Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa
File:                     3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa (raw, json)
Hash identifier:          0HlHMhrjVn41qkR872sMp+eE9rE7tVU1y7eUi131qDc=
Subject key identifier:   9B:1F:8A:F8:E1:F0:61:AB:D1:9A:B8:86:07:2B:AB:56:28:27:89:33
Certificate issuer:       /CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5
Certificate serial:       7B141D8A987B5845B0A32413669D802583448A20
Authority key identifier: 1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa
Signing time:             Wed 08 May 2024 09:20:45 +0000
ROA not before:           Wed 08 May 2024 09:15:45 +0000
ROA not after:            Wed 07 May 2025 09:20:45 +0000
asID:                     151000
IP address blocks:        103.153.188.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl
                          rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 17:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:14:1d:8a:98:7b:58:45:b0:a3:24:13:66:9d:80:25:83:44:8a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5
        Validity
            Not Before: May  8 09:15:45 2024 GMT
            Not After : May  7 09:20:45 2025 GMT
        Subject: CN=9B1F8AF8E1F061ABD19AB886072BAB5628278933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e7:84:fd:58:e5:e9:6d:1a:9e:a8:5e:35:e3:
                    f6:40:76:52:e7:d9:37:69:ad:db:01:80:53:f5:71:
                    43:52:87:25:d6:93:b8:8a:53:29:05:74:23:c2:f2:
                    6a:cf:b6:31:8d:93:e9:4a:4c:7c:d4:89:e2:91:3b:
                    06:18:0d:2d:fc:43:a6:6b:da:21:08:0b:96:76:cc:
                    6f:a0:56:56:85:b8:6e:b9:c0:65:2e:6f:fb:10:3c:
                    92:f4:b9:89:09:12:14:1e:1c:81:d4:fa:94:3f:33:
                    8b:b0:37:ef:33:21:d7:57:26:d7:b7:26:83:f2:08:
                    e1:b4:2f:33:78:61:5f:8a:af:85:a5:e1:e0:76:45:
                    c4:a4:23:83:a5:91:20:66:ef:ec:76:d5:4a:60:76:
                    2a:86:d1:21:0a:f1:cf:6b:b8:73:ec:d4:a5:e9:03:
                    4e:84:cc:36:eb:8c:fe:4e:86:c9:6f:d8:83:86:74:
                    3d:79:78:d7:1a:ef:b2:b5:2e:d4:17:ab:d3:f7:7b:
                    69:cf:61:04:42:1b:55:56:19:5f:25:a4:24:d3:b5:
                    65:3b:d2:d6:d7:ee:d3:4e:50:ef:4d:6a:28:43:29:
                    66:d7:66:0b:b2:a8:0b:fc:18:38:e4:15:e7:04:8f:
                    94:d0:af:03:67:30:46:c9:e7:97:17:26:37:b0:3c:
                    06:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1F:8A:F8:E1:F0:61:AB:D1:9A:B8:86:07:2B:AB:56:28:27:89:33
            X509v3 Authority Key Identifier:
                keyid:1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:28:c4:b9:a4:38:3b:33:c8:c4:d5:43:34:7a:18:3c:5a:a6:
         2b:33:8d:31:3d:a5:52:80:7a:b4:27:e9:5e:b7:c8:7c:d1:9e:
         46:0b:1d:11:58:f3:2c:f6:ba:2a:c7:2f:cd:fd:ef:c2:01:e0:
         bd:d4:05:7b:82:c9:59:fe:77:5d:45:6c:12:7e:43:ba:5c:53:
         bc:a2:65:4b:f9:9d:08:18:1b:7d:f4:7e:7a:83:b5:f0:c0:3d:
         0b:b4:32:6c:f3:59:cc:df:d0:f1:77:c6:9a:a6:3e:43:62:d1:
         3c:4f:53:3d:51:06:51:db:fb:db:f0:38:e5:e8:ec:11:af:9a:
         b8:58:f1:8b:6b:3a:fb:90:03:4b:8b:59:7c:92:ad:8c:10:4d:
         5b:1f:44:43:e8:44:b6:84:0d:b6:e1:f6:fd:2b:0e:1a:10:c7:
         7f:49:16:e6:95:22:a7:17:43:ab:f4:80:9a:24:2d:52:87:e0:
         5a:cd:56:03:41:ab:02:55:b8:6f:9e:3c:1f:66:77:10:b6:dc:
         25:52:04:87:3f:89:a0:0c:32:dc:c1:23:8b:ae:c0:51:2a:31:
         5b:0b:37:14:a0:ae:24:8d:83:0d:7f:b2:76:e5:32:e4:5d:91:
         30:4f:c1:13:40:11:a0:b0:b2:38:b6:a3:39:32:6a:13:a5:96:
         6d:4d:c3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:08 2024 by rpki-client on console-ams.rpki-client.org