Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa
File:                     3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa (raw, json)
Hash identifier:          01GhR87m6uISdoaVmw5/Uom42dMtA6W3HSfDP759MWE=
Subject key identifier:   FA:C9:62:E7:A4:1E:75:C4:B8:39:67:44:2F:C6:08:48:72:14:21:16
Certificate issuer:       /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
Certificate serial:       15A7EECAEA2A958082EC18DC11428F4C6E6BCEBE
Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa
Signing time:             Fri 13 Sep 2024 19:00:02 +0000
ROA not before:           Fri 13 Sep 2024 18:55:02 +0000
ROA not after:            Fri 12 Sep 2025 19:00:02 +0000
asID:                     138598
IP address blocks:        103.134.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl
                          rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 18:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a7:ee:ca:ea:2a:95:80:82:ec:18:dc:11:42:8f:4c:6e:6b:ce:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
        Validity
            Not Before: Sep 13 18:55:02 2024 GMT
            Not After : Sep 12 19:00:02 2025 GMT
        Subject: CN=FAC962E7A41E75C4B83967442FC6084872142116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:20:84:37:08:29:6b:85:7b:b0:9d:3d:69:f4:
                    6c:a9:f1:9f:bf:b1:6d:60:01:87:cf:fe:e7:44:cb:
                    cc:9c:dd:4c:96:10:16:b5:3d:d0:76:b8:eb:ed:5b:
                    0c:be:59:62:f2:a4:ac:7d:24:66:9c:7a:ab:26:e5:
                    48:40:0e:13:2a:c8:77:9f:5e:41:bb:03:90:f2:4b:
                    0c:70:38:38:d0:a1:dc:c7:70:84:d9:8a:e8:16:6f:
                    fd:5f:1d:d5:8c:4a:e1:36:5b:b7:c6:a5:e1:e4:a7:
                    ac:1c:e2:8b:ce:0a:bb:f7:58:78:33:6d:e8:35:19:
                    64:58:fa:0c:a5:fb:da:44:54:2d:1a:75:27:60:7d:
                    89:1b:5a:7f:50:1f:7c:33:ed:43:a0:c6:6e:94:63:
                    4f:fc:ac:62:8b:2d:ec:9c:f8:9e:8d:28:ce:0b:94:
                    47:60:0d:f4:31:5f:9e:79:f5:8a:a8:b6:22:02:9c:
                    e2:8d:1c:7a:59:d0:af:09:a2:71:01:32:c9:5a:e3:
                    5c:81:ea:6a:ce:f2:12:54:8f:e3:c3:33:fc:75:51:
                    d4:2d:e2:a5:b6:bb:7f:be:72:35:3d:0e:b8:ae:18:
                    a5:7f:c3:39:34:f4:7d:ae:4c:ea:cf:67:5a:33:a6:
                    50:9b:64:f2:3e:77:5f:1a:25:25:0f:9e:c3:fe:67:
                    7e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C9:62:E7:A4:1E:75:C4:B8:39:67:44:2F:C6:08:48:72:14:21:16
            X509v3 Authority Key Identifier:
                keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:ba:c7:10:b5:99:63:72:c3:12:8f:e9:54:39:a3:0e:0d:6c:
         21:92:e1:6c:95:c8:48:35:91:b6:e0:11:ee:30:a3:01:28:4c:
         49:2a:42:e2:f3:94:2d:db:3e:45:d1:90:9b:21:da:57:a6:8e:
         b7:65:1a:3e:b4:5b:c5:36:03:3d:1f:a9:af:b2:bd:27:92:95:
         4d:e8:c5:1a:83:0c:0d:b0:e7:73:8f:0c:65:5b:39:90:a6:b5:
         dd:cd:67:35:1d:6d:5e:ee:f4:a1:10:20:66:df:ad:bb:10:e4:
         83:f3:a2:ab:fa:e7:c0:14:58:dc:9e:57:05:df:b6:9e:9d:e7:
         fe:77:c0:6a:81:d1:8d:5f:dd:a3:52:11:c3:84:71:82:e9:9f:
         97:41:80:a5:fc:4a:41:a6:8d:a5:76:78:8f:c5:bc:ef:ab:81:
         dd:64:43:83:ac:64:89:71:2a:4e:3b:84:8c:67:4e:bd:f2:16:
         f7:1c:c5:36:06:0b:e2:d4:53:29:71:0d:69:58:e7:ab:66:71:
         77:af:91:9f:82:4e:36:54:8b:05:d0:d3:1d:7f:79:9f:6a:cb:
         5d:3c:c3:cb:3d:a7:19:db:5e:b8:4f:e9:7e:9a:95:9e:5c:67:
         90:4e:33:91:79:01:13:3c:40:91:e5:4a:d0:1b:4c:84:5b:5c:
         60:fe:06:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org