Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa
File:                     3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (raw, json)
Hash identifier:          uBEB5JyJqc7wIoIbZD9oT/UoXfHoMPGaRE24Wrg8/og=
Subject key identifier:   BC:91:34:DE:DD:D6:CF:E7:4D:2F:F9:87:58:D8:5B:D5:9D:93:B7:55
Certificate issuer:       /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
Certificate serial:       54A6E1D5679B8C1E6AACB722AC1351F68A467118
Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa
Signing time:             Tue 26 Dec 2023 12:01:13 +0000
ROA not before:           Tue 26 Dec 2023 11:56:13 +0000
ROA not after:            Tue 24 Dec 2024 12:01:13 +0000
asID:                     137334
IP address blocks:        103.112.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl
                          rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a6:e1:d5:67:9b:8c:1e:6a:ac:b7:22:ac:13:51:f6:8a:46:71:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
        Validity
            Not Before: Dec 26 11:56:13 2023 GMT
            Not After : Dec 24 12:01:13 2024 GMT
        Subject: CN=BC9134DEDDD6CFE74D2FF98758D85BD59D93B755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:f3:6a:08:4c:1b:df:e6:b3:56:4d:5a:6a:
                    1e:2f:27:ff:eb:da:9f:a4:b8:aa:e2:bc:d5:a0:1b:
                    e8:29:30:c7:6d:89:06:14:b1:c3:8d:67:e2:9c:b1:
                    7c:aa:91:91:d8:41:e8:75:cf:09:8e:72:c0:52:03:
                    26:14:81:e5:9f:e2:df:3b:d0:db:48:56:58:53:af:
                    b0:61:3c:1c:e0:39:58:07:48:ce:20:44:db:23:19:
                    cc:51:ad:53:1f:6c:7d:a8:8a:60:99:6d:7c:07:d7:
                    73:76:35:1d:5f:be:a4:0f:6d:50:a0:49:cd:bf:80:
                    c4:43:a6:40:6b:5d:35:e2:b2:4f:0e:9b:54:2a:e3:
                    09:82:5f:d5:67:66:01:62:d7:27:6d:3c:95:da:32:
                    f4:46:8d:97:9a:4a:05:08:1a:ff:41:d5:02:d2:55:
                    1a:83:20:17:62:db:5f:56:ce:28:e2:93:af:0b:67:
                    e9:44:6f:09:54:26:2a:e5:f0:2b:b4:f6:f3:b0:75:
                    2d:9e:79:e4:f7:c7:9a:9b:70:02:07:0d:23:ec:f9:
                    99:14:df:e8:77:5c:11:df:3a:77:92:f1:37:24:ec:
                    fc:60:22:91:30:1f:db:05:96:6b:ec:4d:4f:69:23:
                    cf:9e:80:9d:c8:7c:94:e6:a7:69:68:8f:a2:bc:7f:
                    0c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:91:34:DE:DD:D6:CF:E7:4D:2F:F9:87:58:D8:5B:D5:9D:93:B7:55
            X509v3 Authority Key Identifier:
                keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:5f:64:20:2e:68:7f:0a:fd:12:4d:71:03:83:8a:40:d3:6a:
         2d:d7:a5:ec:82:72:86:8f:23:2a:d2:60:dc:55:42:c0:a9:e2:
         90:98:72:a5:a7:4c:b2:ab:43:16:00:92:59:00:92:c5:8f:27:
         ef:e4:bb:f7:48:cf:73:3d:5c:92:d4:f4:22:4a:b6:e0:57:c6:
         71:75:e4:b8:47:a8:73:cb:ff:a2:26:02:cc:b9:63:9b:1b:05:
         c7:bf:4b:bb:c5:c3:1c:60:04:04:e4:6d:bb:18:e6:60:61:46:
         3a:7c:ce:43:99:fe:d0:a7:70:8d:40:5e:a2:a9:6d:ff:0c:b3:
         18:d9:24:cf:05:0c:8f:a2:45:8b:e4:26:ab:4d:59:63:9b:1b:
         53:31:bb:da:61:b6:fc:be:8a:42:d5:21:ef:9e:b0:ca:17:cd:
         f9:1e:4c:34:43:42:7a:c4:1b:3b:54:21:5c:c7:14:d8:d5:41:
         67:be:c8:91:07:50:db:d0:c9:e0:2b:6b:2d:62:65:c2:e9:dc:
         a5:68:8f:52:3a:f1:41:d3:a8:77:2b:dc:e5:2b:31:29:c7:8e:
         80:53:d5:bb:59:4c:06:0e:89:80:93:1f:f2:30:c4:9c:c6:06:
         10:bc:5d:cf:68:a6:70:32:d2:6e:15:d4:7d:c6:60:83:a0:8e:
         6a:f9:1c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org