Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa
File:                     3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa (raw, json)
Hash identifier:          9MEqNOnhCmE5/Zcc/9wnTwADsMTmpQIeIPBCWuyVQgQ=
Subject key identifier:   60:80:43:D2:10:5F:FB:D2:3A:AD:DB:3A:87:0D:9B:AB:A5:DD:AC:E6
Certificate issuer:       /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
Certificate serial:       5876D7CE0D7C740CBCD88AF05FEDE7580EA4A502
Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa
Signing time:             Fri 13 Oct 2023 18:19:07 +0000
ROA not before:           Fri 13 Oct 2023 18:14:07 +0000
ROA not after:            Fri 11 Oct 2024 18:19:07 +0000
asID:                     138598
IP address blocks:        103.134.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl
                          rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:76:d7:ce:0d:7c:74:0c:bc:d8:8a:f0:5f:ed:e7:58:0e:a4:a5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
        Validity
            Not Before: Oct 13 18:14:07 2023 GMT
            Not After : Oct 11 18:19:07 2024 GMT
        Subject: CN=608043D2105FFBD23AADDB3A870D9BABA5DDACE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ec:8f:59:79:9d:81:fe:d8:c5:ba:41:a8:89:
                    8d:3f:9a:2e:bf:d2:9d:f0:55:5f:5a:81:7d:88:4d:
                    92:e2:21:4e:2d:78:f6:73:a7:04:e1:79:d1:73:74:
                    92:50:5a:d1:61:0c:1c:08:05:a6:b9:88:bc:c8:e1:
                    91:8f:c8:b3:f9:a4:b0:50:f2:f0:91:57:ca:06:f6:
                    30:67:d6:c5:5a:48:a0:cb:24:3e:7f:92:8c:f9:a6:
                    96:ca:9a:d9:e4:f6:9b:73:77:c8:da:14:7a:38:ca:
                    1f:ff:b2:3b:8d:8c:5d:e9:02:42:2f:76:1d:28:88:
                    e1:1b:c8:2d:ab:95:b8:de:42:a8:9c:d8:cb:c4:8a:
                    48:1c:5a:6f:52:12:38:2f:f8:6a:92:fa:ad:15:ed:
                    2f:7b:32:c6:86:68:e1:56:a8:0b:34:3f:a9:69:7a:
                    5c:da:95:40:66:30:92:24:9d:9b:93:ce:c5:53:a9:
                    e8:86:91:4c:97:9b:62:75:96:59:ee:73:3b:3e:b5:
                    72:f3:af:c7:8b:7a:57:44:f2:21:0e:6d:b4:e9:f7:
                    ef:07:c4:d6:3a:4f:b8:15:fa:a3:2c:fa:24:9a:23:
                    d7:b2:9d:d4:3a:1f:82:53:2a:20:c2:e6:69:f1:9a:
                    4a:e4:03:78:1f:89:b3:e9:d5:ae:e4:3f:d0:58:f4:
                    18:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:80:43:D2:10:5F:FB:D2:3A:AD:DB:3A:87:0D:9B:AB:A5:DD:AC:E6
            X509v3 Authority Key Identifier:
                keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:d2:d6:7f:65:ac:cb:64:b3:58:c6:00:5a:e6:36:19:f2:10:
         ad:c8:a3:e4:c6:f3:f1:d5:12:9d:24:51:f4:f3:46:d4:97:f6:
         e3:16:90:94:66:b1:c6:5f:fe:01:bd:58:4d:3b:6c:64:b6:c7:
         b0:26:36:13:ab:92:ed:86:98:a7:a6:08:16:6a:64:cb:3b:cb:
         1e:76:24:e2:35:d3:00:41:49:f1:91:57:84:cb:cc:c2:6b:db:
         5e:f3:11:e3:a1:c3:12:ec:45:21:d8:8f:6f:11:c3:3d:c2:77:
         b4:dd:c4:4b:21:8f:4f:6d:bd:80:21:35:49:52:a0:3a:0c:50:
         b2:a4:65:94:49:1c:6b:bf:f2:bf:84:29:41:48:2a:69:4f:07:
         85:7c:58:11:b6:b4:5d:3d:0c:c6:a4:66:35:6b:0c:4e:c1:f2:
         b2:01:b1:90:87:b8:48:05:e4:70:16:e4:d6:2d:8e:b9:14:9b:
         39:7a:55:37:10:4c:ac:ad:53:6b:8e:35:a1:2c:2d:0f:12:0e:
         91:c7:12:86:c5:0f:6d:10:13:e8:c4:33:42:c0:5e:1a:87:10:
         ce:4d:ea:d5:17:01:a4:a2:3e:37:45:83:66:52:07:01:d9:40:
         60:3a:5a:f9:91:46:2e:4d:a8:d2:4f:f3:b3:d4:b2:f2:6e:c3:
         a3:81:dc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 12:44:45 2024 by rpki-client on console-ams.rpki-client.org