Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa
File:                     3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa (raw, json)
Hash identifier:          WiiIn7zbGf7bkH8XowYJrShhMIc7DkfuG+SPU2Da2x0=
Subject key identifier:   BD:48:95:4D:BC:52:90:61:F5:6C:AB:54:44:A8:88:63:17:28:4D:08
Certificate issuer:       /CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F
Certificate serial:       5EADA6273A0354D483EE3F284B1A5E03410AB96D
Authority key identifier: F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa
Signing time:             Wed 17 Jul 2024 11:00:01 +0000
ROA not before:           Wed 17 Jul 2024 10:55:01 +0000
ROA not after:            Wed 16 Jul 2025 11:00:01 +0000
asID:                     141057
IP address blocks:        103.155.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl
                          rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ad:a6:27:3a:03:54:d4:83:ee:3f:28:4b:1a:5e:03:41:0a:b9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F
        Validity
            Not Before: Jul 17 10:55:01 2024 GMT
            Not After : Jul 16 11:00:01 2025 GMT
        Subject: CN=BD48954DBC529061F56CAB5444A8886317284D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:81:e0:55:c8:4e:7a:8d:5e:ec:fe:83:9b:1c:
                    26:bc:07:5a:88:ee:3e:9a:27:6c:3f:8f:4a:90:b9:
                    2f:5e:2b:55:44:fd:4c:e1:56:9e:69:4e:09:4b:c6:
                    97:d4:c1:f1:f8:ef:95:78:bc:31:64:15:7c:2f:81:
                    e5:79:a4:d0:cb:0b:c2:bd:af:c0:0d:56:24:c5:e6:
                    8b:a1:47:33:d4:97:f4:f0:a3:8b:43:7d:0c:2a:62:
                    b7:04:c7:7f:94:99:07:9d:8a:6c:13:62:e6:5a:09:
                    9e:66:b2:a6:f8:83:3b:d8:f8:55:b9:33:fd:5a:ef:
                    85:b0:57:ce:f0:71:01:46:80:22:1b:c3:94:9c:fe:
                    76:2a:45:56:41:56:38:51:9b:5d:97:b5:5e:28:04:
                    03:14:e1:50:e3:b4:1d:c0:54:dd:23:a6:61:f4:f3:
                    c6:6a:55:4d:e4:c4:85:f9:f9:8d:cc:ca:1f:99:1d:
                    8f:ab:83:38:58:1d:c8:60:90:dd:cc:d0:fe:41:6d:
                    ff:af:c2:13:a1:77:8b:5f:b6:aa:63:be:2d:4e:0b:
                    f7:dc:c7:d1:42:e3:58:97:f0:32:f7:f2:29:51:03:
                    6d:c6:5d:db:6c:98:14:c8:d9:13:3d:ba:ac:f1:8d:
                    0b:a2:ed:bb:19:6d:70:58:57:c2:2d:42:bc:fa:01:
                    b6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:48:95:4D:BC:52:90:61:F5:6C:AB:54:44:A8:88:63:17:28:4D:08
            X509v3 Authority Key Identifier:
                keyid:F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:3b:c2:f7:0e:43:69:15:9e:89:4e:58:a2:f1:35:f0:9a:9f:
         f9:0d:74:2b:32:69:59:21:11:34:cc:79:eb:ac:cd:be:f0:e4:
         a7:ac:1f:52:e8:04:41:9f:db:b2:41:c4:ea:6c:13:4a:0b:83:
         a9:5b:be:63:48:db:f2:ad:c6:fa:d8:95:ee:f4:cd:27:45:a4:
         7a:f1:de:55:06:fb:08:7f:3e:ec:4a:66:33:7b:a9:b0:d2:dc:
         20:8b:20:4d:e9:50:11:04:aa:e1:f9:18:12:b0:cb:1c:52:52:
         ac:85:de:a0:07:83:d0:93:0b:9a:34:e2:89:02:53:90:dd:f9:
         f6:e1:43:e0:c4:f0:61:43:ec:85:13:14:b6:27:44:34:7f:88:
         d0:85:5d:50:33:e3:f1:88:6f:19:7a:1c:ba:29:3a:57:36:c7:
         a8:c2:5a:38:36:5b:ba:6a:35:06:95:45:ad:65:29:32:00:21:
         f2:73:b2:73:09:af:76:83:0c:58:4c:db:1b:c5:88:3e:c0:bc:
         1e:e2:31:ee:22:f0:eb:7c:d7:e9:60:ba:17:16:3f:8c:83:92:
         5e:c8:6f:06:3a:de:12:28:f1:be:8b:6f:c3:39:bd:47:37:27:
         80:5c:72:9b:e0:d9:3e:2e:10:e6:64:16:f7:f5:7a:6f:51:56:
         38:69:ec:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 07:10:00 2024 by rpki-client on console-ams.rpki-client.org