Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/3130332e3132362e32362e302f32342d3234203d3e20313530353038.roa
File:                     3130332e3132362e32362e302f32342d3234203d3e20313530353038.roa (raw, json)
Hash identifier:          W2KsYV7s3B7deetQLmJlPpu1BTekhXi9yEpVHMLnObA=
Subject key identifier:   E8:B4:B2:52:BD:5F:0C:A7:BA:14:8B:71:3E:C4:35:91:57:10:A6:50
Certificate issuer:       /CN=E074B9AA718C37F8B126243F2E30DA35F43C0DD2
Certificate serial:       5F56CE6BFA46B2067FB6E9083522A2F94BFE33C8
Authority key identifier: E0:74:B9:AA:71:8C:37:F8:B1:26:24:3F:2E:30:DA:35:F4:3C:0D:D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/3130332e3132362e32362e302f32342d3234203d3e20313530353038.roa
Signing time:             Wed 20 Dec 2023 01:00:01 +0000
ROA not before:           Wed 20 Dec 2023 00:55:01 +0000
ROA not after:            Wed 18 Dec 2024 01:00:01 +0000
asID:                     150508
IP address blocks:        103.126.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.crl
                          rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:56:ce:6b:fa:46:b2:06:7f:b6:e9:08:35:22:a2:f9:4b:fe:33:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E074B9AA718C37F8B126243F2E30DA35F43C0DD2
        Validity
            Not Before: Dec 20 00:55:01 2023 GMT
            Not After : Dec 18 01:00:01 2024 GMT
        Subject: CN=E8B4B252BD5F0CA7BA148B713EC435915710A650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:00:fb:f1:12:37:95:7a:fa:8f:e1:84:07:4b:
                    81:85:80:4c:d8:7f:f3:c9:73:ea:11:17:36:86:fb:
                    f7:5d:ac:6b:90:fa:93:54:32:9f:7a:20:47:e2:aa:
                    75:65:14:81:83:91:4c:bc:e6:6e:e0:59:74:02:2e:
                    62:6a:60:10:72:4f:f9:c7:40:90:45:27:0f:eb:4e:
                    35:70:ce:70:ad:50:a9:8c:38:7c:0a:6d:c5:60:ac:
                    44:6b:40:3e:dc:de:c0:5d:14:d7:ee:37:e3:d9:95:
                    59:1d:e3:5d:ba:6e:f4:50:c4:ae:79:3f:67:90:ae:
                    e5:8c:dc:af:a1:88:18:14:b8:90:02:98:a7:6d:05:
                    12:31:ac:c9:9c:77:cf:74:f1:7e:e1:a5:b1:b8:f4:
                    eb:5d:6b:47:dc:fc:e0:6a:34:b3:06:22:2f:9c:75:
                    eb:7a:e4:40:6d:32:84:a6:61:7a:2d:09:70:b0:d1:
                    8e:79:91:03:63:4b:18:9c:15:3c:a6:d1:ff:0b:a2:
                    3a:b6:8a:20:cf:79:50:61:19:2a:74:89:97:1f:19:
                    18:00:0e:0f:c5:41:e8:f0:f3:1f:8f:11:5a:7d:bc:
                    58:c8:da:70:d2:1d:30:70:6d:91:37:a1:37:25:11:
                    ea:24:b7:3f:8c:d6:eb:9f:4f:7a:8b:c4:67:7f:f4:
                    59:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B4:B2:52:BD:5F:0C:A7:BA:14:8B:71:3E:C4:35:91:57:10:A6:50
            X509v3 Authority Key Identifier:
                keyid:E0:74:B9:AA:71:8C:37:F8:B1:26:24:3F:2E:30:DA:35:F4:3C:0D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/3130332e3132362e32362e302f32342d3234203d3e20313530353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:69:68:1b:06:81:c0:10:10:e9:f1:80:53:ee:87:0d:fc:29:
         64:ca:44:5d:8e:e9:68:92:29:ad:a9:54:d6:ee:88:2c:66:85:
         7a:c2:3b:ec:5d:d1:0f:7d:88:68:05:68:54:12:5e:b2:f6:b1:
         c6:19:c5:a4:ef:c1:cd:ad:24:c9:f8:99:f3:16:63:e6:b8:b4:
         e4:67:a2:31:44:23:30:0e:09:eb:15:fb:81:1e:bf:7a:fb:04:
         02:f2:da:87:e7:7e:3d:59:7b:4d:3a:f5:2a:92:61:8f:6b:14:
         24:ab:31:b6:4f:50:08:4a:84:67:c6:53:27:fd:ed:45:7b:fc:
         9d:0a:73:90:38:ac:5a:25:7a:6e:be:39:48:6f:94:d6:eb:b7:
         b9:13:6d:29:cd:c2:83:9e:41:b8:3d:2c:a8:82:d7:7d:c4:20:
         c6:7e:a9:72:8c:a4:b0:0f:41:35:10:fe:08:86:11:c4:ce:37:
         44:7e:97:a5:7d:a4:ed:34:69:b9:99:93:1d:6b:2b:0f:35:eb:
         d3:eb:68:74:a9:e1:61:b0:42:a0:ee:ed:86:fa:0f:21:c4:dc:
         88:85:f7:a0:43:e1:ee:5a:20:ff:ad:12:51:0e:37:e8:d3:8a:
         93:30:0b:f0:11:43:a5:84:0e:11:5c:6f:13:0b:51:d8:13:b5:
         9a:cc:f7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 10:44:52 2024 by rpki-client on console-ams.rpki-client.org