Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS137342.roa
File:                     AS137342.roa (raw, json)
Hash identifier:          Cn0+d7SlJE+Eqac99WwtfTIDDoNuKt/LX5KuAeR6Pmk=
Subject key identifier:   D6:D6:B4:FE:53:AB:B0:B5:1D:54:DE:BF:BB:8F:CB:9C:AC:83:C6:EF
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       335AB8B9FEA449714513F785B4E4F201578C392C
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS137342.roa
Signing time:             Tue 20 Feb 2024 15:03:36 +0000
ROA not before:           Tue 20 Feb 2024 14:58:36 +0000
ROA not after:            Tue 18 Feb 2025 15:03:36 +0000
asID:                     137342
IP address blocks:        101.255.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl
                          rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5a:b8:b9:fe:a4:49:71:45:13:f7:85:b4:e4:f2:01:57:8c:39:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Feb 20 14:58:36 2024 GMT
            Not After : Feb 18 15:03:36 2025 GMT
        Subject: CN=D6D6B4FE53ABB0B51D54DEBFBB8FCB9CAC83C6EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:53:92:de:0c:d1:dd:3c:09:1f:11:61:1f:94:
                    6b:11:64:77:85:a9:91:97:50:96:82:f6:f0:36:e5:
                    c7:b4:ab:4a:e1:c6:af:04:a3:5d:29:fa:d3:02:f3:
                    a1:bc:dd:da:09:1d:60:9f:c7:38:76:97:ea:12:95:
                    11:18:d3:1f:8f:31:41:56:d5:a0:14:a3:34:46:fc:
                    ff:fd:09:15:58:b3:2e:56:4a:77:9d:f3:a8:11:71:
                    ba:7b:f0:2a:0c:d0:55:36:2b:f8:af:54:02:49:cd:
                    c5:a5:a3:65:c0:7f:b5:e0:99:38:17:aa:52:97:d9:
                    bd:54:ae:08:8c:22:28:4b:90:68:c8:d9:d6:01:28:
                    77:91:43:e8:26:b6:98:4a:fc:08:e6:90:65:b2:39:
                    4f:4d:9a:77:9d:79:23:c1:fe:d2:03:98:1d:b4:82:
                    3f:3b:76:8b:a4:e7:1f:9f:fc:7f:76:f6:9e:6b:ff:
                    d8:47:cf:6a:6b:39:97:56:ce:0e:b2:0e:a6:43:13:
                    25:9f:16:30:c6:1c:f5:ac:38:35:6a:04:07:c8:c9:
                    ef:df:c4:4c:ed:aa:de:84:76:18:71:49:2b:b6:e6:
                    6b:d3:40:f7:df:4e:b3:86:aa:23:27:df:ed:fa:f7:
                    c8:7f:97:4e:41:fb:6b:cb:3a:0a:c0:24:88:07:bc:
                    69:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D6:B4:FE:53:AB:B0:B5:1D:54:DE:BF:BB:8F:CB:9C:AC:83:C6:EF
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS137342.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.255.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:67:25:43:b7:b2:84:87:0e:b5:03:78:03:0f:c6:16:dd:a2:
         60:cf:10:21:e4:30:af:55:e5:5f:31:16:76:40:a6:d7:71:81:
         e8:61:86:4d:7e:e5:57:59:84:4c:8c:44:08:74:31:6b:c4:3d:
         ec:25:ec:b9:54:d8:b8:fa:d6:67:43:a7:a0:18:16:fd:5a:49:
         e6:a9:f1:d0:55:91:74:af:23:e7:63:17:bb:8c:08:90:a6:38:
         84:c2:52:3c:84:42:1c:34:46:2a:31:1f:60:00:54:96:05:5d:
         1a:22:5e:53:12:f5:f2:3d:06:77:fe:6c:63:13:e3:de:ab:9e:
         01:a4:2d:ae:65:a6:ec:73:ea:75:a4:10:c6:f8:ee:b4:fa:f3:
         4c:00:8a:72:c9:a1:7e:88:dc:d2:54:4b:a0:f0:5b:ef:e1:28:
         5f:d5:23:98:f4:66:9a:b0:de:17:bb:af:a1:e9:62:7c:3d:94:
         b3:a9:a1:36:dc:c0:aa:da:a4:10:d2:f2:48:9e:91:c1:b3:52:
         eb:66:56:73:83:9b:99:37:dd:9c:72:7b:ad:8f:ff:ff:75:08:
         14:f2:be:1b:4a:03:f6:b3:bd:94:93:77:8a:c0:d2:b8:fc:86:
         b2:c2:11:02:94:a3:9c:56:9c:3c:50:c5:7d:86:82:ac:6c:7d:
         16:69:3b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org