Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138392e302f32342d3234203d3e20313338383635.roa
File:                     3130332e3135332e3138392e302f32342d3234203d3e20313338383635.roa (raw, json)
Hash identifier:          UbPSc9ZpzK4hlLZTynXN8U55DkMzyj9uKDBfCBCKZ+Q=
Subject key identifier:   82:6E:BD:9B:E1:BC:67:F6:43:CA:87:86:24:F5:5C:CB:F3:EA:BD:AC
Certificate issuer:       /CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5
Certificate serial:       6A4427F2EF6E976897C117755DAFFDD9A061F5CE
Authority key identifier: 1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138392e302f32342d3234203d3e20313338383635.roa
Signing time:             Wed 26 Jul 2023 22:00:00 +0000
ROA not before:           Wed 26 Jul 2023 21:55:00 +0000
ROA not after:            Wed 24 Jul 2024 22:00:00 +0000
asID:                     138865
IP address blocks:        103.153.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl
                          rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:44:27:f2:ef:6e:97:68:97:c1:17:75:5d:af:fd:d9:a0:61:f5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5
        Validity
            Not Before: Jul 26 21:55:00 2023 GMT
            Not After : Jul 24 22:00:00 2024 GMT
        Subject: CN=826EBD9BE1BC67F643CA878624F55CCBF3EABDAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:ea:14:fd:a1:07:9b:b2:6f:e4:6f:3c:cb:
                    db:7f:85:ca:4f:84:c9:28:a7:d5:38:98:82:d8:6e:
                    52:87:90:26:1d:dc:fa:04:9f:81:5d:25:09:88:cd:
                    61:ec:27:66:6b:65:00:5c:51:5b:1e:23:c4:0a:f2:
                    fe:20:ee:7a:d2:d6:da:c9:98:b1:fe:c0:bd:3e:3d:
                    d9:33:7f:ae:29:bd:e1:44:08:23:99:dd:a7:6e:a0:
                    bc:ce:87:d1:d3:f2:df:49:e5:ce:80:39:bb:48:00:
                    d7:57:1c:29:79:05:a3:a4:2e:7a:e6:97:d0:a0:8d:
                    60:ff:a7:8a:15:79:72:08:c9:a2:5a:88:2f:47:a2:
                    3f:3a:ab:07:7b:49:e8:70:1b:98:b2:fa:15:3e:fb:
                    a5:68:5f:2d:98:1b:cf:c4:04:85:d4:63:d4:de:8b:
                    75:6b:92:16:7d:10:87:0a:f2:7f:d3:79:56:9f:3b:
                    26:1f:46:af:5f:e6:f2:d4:f8:f7:fe:dd:f0:f0:63:
                    a1:32:34:81:c3:56:45:e3:d2:c4:35:66:1b:a1:99:
                    42:8f:b5:bf:9d:81:db:5c:3a:5d:3f:6a:74:a1:d9:
                    d2:39:19:2c:01:33:c4:d6:2b:16:fa:b4:9f:29:88:
                    38:91:0e:3f:f6:8d:10:39:19:c6:bb:95:6e:a4:19:
                    d5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6E:BD:9B:E1:BC:67:F6:43:CA:87:86:24:F5:5C:CB:F3:EA:BD:AC
            X509v3 Authority Key Identifier:
                keyid:1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138392e302f32342d3234203d3e20313338383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:01:3b:07:a0:5d:08:88:e4:05:6c:0b:bb:5b:92:12:75:a2:
         7f:82:c2:26:0b:66:ee:31:27:ae:a2:0a:ed:1e:9e:d9:40:4f:
         f1:12:45:1d:ac:48:a7:4b:fd:aa:05:32:7b:63:61:aa:4b:72:
         c7:f7:dc:2e:fb:2d:4f:02:fb:87:61:22:3a:e4:da:c0:64:25:
         f6:2a:9f:4b:f2:0f:5d:b2:0e:b6:79:e0:23:90:3a:bf:34:9f:
         71:ab:32:ef:38:8b:0f:5e:a3:58:6e:94:31:03:74:3b:f8:ef:
         17:10:87:06:ce:c3:a0:4d:6e:13:18:ef:a8:33:9b:8a:3a:01:
         d1:d2:ee:91:ae:80:70:8a:f1:39:1f:3f:8c:fb:d8:df:7b:ba:
         d6:a7:48:7e:96:65:08:ea:c4:dc:1b:b0:2b:5f:52:57:88:7e:
         67:2f:6b:ae:7b:01:d6:a0:b1:f9:93:73:c4:0f:97:23:4c:8a:
         b5:e1:e6:bc:86:e3:a0:17:05:39:ad:a3:b5:44:64:46:47:4b:
         ba:8d:67:c4:c5:ff:58:9f:4b:c0:2d:51:71:58:72:e5:e1:5f:
         c7:da:3e:3a:76:da:c7:ed:13:45:6d:73:c4:30:98:69:c7:df:
         68:b7:a4:28:f8:f3:9d:3c:2b:f1:4b:da:0b:b3:11:68:e6:4d:
         fa:cf:dd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:44:53 2024 by rpki-client on console-fra.rpki-client.org