Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa
File:                     3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier:          c3RjMW+CIXpYsyzS75W7NviafJ4jFuqxYaUgJgR1RjY=
Subject key identifier:   89:EB:DB:08:26:11:77:91:31:61:D5:4A:C0:2B:97:FB:95:18:CF:D1
Certificate issuer:       /CN=28612772543E43335B080C32808B7FDC277E71E4
Certificate serial:       3380B7FDA3472FFE4172AE22D820985D19FEE639
Authority key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa
Signing time:             Thu 12 Sep 2024 07:02:56 +0000
ROA not before:           Thu 12 Sep 2024 06:57:56 +0000
ROA not after:            Thu 11 Sep 2025 07:02:56 +0000
asID:                     138131
IP address blocks:        103.115.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl
                          rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:80:b7:fd:a3:47:2f:fe:41:72:ae:22:d8:20:98:5d:19:fe:e6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28612772543E43335B080C32808B7FDC277E71E4
        Validity
            Not Before: Sep 12 06:57:56 2024 GMT
            Not After : Sep 11 07:02:56 2025 GMT
        Subject: CN=89EBDB08261177913161D54AC02B97FB9518CFD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:cf:d4:d8:84:5b:c3:f7:54:d2:25:d8:f0:
                    d7:5f:4d:e9:b4:78:6a:05:02:25:54:f5:6e:fe:d6:
                    59:34:57:c8:07:50:7a:71:05:a9:64:af:bb:51:81:
                    71:1b:ec:d5:4d:df:f7:5b:5c:d5:28:96:38:fa:27:
                    d5:bf:23:75:d9:86:4e:3e:68:6e:d8:a8:44:a3:fa:
                    2a:8f:69:78:b6:25:30:5d:c2:ce:3d:0c:c6:91:82:
                    ad:ec:1c:82:31:74:86:ae:b2:5a:0f:37:44:97:b4:
                    f3:ff:11:7b:8d:91:2b:d3:c2:7f:51:c1:80:6c:38:
                    8a:42:08:ef:ae:ca:a5:6d:c9:62:41:ea:ce:ad:3e:
                    e2:5f:77:d3:4d:ee:0b:9f:60:a3:b0:09:34:66:2f:
                    43:40:b0:6b:53:2b:d4:6f:50:15:a2:da:8b:3e:d0:
                    88:ee:23:68:02:09:20:f2:82:e6:5b:77:96:c4:f0:
                    b7:22:55:c9:9c:23:d2:cb:a0:f5:d7:f1:62:48:7f:
                    e1:62:b5:f2:0e:05:14:fe:69:13:bb:e0:87:4f:ff:
                    be:a3:e2:58:cc:93:23:1a:35:10:0c:a5:86:c7:6a:
                    41:ab:5b:0f:ca:1c:1e:bb:8a:61:af:f9:ad:8a:ef:
                    7d:19:d3:e7:3e:ab:a9:7e:6d:9d:69:79:fd:c0:55:
                    df:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EB:DB:08:26:11:77:91:31:61:D5:4A:C0:2B:97:FB:95:18:CF:D1
            X509v3 Authority Key Identifier:
                keyid:28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:db:38:5c:38:26:07:ba:54:05:1d:72:6f:f4:a4:93:a6:db:
         6d:27:9a:d5:f2:d2:6e:2a:5f:68:07:81:05:06:79:70:44:d8:
         68:9c:c1:7e:93:7e:32:f9:e3:83:c6:5a:52:b8:7d:ec:df:22:
         f7:d6:55:fc:f2:76:cd:be:8e:3d:fa:43:c1:44:d5:5c:6d:cd:
         5b:ae:96:05:ad:e3:94:08:41:1d:51:4d:43:32:5e:56:09:43:
         be:8c:36:2e:f4:dc:3c:d6:48:00:c7:12:f1:1a:90:95:87:b9:
         12:12:d6:16:aa:56:c1:d1:f7:73:87:31:96:a7:0e:ac:a8:cc:
         a6:42:e6:8e:b6:a8:83:78:6e:16:07:65:80:e5:f0:ec:7f:d0:
         51:34:2a:7d:f1:62:c3:86:65:d3:68:0d:4d:1b:b8:eb:74:b4:
         5a:54:74:25:89:b5:f9:a4:a1:1e:d0:ed:43:16:c4:fa:9f:5a:
         6f:d3:2d:0c:43:1d:6e:40:6d:bd:91:a0:fb:9b:2f:d1:1f:61:
         26:f4:73:2f:57:64:3e:08:30:a0:63:63:c1:f8:2b:9f:6d:5c:
         a7:c8:48:f8:f7:4a:2d:d3:2a:83:29:f6:61:8d:ee:19:e4:ef:
         e0:65:31:0a:8d:80:ed:7d:57:f4:b3:d2:18:2f:25:fa:c7:9d:
         05:57:60:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:10 2024 by rpki-client on console-ams.rpki-client.org