Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa
File:                     3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa (raw, json)
Hash identifier:          Yjlkkc0qEXfgrDlzvTciB2VHeHjekmf/H9byxQIVCPg=
Subject key identifier:   83:15:9E:CF:CD:46:09:06:39:FB:5E:9A:79:C9:04:04:AC:41:3D:A3
Certificate issuer:       /CN=129285A478A166EE0B54DBCDA60771DA54C4F65F
Certificate serial:       6CF1794D7F1462A8FCE867175972AFEBCE366A0A
Authority key identifier: 12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa
Signing time:             Mon 01 Jul 2024 01:05:02 +0000
ROA not before:           Mon 01 Jul 2024 01:00:02 +0000
ROA not after:            Mon 30 Jun 2025 01:05:02 +0000
asID:                     138114
IP address blocks:        103.125.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl
                          rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 06:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f1:79:4d:7f:14:62:a8:fc:e8:67:17:59:72:af:eb:ce:36:6a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=129285A478A166EE0B54DBCDA60771DA54C4F65F
        Validity
            Not Before: Jul  1 01:00:02 2024 GMT
            Not After : Jun 30 01:05:02 2025 GMT
        Subject: CN=83159ECFCD46090639FB5E9A79C90404AC413DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:65:32:4b:86:7f:36:34:2c:55:6e:47:54:48:
                    f1:d1:3c:6d:db:69:ca:5a:58:b2:18:a1:4f:ab:e9:
                    9f:0a:c1:2c:f4:62:0f:e4:a6:87:40:94:02:ac:2e:
                    8f:62:a4:8f:09:31:9d:e0:0c:38:f6:bc:61:45:30:
                    be:f9:0e:9a:71:3d:a8:66:99:89:b9:0c:0b:45:d3:
                    cd:3e:14:e1:3c:ac:16:f3:1b:31:92:fe:ff:95:72:
                    7f:e3:ac:f7:89:76:36:25:3d:fe:de:90:86:4c:71:
                    6a:7b:d0:05:78:32:b3:66:5e:93:f9:d1:66:f8:98:
                    ac:3f:0e:81:d4:f0:c4:67:86:f5:50:8d:6b:1f:89:
                    cd:40:99:9b:a8:88:ee:4b:93:72:68:65:f9:a6:c8:
                    0a:79:94:30:f8:73:60:f7:23:27:5a:50:a5:43:e3:
                    f3:b0:9d:0b:23:62:4c:12:0d:eb:fb:55:ba:7e:9c:
                    a8:ba:44:0b:9f:9e:38:1e:21:00:e9:7a:0a:94:1f:
                    4f:28:78:5e:85:6f:b8:55:66:30:3c:28:82:fc:4f:
                    83:e4:52:21:77:d8:40:98:3b:c8:0c:2e:06:09:59:
                    06:67:fd:82:66:de:b9:d6:5b:5e:86:4b:92:f2:03:
                    71:d6:85:b2:e0:32:fb:07:93:50:db:a3:39:27:0b:
                    52:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:15:9E:CF:CD:46:09:06:39:FB:5E:9A:79:C9:04:04:AC:41:3D:A3
            X509v3 Authority Key Identifier:
                keyid:12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:7c:41:21:39:2f:9b:4a:13:53:a4:12:86:e2:79:e2:e0:ca:
         30:a7:dd:52:17:91:1e:71:33:c0:59:b6:89:99:82:45:4d:dc:
         b6:6e:a1:46:2a:b7:2f:1b:6c:5b:28:f5:8e:8f:1c:46:d5:02:
         70:fc:69:6d:bd:0d:88:26:fa:96:43:37:cf:0a:07:78:49:18:
         db:fb:8a:29:61:d3:d6:13:3d:62:f7:78:b4:13:c9:43:7b:cb:
         8a:b0:90:df:09:76:01:41:8c:0e:48:2b:d3:ea:89:2b:08:8a:
         48:c4:f2:2d:b8:1c:48:a2:92:53:bd:56:8e:88:3b:64:d4:a1:
         94:e5:7d:b9:9a:58:68:e5:7b:39:c8:1d:6a:69:78:ed:96:ab:
         d9:b1:0b:fd:9e:72:6b:c1:f7:8b:8a:11:aa:7d:7e:4f:cd:fa:
         08:ac:5d:7c:85:42:6f:c8:e5:70:c3:9f:6e:10:d7:8d:26:0e:
         7e:81:74:b1:68:78:60:75:e3:17:21:d7:25:d2:64:44:47:97:
         56:54:77:3f:5a:33:15:2a:fb:90:ac:0e:2a:c9:93:91:99:1a:
         0a:f5:a3:cd:8d:fc:aa:b5:55:16:44:b1:a1:a0:bb:77:06:e6:
         10:4f:95:98:05:db:2c:1d:2a:ea:d3:4f:76:11:f9:b3:09:2d:
         55:f2:1b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org