Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa
File:                     3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (raw, json)
Hash identifier:          xi5bT/kTvoXhJFjxH7GKDeCGyVsU7p7ps+PKoyMnUhA=
Subject key identifier:   2F:C1:EC:1B:46:2B:4F:E6:A0:BB:8A:61:F5:41:1B:7B:20:80:4E:57
Certificate issuer:       /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171
Certificate serial:       3A0EB396C26E3BDFAC8F0F57DE45ADEDBF5EC69A
Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa
Signing time:             Thu 16 May 2024 02:25:28 +0000
ROA not before:           Thu 16 May 2024 02:20:28 +0000
ROA not after:            Thu 15 May 2025 02:25:28 +0000
asID:                     136101
IP address blocks:        103.108.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl
                          rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Oct 2024 06:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0e:b3:96:c2:6e:3b:df:ac:8f:0f:57:de:45:ad:ed:bf:5e:c6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171
        Validity
            Not Before: May 16 02:20:28 2024 GMT
            Not After : May 15 02:25:28 2025 GMT
        Subject: CN=2FC1EC1B462B4FE6A0BB8A61F5411B7B20804E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1a:b7:b8:bd:c7:44:3d:9a:da:26:56:75:33:
                    a4:c6:d6:be:8a:b9:04:5f:d2:4a:46:83:1a:18:81:
                    e4:fc:87:19:c4:87:02:8c:4e:e7:f6:e9:3b:99:80:
                    8f:85:80:15:a9:db:e2:7f:09:c4:eb:ab:db:ef:52:
                    18:08:7d:68:14:12:b3:ef:f7:e7:a5:65:2c:36:a4:
                    3e:20:6d:83:b0:ae:40:6a:ec:9d:25:3e:1b:20:6c:
                    28:fc:15:34:5e:38:6e:b9:2e:89:c5:22:a5:bd:95:
                    c8:dd:00:30:cf:37:cf:61:89:8c:b1:1f:d0:bc:bf:
                    c4:ab:8d:b5:03:25:2c:09:b7:55:a0:96:06:cc:78:
                    21:40:ab:3d:55:27:76:bd:92:26:f4:cf:6f:86:7c:
                    6d:c4:4e:70:e1:f3:ba:ad:3d:b5:8f:02:28:23:95:
                    b5:72:c4:3e:63:e6:78:66:cb:ae:a3:38:07:41:6d:
                    05:8a:10:06:f2:19:6e:4d:4b:92:85:dd:e2:ad:9c:
                    c1:8b:15:bd:d7:40:55:4e:21:24:d8:4d:ed:1c:b0:
                    4b:00:4d:81:2d:fd:09:dc:55:a1:05:96:d3:29:f5:
                    e6:d9:d7:39:46:96:69:82:37:fa:bc:94:a5:4e:a7:
                    65:d1:b4:e4:13:34:82:a4:72:61:28:2e:70:96:95:
                    3a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C1:EC:1B:46:2B:4F:E6:A0:BB:8A:61:F5:41:1B:7B:20:80:4E:57
            X509v3 Authority Key Identifier:
                keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:ad:f1:5d:24:e6:a3:51:08:66:07:90:30:31:9b:7c:bd:fd:
         9d:2f:98:81:c9:20:9d:e1:03:ab:51:31:9a:8e:b9:bc:a6:31:
         59:70:5c:f9:3b:63:1d:04:d5:06:77:62:d6:8f:4b:b1:43:a2:
         28:92:7b:ec:9c:7e:a1:ba:a2:87:90:bf:7f:af:60:bc:0e:84:
         1f:bc:51:2d:58:1c:68:17:df:50:89:92:bc:fa:2a:e6:3d:92:
         68:db:d3:ab:10:42:c9:44:46:cc:f4:df:cf:f4:c0:d4:c8:f4:
         54:b1:94:c9:4b:f2:a6:7f:1f:34:9e:f0:42:04:99:53:ef:d6:
         1f:f9:7a:3d:93:94:2f:15:2a:74:ee:fd:b7:22:6b:bc:3b:a5:
         e1:b6:e7:e7:b1:e8:82:0b:54:e3:30:f2:a1:c8:ef:02:3a:b6:
         f4:b8:fa:c0:a4:4f:50:ed:25:42:3f:84:72:f3:ca:67:6b:cb:
         41:2c:ba:f6:c7:dd:1c:ad:45:cd:a3:48:3a:02:86:2a:0b:3d:
         01:7a:7f:dc:f7:86:5a:dd:df:53:1e:99:6c:fd:4a:61:7e:58:
         38:59:a2:e7:ce:8b:28:53:4d:45:e5:22:b2:2d:6b:23:f0:d3:
         e6:f9:e2:5a:8d:34:a8:d8:d9:66:26:31:67:53:cf:ce:6a:c2:
         0b:13:3a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 03:37:39 2024 by rpki-client on console-ams.rpki-client.org