Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa
File:                     3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (raw, json)
Hash identifier:          gmvaIJPpCzVhgz7cFO42u4hoxoXz/uk2JEoHGVjST1k=
Subject key identifier:   F3:5D:DE:49:1B:55:EE:C2:DF:D5:72:96:8B:91:48:12:AB:2A:D3:4A
Certificate issuer:       /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
Certificate serial:       515EFA95A72B5A567C8D629C5F375ED02187AFE5
Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa
Signing time:             Thu 01 Feb 2024 17:00:00 +0000
ROA not before:           Thu 01 Feb 2024 16:55:00 +0000
ROA not after:            Thu 30 Jan 2025 17:00:00 +0000
asID:                     138089
IP address blocks:        103.124.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl
                          rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 09:52:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5e:fa:95:a7:2b:5a:56:7c:8d:62:9c:5f:37:5e:d0:21:87:af:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
        Validity
            Not Before: Feb  1 16:55:00 2024 GMT
            Not After : Jan 30 17:00:00 2025 GMT
        Subject: CN=F35DDE491B55EEC2DFD572968B914812AB2AD34A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5f:d6:d4:48:a7:45:98:fb:32:4f:65:7b:41:
                    63:76:a2:a4:8e:ba:2e:99:39:84:f5:a0:6e:d1:aa:
                    d8:6a:0e:6a:7b:8f:02:9e:d8:4d:c6:e1:9d:cd:ac:
                    98:8b:a1:11:1e:e5:65:08:94:8f:30:ab:bf:cd:35:
                    74:79:e8:79:d8:bb:63:06:16:f1:d9:57:db:20:0a:
                    3d:4b:6d:c7:40:85:b4:e7:fc:04:1c:9d:72:77:08:
                    d5:11:c8:48:51:d8:75:42:4f:5a:42:be:c0:d1:5a:
                    45:66:de:94:04:03:7d:61:7b:0d:74:4f:2a:ca:1c:
                    d3:71:9f:4e:69:54:7c:ab:83:62:0e:e0:27:11:e0:
                    69:33:40:d0:ef:ea:58:e0:2d:68:a5:43:58:59:46:
                    cf:10:f4:6d:4f:53:29:2b:b2:f8:2b:2f:36:a5:aa:
                    c6:43:03:8b:c9:a7:12:2b:e9:44:13:bc:c4:56:16:
                    6e:86:39:03:58:d1:f9:3f:5f:38:8a:f4:82:d5:1f:
                    b5:9d:80:1a:29:fb:3b:98:12:bf:15:d9:3b:c7:2a:
                    0c:7a:4e:04:c9:a9:4e:42:43:fe:2b:7f:19:f3:90:
                    a7:b9:7f:9f:7c:d8:3c:ac:5f:c4:b6:b2:12:60:0b:
                    67:0a:9b:09:6c:fc:94:64:b9:29:d9:d0:cb:da:27:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5D:DE:49:1B:55:EE:C2:DF:D5:72:96:8B:91:48:12:AB:2A:D3:4A
            X509v3 Authority Key Identifier:
                keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:12:b0:40:49:27:6a:06:c9:ee:a1:be:7a:f6:48:ff:86:b2:
         b1:6f:1f:e1:ce:6a:af:25:20:ad:e7:cc:0a:4c:d7:48:df:f6:
         30:86:d9:3e:48:3f:b4:2b:c8:f9:2c:a8:7f:a9:51:e5:cd:91:
         6d:e5:22:99:b3:2b:e3:ff:26:d9:96:f4:cb:8b:12:3b:ea:38:
         0a:3c:c3:60:67:bb:96:0a:0b:66:48:33:ea:58:83:a7:51:1b:
         5e:3a:ab:29:a4:1c:7b:68:d6:fb:63:3c:00:80:a9:2c:f5:af:
         65:e3:be:c1:1c:52:d8:3a:89:44:60:b6:d0:53:f6:de:3a:65:
         08:2f:4f:f6:98:56:82:87:a2:2b:9f:f7:0e:b5:bb:c8:e0:da:
         ea:3f:7b:4a:9e:6f:cc:4f:b0:1d:f6:70:e2:a9:5f:e5:c3:5b:
         0f:ee:44:7a:5b:23:d7:4a:f5:cc:97:f0:5b:f7:98:ac:27:fa:
         df:2d:c6:dd:f0:3c:7b:e0:71:0b:c3:21:33:1a:91:6e:3e:6f:
         b6:86:20:09:77:7f:2b:73:44:90:b4:6b:0b:96:9d:61:ab:2c:
         55:3c:78:ac:18:4f:03:99:49:a5:bd:f6:97:bb:d4:2a:f3:41:
         9f:0b:d9:96:12:6b:ec:6e:5c:fb:0c:e0:92:78:78:40:9b:a1:
         1e:13:f4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org