Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa
File:                     3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa (raw, json)
Hash identifier:          1JCXLKTK92BvJjinRKWZlmXWDETB6A2NTyYpRJa0Pis=
Subject key identifier:   84:67:B1:11:29:86:4A:2C:D0:16:AA:4B:41:37:B3:6F:06:AC:14:EB
Certificate issuer:       /CN=ED4F41D4EBE684D523406475FAB471CE1B24E360
Certificate serial:       5EA226E73CCCA558CAE21B9661B1183821043E46
Authority key identifier: ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa
Signing time:             Mon 01 Jan 2024 09:00:00 +0000
ROA not before:           Mon 01 Jan 2024 08:55:00 +0000
ROA not after:            Mon 30 Dec 2024 09:00:00 +0000
asID:                     147120
IP address blocks:        103.175.156.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.crl
                          rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a2:26:e7:3c:cc:a5:58:ca:e2:1b:96:61:b1:18:38:21:04:3e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED4F41D4EBE684D523406475FAB471CE1B24E360
        Validity
            Not Before: Jan  1 08:55:00 2024 GMT
            Not After : Dec 30 09:00:00 2024 GMT
        Subject: CN=8467B11129864A2CD016AA4B4137B36F06AC14EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b6:0f:68:80:53:6e:b5:6d:56:d5:d3:71:c3:
                    1b:82:d6:21:c3:6d:8a:8b:f2:18:9e:d7:2a:83:3d:
                    50:2f:2c:26:24:e3:a1:98:5a:17:4f:e7:0b:46:f5:
                    c0:b7:98:4f:5f:bb:02:10:a5:a4:f4:93:fe:ef:79:
                    11:86:8a:ca:c8:35:29:63:f1:74:cd:89:f1:b8:91:
                    6d:01:48:54:20:d2:a1:ec:54:e2:a9:65:31:fc:e1:
                    6c:4a:d1:91:ad:48:ff:ca:95:e6:a9:07:1a:d1:c0:
                    b0:a1:6c:e2:15:cc:b1:33:7e:14:05:1b:4d:7e:7e:
                    08:47:0e:ed:25:27:88:aa:7f:8b:f7:92:da:33:32:
                    b5:e6:f6:0e:37:41:47:a7:85:c1:5d:90:37:01:69:
                    bd:f9:97:95:37:cf:af:31:8c:5d:a8:9b:cf:2b:44:
                    77:c7:62:a1:10:5c:d5:a4:20:63:2d:27:fa:61:f4:
                    67:2c:66:9c:34:a6:c8:76:a2:51:9a:52:0a:ec:35:
                    36:e2:e6:c2:80:fc:d6:3a:a2:d5:6a:36:2c:06:70:
                    fc:13:3c:79:1f:fa:1a:07:7b:57:76:a5:f9:2e:72:
                    6a:1e:14:c2:42:0f:f0:82:dd:6c:af:f1:84:13:b5:
                    03:9e:56:ef:27:ef:96:98:54:d9:ee:32:00:f0:3c:
                    01:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:67:B1:11:29:86:4A:2C:D0:16:AA:4B:41:37:B3:6F:06:AC:14:EB
            X509v3 Authority Key Identifier:
                keyid:ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:cd:be:8f:fa:83:97:8f:72:f3:22:bf:53:09:3c:9f:45:d7:
         3c:36:60:ba:25:f2:fc:f0:cc:3c:01:23:e0:b9:16:4b:28:bc:
         f2:08:49:1c:c6:d9:68:d5:a6:1e:21:a6:d0:ff:f3:9d:84:82:
         b0:11:d3:34:8a:f9:f3:f5:e0:a5:4d:c5:a4:06:c0:7b:40:63:
         f3:7b:2e:02:f5:bc:f3:d8:18:75:e5:f8:e9:16:5d:1d:38:43:
         e6:43:6d:ac:a8:ed:ee:dc:32:33:22:49:42:ef:04:93:7e:15:
         9b:3b:45:e7:ec:5e:df:d5:ef:c1:1a:6f:d8:29:ac:f9:fa:a2:
         6b:04:9f:70:e4:55:35:bd:50:5e:47:0c:ef:f5:c4:7b:cd:d8:
         7f:79:2e:c6:5d:34:61:7a:b6:68:f5:cc:a7:75:9c:6a:e7:95:
         e7:30:54:bf:b1:4d:65:7c:c9:7d:90:a4:15:ea:5b:18:b3:db:
         8d:f8:5f:7b:3d:86:ca:d8:50:55:d4:2a:b0:f3:74:78:e2:f3:
         bd:64:ee:ca:21:04:6e:f0:1c:04:8f:25:b5:3c:bb:be:b6:f5:
         a3:39:14:40:da:e6:92:79:d3:a8:b3:3c:78:96:87:22:72:73:
         f2:c4:be:23:ec:82:e3:cb:81:2c:35:d6:e4:25:0e:b1:9b:21:
         41:e9:e6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:17 2024 by rpki-client on console-ams.rpki-client.org