Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130362e302f32342d3234203d3e20313338313030.roa
File:                     3130332e3132352e3130362e302f32342d3234203d3e20313338313030.roa (raw, json)
Hash identifier:          rp3CV9lsvLxSIjvFG0ReszgfRlyTEGk3OCURETBVxNE=
Subject key identifier:   1F:3F:D1:1E:2E:39:00:CF:BD:42:B4:45:E5:3F:CE:BA:D0:6C:E2:89
Certificate issuer:       /CN=06C079105A8A7FB53C97370CDE636B0A22588747
Certificate serial:       38FF67246C0AB3E0CE42906AAD284BC73955F524
Authority key identifier: 06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130362e302f32342d3234203d3e20313338313030.roa
Signing time:             Mon 01 Jul 2024 01:03:55 +0000
ROA not before:           Mon 01 Jul 2024 00:58:55 +0000
ROA not after:            Mon 30 Jun 2025 01:03:55 +0000
asID:                     138100
IP address blocks:        103.125.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.crl
                          rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ff:67:24:6c:0a:b3:e0:ce:42:90:6a:ad:28:4b:c7:39:55:f5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C079105A8A7FB53C97370CDE636B0A22588747
        Validity
            Not Before: Jul  1 00:58:55 2024 GMT
            Not After : Jun 30 01:03:55 2025 GMT
        Subject: CN=1F3FD11E2E3900CFBD42B445E53FCEBAD06CE289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cd:c8:d1:90:b6:7c:f9:7b:d3:8e:f9:11:21:
                    bf:5e:19:f0:de:ee:da:e8:24:e9:79:09:46:e8:46:
                    9b:22:0a:90:28:ac:54:b2:4f:5d:b8:c1:ef:4c:e0:
                    c6:b8:cd:d1:6a:86:51:34:60:40:02:19:b4:10:d3:
                    23:14:3c:31:0b:d4:9b:bd:39:fc:9d:69:93:1b:20:
                    5f:57:82:80:68:aa:25:76:58:39:62:36:c4:bb:a2:
                    9e:91:c9:b1:86:8c:08:c9:f6:d6:4f:29:36:44:b9:
                    90:46:f7:61:b4:dc:c2:a1:9d:99:18:1e:e6:cd:08:
                    97:f0:71:7d:14:f2:4b:0f:73:d8:55:7a:b8:2e:0e:
                    34:65:00:a1:31:1f:d1:e5:0a:a6:a6:3f:33:c0:74:
                    5a:31:c7:8e:33:e9:1e:91:2f:fc:86:f9:08:59:4c:
                    92:4e:c4:5e:2f:13:7d:16:a0:2d:d3:50:c0:62:39:
                    ef:ef:da:05:d5:fd:cc:9d:f6:ad:10:9b:02:ab:b8:
                    ee:8a:3b:5b:96:78:27:78:fb:cd:95:74:5f:df:8c:
                    c8:36:11:96:e6:3c:87:8e:c8:eb:ce:40:89:30:6e:
                    08:f9:05:4e:24:aa:51:05:f9:0f:bc:cd:88:ad:c8:
                    ba:8c:eb:b2:f6:f7:c7:fb:14:9e:0e:92:9c:12:ae:
                    92:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3F:D1:1E:2E:39:00:CF:BD:42:B4:45:E5:3F:CE:BA:D0:6C:E2:89
            X509v3 Authority Key Identifier:
                keyid:06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130362e302f32342d3234203d3e20313338313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:db:aa:5e:92:0e:c3:8a:8a:ff:fe:67:ca:09:dd:e8:86:f6:
         bb:e1:e4:d7:28:44:38:e7:31:b6:2b:30:01:97:b5:48:07:39:
         da:ae:29:92:6b:17:67:05:4e:c0:4d:08:0b:5d:a2:78:71:09:
         c6:91:1f:d1:64:d9:ea:01:d8:1e:af:f8:20:59:2a:fb:c6:9a:
         c4:af:4e:c0:e8:d7:1e:14:4c:e0:4e:68:d4:24:b6:61:30:9f:
         3b:35:95:b8:8c:f8:37:5e:d5:f9:e6:f5:f5:5c:bc:c7:8c:f4:
         c3:8a:6c:21:7c:0c:68:29:16:1d:b1:fb:4b:a9:c4:09:9a:5a:
         5f:28:ef:85:d7:cf:2e:83:46:5e:3d:fe:1d:7a:0b:64:75:a4:
         08:d7:38:07:05:55:39:31:fb:6c:09:f0:36:a0:7a:d9:65:70:
         08:b9:eb:5f:50:5a:f5:3e:30:bf:df:e5:cc:f3:09:bf:0d:74:
         cb:ed:7e:e0:d9:70:22:a9:dc:7a:ef:2b:c8:22:14:54:59:ae:
         08:20:7c:a7:c2:0c:02:9e:17:85:b4:14:12:4d:9d:30:74:07:
         ec:e5:d0:4d:00:ab:2d:1d:20:dc:53:c4:50:50:93:0b:b1:2d:
         18:92:e7:c8:09:09:17:a0:85:ff:86:f6:1a:64:65:29:f9:16:
         5b:7f:11:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 10:18:21 2024 by rpki-client on console-fra.rpki-client.org