:b8:5b:1d:78:b3:c6:
         0f:ae:58:65:23:15:b6:28:38:94:eb:83:cc:e1:cb:f5:61:d9:
         03:fe:7b:40:38:a5:c1:fa:8a:21:9b:0c:f3:01:33:0f:be:05:
         09:17:54:ad:0a:64:69:ef:ef:e8:f8:b7:8a:73:16:06:24:d3:
         33:23:2b:21:63:7d:d1:b8:79:0d:2b:9d:d8:f5:1f:6b:6d:a2:
         9d:c9:ce:a2:2d:65:67:e6:51:30:30:fd:d8:0e:01:f6:37:b7:
         c8:54:35:ed:d7:6d:1e:ff:12:8b:f6:36:b6:1c:39:49:57:ec:
         75:b8:a7:ab:cb:56:f1:3e:84:ca:fa:f2:da:d2:2c:c9:64:e8:
         90:16:a8:eb:43:c7:8e:36:f7:ff:b4:18:29:a5:f8:58:d5:18:
         fd:36:f9:7d:2a:ab:a3:ee:5b:2a:03:8b:d9:82:0c:e9:06:ff:
         d0:2b:eb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:39 2024 by rpki-client on console-fra.rpki-client.org