Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa
File:                     3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (raw, json)
Hash identifier:          awJvMfpFJU98eWUWFeuf5hiKZwFuXoT65yolMyJX4Jw=
Subject key identifier:   67:28:02:26:C6:3E:CD:AD:D8:E7:19:90:83:96:05:40:11:56:DC:0D
Certificate issuer:       /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0
Certificate serial:       1EA1BA1C5CFF1C2C629295002899F0C0D7DC6ED4
Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa
Signing time:             Fri 06 Sep 2024 09:00:05 +0000
ROA not before:           Fri 06 Sep 2024 08:55:05 +0000
ROA not after:            Fri 05 Sep 2025 09:00:05 +0000
asID:                     136821
IP address blocks:        103.27.194.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl
                          rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a1:ba:1c:5c:ff:1c:2c:62:92:95:00:28:99:f0:c0:d7:dc:6e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0
        Validity
            Not Before: Sep  6 08:55:05 2024 GMT
            Not After : Sep  5 09:00:05 2025 GMT
        Subject: CN=67280226C63ECDADD8E71990839605401156DC0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ee:58:61:27:c5:ad:e2:18:5f:44:30:4d:79:
                    49:3f:3c:31:3b:5f:8a:0c:fc:67:b9:84:0e:e4:31:
                    a6:2b:18:0c:b0:6f:25:ca:b9:fa:68:6e:ce:5b:1d:
                    c4:c2:27:9d:56:68:08:66:64:b4:3d:00:ac:7a:3c:
                    cd:44:3f:f9:34:8d:29:4b:af:f4:50:33:58:ad:b9:
                    0f:79:b9:fb:8f:02:ad:a0:8b:13:da:67:34:53:f3:
                    d5:ff:c0:cd:4c:ab:12:af:ef:35:5a:9a:95:2d:cc:
                    14:31:83:bf:f2:33:d5:48:da:08:31:89:3d:da:5e:
                    bc:4b:e4:52:b6:b6:17:21:55:d0:e7:4e:92:78:21:
                    77:bf:9f:df:65:e0:85:72:0f:10:be:c8:fd:3d:00:
                    df:0d:a4:df:35:39:c1:a9:1a:c8:3d:f1:b7:ae:01:
                    5e:42:12:a0:a2:39:01:a4:92:f7:4c:28:d2:92:b7:
                    0e:44:b3:d2:32:65:fb:9c:7d:92:43:fb:81:91:b8:
                    f4:eb:4d:e8:8c:cc:af:24:a7:c4:49:a6:ad:fd:a6:
                    79:c0:52:1e:70:99:04:99:87:dd:51:66:6a:22:f0:
                    25:8b:5e:6b:c2:21:ac:fb:1d:9a:71:cc:eb:12:48:
                    68:6c:61:c8:a8:49:7e:51:3e:6a:66:a9:27:55:28:
                    b7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:28:02:26:C6:3E:CD:AD:D8:E7:19:90:83:96:05:40:11:56:DC:0D
            X509v3 Authority Key Identifier:
                keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:6a:77:53:bc:d1:f0:b1:7d:cb:b3:e3:90:48:6a:2b:58:22:
         6e:4c:4d:87:47:ae:4f:f0:18:9f:f4:b5:9c:50:49:a8:72:60:
         18:b6:f6:3d:b3:99:0d:d5:ec:c9:db:ef:59:4b:0c:74:c4:51:
         fc:84:08:f4:73:de:5b:f2:d1:00:31:79:d3:51:e2:c9:e4:7f:
         8a:b5:51:67:9b:75:a3:d9:e6:c2:56:e9:0d:7b:e3:23:ae:8a:
         18:61:f4:12:37:2c:cb:c8:69:b3:d7:53:b5:d0:b9:8a:25:b8:
         73:2e:b3:30:78:36:05:62:c2:33:fd:40:ee:33:07:b0:e9:f5:
         85:e2:c7:92:94:5b:1e:77:38:99:53:08:aa:aa:b7:9f:d1:6a:
         9d:24:fe:99:68:24:c8:4a:f0:9a:0d:13:90:60:2a:af:e0:0e:
         22:60:61:db:ce:3d:8c:16:2f:48:4b:e6:2b:73:7a:0e:a5:ac:
         63:7a:f7:7c:c3:78:dc:e1:35:c6:05:5f:36:f4:0e:1b:2a:07:
         e8:5f:e6:29:2b:95:83:ff:e3:1d:a2:c7:f8:95:f8:91:24:3a:
         60:45:e6:86:95:2a:aa:c4:f1:31:5f:58:dd:46:37:34:2b:e1:
         27:c3:48:ce:50:d9:60:77:1f:f7:48:a7:8d:94:fe:69:de:7d:
         f6:6b:33:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:48 2024 by rpki-client on console-fra.rpki-client.org