Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa
File:                     3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (raw, json)
Hash identifier:          PK+0br4XKkmh7I/czDqP0zyJbmUl1cn8Qe030BG2R8s=
Subject key identifier:   B1:46:07:25:F2:E3:BF:1B:5B:3F:F9:9E:D2:12:CE:B4:CB:B0:5D:A3
Certificate issuer:       /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
Certificate serial:       3F19E2F6FD57C14658AC8E53E3910CD3B7882EBF
Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa
Signing time:             Fri 08 Mar 2024 17:39:33 +0000
ROA not before:           Fri 08 Mar 2024 17:34:33 +0000
ROA not after:            Fri 07 Mar 2025 17:39:33 +0000
asID:                     139365
IP address blocks:        103.141.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl
                          rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:19:e2:f6:fd:57:c1:46:58:ac:8e:53:e3:91:0c:d3:b7:88:2e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
        Validity
            Not Before: Mar  8 17:34:33 2024 GMT
            Not After : Mar  7 17:39:33 2025 GMT
        Subject: CN=B1460725F2E3BF1B5B3FF99ED212CEB4CBB05DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9b:cd:86:b1:c3:b9:23:b0:bb:48:57:25:bc:
                    8d:d3:ef:71:29:4e:24:b2:db:6c:ee:50:7e:c1:a6:
                    a3:50:d1:3d:86:a0:7b:91:fc:dc:78:46:3c:c7:cf:
                    69:9d:33:31:de:81:c2:4e:26:18:e5:53:86:8c:5f:
                    84:94:ae:d5:a2:97:e3:a2:d4:e4:35:a1:71:c3:e8:
                    3a:d4:89:11:95:3a:94:9f:a8:63:3a:17:ff:77:fc:
                    76:d1:65:ae:b0:65:26:3e:4a:99:f8:bd:94:49:0a:
                    1c:54:56:9c:51:79:31:8d:c0:e1:96:78:24:c9:3a:
                    cb:e7:82:83:7b:c8:93:b6:3f:0d:bf:1f:fe:75:79:
                    0c:11:1c:a5:9b:b5:2c:3d:cb:31:8b:cf:78:89:3b:
                    2a:a9:c5:b1:97:13:41:cd:71:f5:ac:64:f7:8f:37:
                    d6:75:44:57:1e:c1:fc:3a:98:8b:51:3c:c8:68:cb:
                    59:77:f3:b4:d4:12:90:a4:10:c7:a6:8a:a3:86:68:
                    68:4d:e2:a8:f7:b8:67:00:51:87:d5:fe:06:84:7e:
                    57:1c:e2:69:00:07:b6:47:18:70:74:83:d2:bc:71:
                    d6:a5:a4:89:c8:96:52:d5:4a:45:0c:3d:f4:12:65:
                    80:6f:9d:15:35:5b:86:ee:61:87:c1:79:cb:48:78:
                    94:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:46:07:25:F2:E3:BF:1B:5B:3F:F9:9E:D2:12:CE:B4:CB:B0:5D:A3
            X509v3 Authority Key Identifier:
                keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:08:5a:33:69:ae:1e:dc:84:96:d3:c4:1d:ac:2f:6d:32:e8:
         8d:27:79:10:70:3d:b2:e7:09:57:fd:d0:8a:46:aa:fb:02:9b:
         f0:ba:63:f6:bf:65:43:3e:4a:9e:9f:ae:f9:6f:2b:02:60:b4:
         2a:32:24:89:7b:be:b7:bc:f0:a5:1b:90:ec:67:0f:be:1f:63:
         14:b4:3c:65:65:6e:1a:fc:03:86:e6:bb:eb:90:b8:2e:9e:bc:
         01:19:5e:25:bf:65:3a:84:8d:d4:24:8f:df:c4:d7:82:90:1d:
         70:7b:7c:84:80:cc:b8:e9:0f:6d:11:aa:ea:78:e2:98:b8:c0:
         a3:5b:9f:61:d2:8e:ba:82:74:bc:44:db:48:91:b5:25:1b:a2:
         32:d1:9f:c5:37:b9:10:e7:ac:e2:c1:0d:ef:9d:c4:df:3a:c8:
         6b:71:82:2c:29:5a:59:0e:64:4d:ce:5e:ad:3e:55:4d:5a:ee:
         96:5d:83:56:4c:bc:dd:7c:d8:24:b9:76:53:5e:02:5d:2f:ba:
         e9:36:aa:83:bd:0a:c9:1d:ce:1a:ed:d4:ee:f0:de:73:ee:fe:
         f7:63:33:e6:d9:ec:04:ef:ea:74:c1:e2:dd:47:be:f7:b7:cb:
         19:52:f8:96:cf:e3:3f:92:22:c1:b3:18:5c:77:80:8e:c4:03:
         a3:c1:5b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org