Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa
File:                     3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (raw, json)
Hash identifier:          b6CBOzcvdl0KHLI0+f+XFdnJ4tdExuTqFIU+gaE363o=
Subject key identifier:   5F:46:3F:F7:86:B9:4C:20:D8:B6:21:17:8C:97:61:AA:B8:B8:4F:BB
Certificate issuer:       /CN=F39284EDA8B81E5F498D167C4DB09075943DA23C
Certificate serial:       43AE9E0C3288CB6CA367D68EBF304A4DD7638286
Authority key identifier: F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa
Signing time:             Wed 18 Oct 2023 05:01:08 +0000
ROA not before:           Wed 18 Oct 2023 04:56:08 +0000
ROA not after:            Wed 16 Oct 2024 05:01:08 +0000
asID:                     136128
IP address blocks:        103.94.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl
                          rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 23:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ae:9e:0c:32:88:cb:6c:a3:67:d6:8e:bf:30:4a:4d:d7:63:82:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F39284EDA8B81E5F498D167C4DB09075943DA23C
        Validity
            Not Before: Oct 18 04:56:08 2023 GMT
            Not After : Oct 16 05:01:08 2024 GMT
        Subject: CN=5F463FF786B94C20D8B621178C9761AAB8B84FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d9:ac:90:1f:d0:b4:ca:28:2a:bb:5d:c7:9b:
                    5c:07:ef:d5:c5:6d:a8:ff:f9:1a:48:bb:7a:7d:9b:
                    2a:96:8e:69:d9:4e:03:aa:f2:1f:63:7f:11:02:15:
                    4e:eb:e3:d6:42:8a:9a:7f:5b:2a:de:78:28:a3:54:
                    ce:72:24:80:df:de:a9:ba:84:75:44:71:26:9a:d7:
                    03:89:5b:c3:3d:f4:a8:c2:8b:1d:44:a1:3a:14:5a:
                    38:e3:22:e3:bc:de:24:64:4a:02:78:44:6d:57:d6:
                    49:f7:21:dd:26:21:92:d4:22:67:4d:8c:e4:97:c3:
                    48:6b:bd:c8:a1:83:80:79:73:87:35:61:10:6f:c7:
                    8d:76:cc:04:79:ed:2c:a7:d1:cc:c5:23:01:d0:80:
                    ed:59:d3:d6:1e:08:61:ce:a5:7a:2b:b0:5a:8b:50:
                    66:0c:6d:f0:9d:7c:2c:ab:67:dc:33:c6:92:dc:5e:
                    3d:7a:44:ff:c3:4a:5d:aa:83:12:03:ed:41:36:b3:
                    19:6d:63:4e:11:47:e9:96:dc:47:5f:9f:a9:6f:88:
                    5c:7c:6d:2b:5b:c4:0d:9a:99:a2:48:95:96:3e:fd:
                    62:a7:59:cd:2a:32:d2:dd:b5:71:d8:da:e7:60:91:
                    d6:56:88:20:50:b5:22:b9:e7:a5:45:19:41:d4:a0:
                    eb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:46:3F:F7:86:B9:4C:20:D8:B6:21:17:8C:97:61:AA:B8:B8:4F:BB
            X509v3 Authority Key Identifier:
                keyid:F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:63:06:bc:ab:d1:e4:f5:61:00:e7:4c:b0:72:77:57:25:b0:
         a1:a9:bf:14:e5:79:65:3c:01:8a:65:e6:e1:44:d4:fe:a3:3d:
         9e:12:b8:4c:88:eb:00:a1:b4:ae:32:1f:3a:47:ef:d0:85:9d:
         1e:cc:e4:55:3f:08:82:0b:99:78:b3:41:02:1f:0c:7a:8e:ce:
         72:1d:75:76:73:ad:8b:5b:dc:78:bc:45:24:71:ce:75:9f:3c:
         06:25:54:56:58:61:dd:bc:cc:6d:c7:0b:0f:2d:fe:e6:76:26:
         29:72:75:f7:08:3f:01:f0:59:32:d4:67:2e:bd:78:5d:02:25:
         43:f8:a1:4e:69:81:cd:8e:52:d4:c2:53:c3:92:cd:ad:6c:f8:
         a0:0b:fe:d9:10:3f:04:4b:ba:fe:1b:28:bf:5e:6c:56:e7:1e:
         de:01:97:65:af:d4:c7:c0:fe:a2:fb:63:6b:f2:92:e0:69:98:
         b2:ca:37:0e:14:4d:d5:ce:04:61:78:a7:6a:7f:52:95:4c:67:
         f0:ed:42:85:b2:64:05:5c:df:a7:98:9c:24:0f:b5:4a:9c:47:
         df:0d:61:75:6b:e4:49:7a:1c:11:4a:22:45:e9:05:3b:8f:bf:
         3b:c7:76:13:8a:19:4f:b0:7c:3c:b7:a7:3e:62:d1:e0:be:77:
         85:fc:86:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 01:18:37 2024 by rpki-client on console-fra.rpki-client.org