Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/3130332e3134362e32362e302f32332d3234203d3e20313339393834.roa
File:                     3130332e3134362e32362e302f32332d3234203d3e20313339393834.roa (raw, json)
Hash identifier:          Ei5KyvCkzeyC5MjnJqmIegVmAJJrdxdurGyioRRXfP4=
Subject key identifier:   73:3E:FB:C9:94:C0:9E:F6:A0:DE:6D:43:65:F0:9F:D1:C2:24:FE:F6
Certificate issuer:       /CN=EBBE263817C941A8999ED0A874948E0C42CC0DB6
Certificate serial:       0A38D960E07A2DC95124B17819B69906888D64C9
Authority key identifier: EB:BE:26:38:17:C9:41:A8:99:9E:D0:A8:74:94:8E:0C:42:CC:0D:B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/3130332e3134362e32362e302f32332d3234203d3e20313339393834.roa
Signing time:             Wed 17 Jan 2024 13:00:01 +0000
ROA not before:           Wed 17 Jan 2024 12:55:01 +0000
ROA not after:            Wed 15 Jan 2025 13:00:01 +0000
asID:                     139984
IP address blocks:        103.146.26.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl
                          rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:38:d9:60:e0:7a:2d:c9:51:24:b1:78:19:b6:99:06:88:8d:64:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBBE263817C941A8999ED0A874948E0C42CC0DB6
        Validity
            Not Before: Jan 17 12:55:01 2024 GMT
            Not After : Jan 15 13:00:01 2025 GMT
        Subject: CN=733EFBC994C09EF6A0DE6D4365F09FD1C224FEF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3f:b6:7a:f3:06:bf:ee:6c:05:e7:92:ad:ec:
                    45:e2:c3:4a:53:fe:9d:a1:e5:22:e4:da:23:c4:af:
                    fe:1d:01:27:18:67:19:7f:4c:ec:d9:74:65:ff:7c:
                    21:09:44:52:37:f4:c9:0e:39:45:7a:b3:82:20:a8:
                    03:1e:95:85:7a:57:c7:01:cc:70:ac:fd:4e:8f:6f:
                    df:6a:55:2e:cc:ee:16:4c:fb:7f:3e:f8:af:36:6f:
                    8b:b4:f6:57:1b:19:9a:70:a3:31:cc:42:56:61:10:
                    48:7a:e4:85:84:a4:02:50:59:a0:6a:4c:22:ed:83:
                    20:7f:3d:9c:4d:9f:bc:ff:01:d9:e9:59:40:05:c7:
                    15:ae:89:f4:26:ea:d4:f8:21:40:f9:a2:46:70:3e:
                    7a:db:cd:73:cc:2a:3f:88:92:0a:ed:ee:68:ba:b3:
                    ce:8e:e1:f4:79:2f:4b:d6:3c:7f:d1:ff:26:7c:55:
                    4c:98:ac:ef:9e:44:97:53:71:7d:6b:8d:33:ad:76:
                    15:19:46:a4:d2:0b:46:4f:d9:fe:8d:6e:71:e3:9d:
                    5a:20:f3:dd:83:fb:fb:ef:0e:b3:df:93:f2:c0:0f:
                    b2:bf:28:38:ac:f7:2a:fb:29:ed:ab:28:46:3f:0b:
                    72:b1:84:e5:dc:03:78:22:e4:cd:75:cc:65:1a:95:
                    bd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3E:FB:C9:94:C0:9E:F6:A0:DE:6D:43:65:F0:9F:D1:C2:24:FE:F6
            X509v3 Authority Key Identifier:
                keyid:EB:BE:26:38:17:C9:41:A8:99:9E:D0:A8:74:94:8E:0C:42:CC:0D:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/3130332e3134362e32362e302f32332d3234203d3e20313339393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:69:f8:b0:e9:14:93:db:6a:f6:cd:93:0f:ab:4d:bb:ee:dd:
         0e:bd:f4:14:13:91:3e:38:bc:d3:ca:d0:cc:3f:33:91:27:49:
         3d:e6:ae:13:da:46:25:48:b9:ad:39:30:eb:67:87:21:fa:59:
         56:95:32:07:1e:b8:8c:91:cc:bf:a7:b6:49:95:9c:13:ae:47:
         82:0e:05:94:b5:f6:2f:ba:76:ab:cf:6e:00:69:20:63:4c:4c:
         32:fd:5d:92:e5:23:9d:37:49:8b:12:fe:26:5e:1c:f9:18:e9:
         62:b9:28:ff:ef:bf:88:40:84:27:85:b4:11:ee:29:d7:4d:05:
         8d:19:4a:84:33:3c:7a:e9:22:92:91:83:6b:b2:ea:34:46:86:
         5e:7a:47:a7:1e:32:be:31:4f:0e:67:ed:fe:ea:11:4e:17:c6:
         15:b9:fc:34:a2:8f:36:dd:e8:8b:c4:74:98:89:c8:5f:52:ae:
         88:7b:71:b2:c6:bf:f6:fa:4e:e9:2f:60:73:4c:4a:56:22:94:
         ab:3b:2d:0c:b7:a9:9a:4c:1b:be:0a:24:3e:ec:34:28:74:c7:
         03:29:b2:97:fe:f1:d7:ed:8e:18:4a:3c:dc:1f:13:9f:42:b3:
         bb:4b:9d:5b:4c:a8:4d:1c:a0:67:4a:5a:68:d5:58:22:50:7a:
         39:af:18:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:45 2024 by rpki-client on console-fra.rpki-client.org