Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233392e302f32342d3234203d3e20313336313136.roa
File:                     3130332e39342e3233392e302f32342d3234203d3e20313336313136.roa (raw, json)
Hash identifier:          /+ihrCwRJHcdq4/ivXHtL21pgqcL5wsmPwNxpbuChtw=
Subject key identifier:   1E:0C:1B:6D:00:6B:82:7B:FE:43:4D:53:AA:F8:7C:9B:27:17:87:E9
Certificate issuer:       /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Certificate serial:       48A434F4E6E4922AFCC35F54CD10250B953DB0FE
Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233392e302f32342d3234203d3e20313336313136.roa
Signing time:             Mon 18 Mar 2024 02:03:53 +0000
ROA not before:           Mon 18 Mar 2024 01:58:53 +0000
ROA not after:            Mon 17 Mar 2025 02:03:53 +0000
asID:                     136116
IP address blocks:        103.94.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
                          rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a4:34:f4:e6:e4:92:2a:fc:c3:5f:54:cd:10:25:0b:95:3d:b0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
        Validity
            Not Before: Mar 18 01:58:53 2024 GMT
            Not After : Mar 17 02:03:53 2025 GMT
        Subject: CN=1E0C1B6D006B827BFE434D53AAF87C9B271787E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f4:36:4d:80:99:c9:29:b4:36:5a:1c:2d:85:
                    38:40:77:ef:ce:9d:c9:6e:cc:fa:00:af:86:8e:e4:
                    83:4e:13:75:63:10:19:17:29:68:3b:30:c5:28:c0:
                    f4:95:1f:4b:5d:4a:63:f3:37:72:48:c3:0e:a6:ed:
                    d5:fc:5e:68:53:28:15:f7:39:71:e2:ff:2c:bf:5a:
                    ab:7a:8e:b5:76:a1:37:4f:f1:f0:87:79:68:dd:88:
                    7c:ab:c1:36:3c:72:fb:06:35:d0:5a:54:76:be:a3:
                    83:0f:67:26:b0:e2:6f:7e:ff:19:45:6a:72:06:b5:
                    0c:f6:8a:8c:38:aa:28:ca:99:f0:23:cf:b1:a4:34:
                    2d:99:86:36:88:af:b3:5f:d9:94:0a:f4:8b:bb:4d:
                    cd:a2:96:78:af:31:a9:cb:91:88:56:37:04:97:3a:
                    be:95:82:4f:15:27:3c:5f:a8:7f:ed:e3:18:87:e7:
                    cb:07:68:b9:45:d7:0f:c4:f4:28:b9:a6:81:e5:7a:
                    be:07:3c:82:c6:67:7b:c8:2d:91:e0:37:2d:90:e0:
                    24:53:6d:df:51:9f:f7:32:6c:8d:c7:59:4f:5f:ad:
                    d6:df:6a:1c:57:aa:08:fb:85:28:8f:e9:13:e5:8a:
                    6f:6b:30:fc:11:67:ee:b8:03:6b:07:02:53:b9:92:
                    03:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0C:1B:6D:00:6B:82:7B:FE:43:4D:53:AA:F8:7C:9B:27:17:87:E9
            X509v3 Authority Key Identifier:
                keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233392e302f32342d3234203d3e20313336313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:03:86:c8:bc:df:fe:fa:ba:b5:35:73:8e:a7:29:5a:fd:24:
         48:6b:57:98:51:fd:45:19:c2:dc:1f:83:e3:c4:e0:57:f5:8c:
         e7:2e:b3:2a:6f:94:85:ee:db:2b:03:33:75:da:f2:f2:da:5e:
         d4:21:d7:24:fa:bc:8b:e5:67:51:1d:62:d7:44:f2:2b:49:19:
         7b:cb:6a:a5:8a:f8:25:b8:09:1d:ea:f3:74:61:d8:81:4f:ba:
         e5:b9:55:9c:76:b8:a8:cf:40:63:82:89:06:12:90:25:50:f1:
         e8:d5:9f:1c:c8:8a:ef:85:5c:47:5e:fb:84:8f:60:a2:6e:da:
         82:7b:ac:d4:95:7a:b5:2c:83:9c:75:e3:8c:e4:6f:94:8c:b4:
         39:c0:ce:6a:c4:bd:32:d4:0d:cf:5c:47:24:58:a3:64:ed:2d:
         12:9c:bf:fa:9b:28:68:7d:bc:75:17:44:e4:1d:68:92:2a:83:
         f9:ff:e4:aa:d8:7d:f5:62:4a:9d:8f:3d:f8:85:8e:e4:64:6f:
         cc:23:d1:1e:8d:1e:50:37:4b:85:01:98:1d:62:19:c9:86:21:
         7e:3c:4a:d6:da:c2:2d:2c:ff:d0:a8:8b:19:a8:65:51:fc:f2:
         77:d9:c1:d5:d0:e8:88:c5:71:ca:15:8c:0c:84:17:85:a7:05:
         32:68:00:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 22:25:40 2024 by rpki-client on console-fra.rpki-client.org