Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa
File:                     3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (raw, json)
Hash identifier:          yGkgdJJprFnc+eWaD08/CTNuDdZRjJgtECClXGJdkfo=
Subject key identifier:   C6:6D:49:61:5F:74:EC:59:BD:54:55:F7:55:A5:A4:BC:D6:90:5D:99
Certificate issuer:       /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
Certificate serial:       1C0408480D88C2A0B4B5313005A0BCAD6F1CFF59
Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa
Signing time:             Sun 24 Dec 2023 12:00:02 +0000
ROA not before:           Sun 24 Dec 2023 11:55:02 +0000
ROA not after:            Sun 22 Dec 2024 12:00:02 +0000
asID:                     137334
IP address blocks:        103.112.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl
                          rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:04:08:48:0d:88:c2:a0:b4:b5:31:30:05:a0:bc:ad:6f:1c:ff:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
        Validity
            Not Before: Dec 24 11:55:02 2023 GMT
            Not After : Dec 22 12:00:02 2024 GMT
        Subject: CN=C66D49615F74EC59BD5455F755A5A4BCD6905D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:e8:62:f7:14:02:8e:cc:ee:ad:3a:25:a1:
                    f2:43:02:bc:8f:49:0f:32:a0:86:fd:92:e1:d0:bb:
                    0a:d7:14:03:22:4d:ee:38:9e:01:02:3f:ae:bc:20:
                    1f:1c:fa:6d:b3:1f:63:2b:49:79:5a:1e:91:4a:9b:
                    60:2e:25:53:44:c3:99:26:96:d0:96:27:2f:ce:f8:
                    fd:1e:97:e9:ba:d1:95:72:8c:2d:24:53:2d:99:48:
                    c2:dd:c2:de:49:d8:40:ec:96:41:45:6e:11:68:f5:
                    7e:bc:08:ec:a3:03:98:ce:eb:2b:79:e6:0d:39:a5:
                    83:95:76:06:2f:b0:a3:cc:93:cc:6a:2a:18:4f:ea:
                    f0:3b:15:b5:d9:60:0d:70:90:88:60:69:f0:ac:74:
                    1d:2d:85:75:56:15:0b:2f:02:43:79:8a:08:4c:aa:
                    b9:0d:91:c8:29:9e:56:91:4a:7c:87:21:55:29:f0:
                    4c:0a:c5:94:3b:b6:63:1a:1f:68:3c:96:6c:5c:01:
                    81:12:20:4c:87:4f:52:78:4e:e7:9f:bd:a8:6f:9e:
                    db:53:47:02:58:f0:c2:d6:b1:6a:94:50:69:fd:e9:
                    57:65:ea:8d:bd:5b:8e:52:0b:69:08:5d:d3:3b:b5:
                    fa:96:42:b6:e3:5b:b1:11:cb:32:01:32:ca:59:38:
                    9f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6D:49:61:5F:74:EC:59:BD:54:55:F7:55:A5:A4:BC:D6:90:5D:99
            X509v3 Authority Key Identifier:
                keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:cf:fe:28:de:62:33:17:96:e6:58:47:8c:cc:79:aa:17:4a:
         5d:72:07:4f:72:12:23:9f:15:bb:37:cd:5a:40:40:25:8a:0e:
         87:3a:e3:89:d6:09:e5:03:3e:57:a3:15:c5:75:60:2a:e4:44:
         cf:71:84:11:0a:eb:53:6a:df:30:33:2d:ca:16:93:f7:57:9e:
         84:18:04:d0:3a:c2:2f:ab:7d:17:9d:4f:0d:fd:3a:4a:2b:10:
         65:e0:25:de:1d:9e:e7:40:b0:f9:d5:18:f7:69:c8:a5:da:f8:
         73:80:33:fe:98:11:a7:25:65:42:1b:04:a0:72:e6:a4:6c:c6:
         18:65:8f:0d:c4:02:3f:2d:09:4c:45:e2:a2:91:a0:86:6e:3b:
         ce:43:44:99:ed:c2:b6:c8:8a:80:22:8a:26:15:44:c9:ea:eb:
         03:67:db:3f:e9:86:47:a8:2a:9e:5b:5d:01:43:0f:46:07:60:
         fe:af:32:a8:5f:27:4d:7b:c2:02:62:30:be:23:57:fe:d8:42:
         b3:8a:c1:8a:2f:b6:a7:96:fc:57:bb:7a:f8:9a:31:ee:26:f2:
         41:e3:4f:6b:c5:84:c3:78:bd:8e:e4:17:4a:82:f4:6e:86:08:
         1e:a9:11:6e:50:64:f1:c4:43:0b:b6:60:02:ab:6f:1b:e5:65:
         03:0d:eb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org