Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa
File:                     3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (raw, json)
Hash identifier:          APvRAxFS/BciWNG05hryQjcSm8DABLzRNy+ilZSBuW8=
Subject key identifier:   05:F8:2F:79:A3:28:35:D8:4F:AA:D4:17:4B:4F:47:A6:1B:FA:7D:E9
Certificate issuer:       /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95
Certificate serial:       3F44E5FDCAB5207986AAD869F3544AD58CCBDDD4
Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa
Signing time:             Wed 21 Aug 2024 06:00:00 +0000
ROA not before:           Wed 21 Aug 2024 05:55:00 +0000
ROA not after:            Wed 20 Aug 2025 06:00:00 +0000
asID:                     140407
IP address blocks:        103.122.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl
                          rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:44:e5:fd:ca:b5:20:79:86:aa:d8:69:f3:54:4a:d5:8c:cb:dd:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95
        Validity
            Not Before: Aug 21 05:55:00 2024 GMT
            Not After : Aug 20 06:00:00 2025 GMT
        Subject: CN=05F82F79A32835D84FAAD4174B4F47A61BFA7DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:2e:54:5c:0f:34:9d:e6:3d:63:96:ca:48:59:
                    d0:fa:6e:0e:20:5c:8d:80:09:eb:fc:6e:1e:bb:42:
                    5b:66:60:b0:14:34:18:7f:fe:8b:7b:7c:59:0d:8f:
                    db:6d:ac:1c:94:c3:0d:07:26:b4:55:f7:be:56:93:
                    bb:ae:4b:f0:1e:1f:86:9b:63:03:6a:64:fe:68:52:
                    b5:5e:0f:d8:e0:46:c3:e8:30:89:15:ca:11:8a:69:
                    6d:20:fc:d8:e1:1e:68:ad:39:70:30:03:23:2a:f3:
                    e9:b1:2d:d4:b6:c8:4e:e6:eb:78:48:79:f7:54:c3:
                    ca:e7:8f:f2:d8:86:c2:ce:4a:8c:2e:53:4e:e8:93:
                    fe:84:25:5a:1a:0a:9f:d6:85:9c:cc:c6:8f:36:29:
                    46:83:e2:a3:35:c2:10:3e:54:b7:00:c6:cd:2e:74:
                    80:37:b9:0c:af:f9:f2:10:32:ad:f1:8d:77:03:d5:
                    2c:0a:b5:a1:fb:a5:ea:c7:c7:da:e3:05:ea:4d:9f:
                    9d:c2:6c:03:84:9b:c5:56:94:cb:48:94:9a:2d:54:
                    62:55:e4:5d:a5:46:2c:5e:35:8c:10:53:f9:cb:5f:
                    31:aa:07:81:7f:dc:d7:f9:ee:5f:32:8e:34:c0:c4:
                    0d:27:df:62:a4:98:f0:27:aa:bf:19:6f:27:fe:91:
                    17:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F8:2F:79:A3:28:35:D8:4F:AA:D4:17:4B:4F:47:A6:1B:FA:7D:E9
            X509v3 Authority Key Identifier:
                keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:2b:70:a2:61:6e:eb:a8:5b:06:17:81:5f:24:94:de:48:c3:
         f2:3a:00:8f:f4:3f:b6:ea:ae:e2:0e:99:1b:a2:cc:f7:16:7c:
         9c:f5:92:a7:0f:53:d6:49:df:af:e6:b7:f3:58:12:f2:2d:2a:
         aa:02:0e:c1:b2:35:32:36:4d:83:92:31:db:0f:ac:1d:a9:af:
         b1:12:e1:09:69:fa:57:c6:cc:80:c8:b0:28:ee:84:8f:e7:a1:
         e4:fe:f1:48:a6:f3:a4:ed:53:ed:8f:64:9b:25:cf:54:cf:cd:
         5d:3e:4f:ed:f8:24:98:75:c1:59:d4:69:d1:7d:50:bf:02:5f:
         c4:a5:2e:73:54:30:b2:c4:8b:c9:3d:90:e6:7c:0b:2b:64:80:
         6f:1e:b8:99:5e:ae:28:ef:9d:07:cb:48:c2:3a:93:2a:a1:13:
         04:5b:ba:83:03:69:12:53:a4:d1:70:4a:a5:d7:6e:1a:ea:ff:
         37:29:c0:69:21:62:a1:3a:cf:8a:db:b8:b9:be:ef:59:1d:83:
         27:2b:78:fa:a7:a4:1e:2d:12:f4:21:be:08:75:eb:37:72:93:
         da:71:27:b1:42:56:bc:e8:74:3d:1a:98:03:df:02:5c:09:f9:
         a9:ef:7d:a5:4f:fa:f5:cd:df:7f:f9:9b:4b:46:63:1a:fe:02:
         cf:b9:d5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:59:33 2024 by rpki-client on console-ams.rpki-client.org