Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa
File:                     3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (raw, json)
Hash identifier:          moawateISUT/3llEp3n8zpznPlSKQD6Rx+eWkaIMlHk=
Subject key identifier:   C5:79:5F:3D:56:BD:77:7B:79:73:87:6C:A0:05:F6:D2:57:01:54:9E
Certificate issuer:       /CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C
Certificate serial:       2BD0A8FB41D9ED31B7FB0AB8A8D5174EF4F8B4FA
Authority key identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa
Signing time:             Sat 04 May 2024 17:00:01 +0000
ROA not before:           Sat 04 May 2024 16:55:01 +0000
ROA not after:            Sat 03 May 2025 17:00:01 +0000
asID:                     141062
IP address blocks:        103.155.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl
                          rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 21:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d0:a8:fb:41:d9:ed:31:b7:fb:0a:b8:a8:d5:17:4e:f4:f8:b4:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C
        Validity
            Not Before: May  4 16:55:01 2024 GMT
            Not After : May  3 17:00:01 2025 GMT
        Subject: CN=C5795F3D56BD777B7973876CA005F6D25701549E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cf:91:1d:50:4e:7b:9f:83:81:54:46:d3:03:
                    67:48:24:8b:a4:33:bc:49:74:99:5f:54:a1:db:26:
                    45:db:0a:02:b2:93:ad:b4:6c:52:2d:53:ee:24:6c:
                    fd:c2:0a:b9:01:d3:2d:10:14:6e:48:11:b1:e3:d2:
                    bc:08:6b:20:2a:e9:83:34:21:bc:48:66:b5:ba:d9:
                    42:84:08:78:99:0e:09:ae:92:94:e4:9d:b0:c7:fa:
                    48:d9:3a:df:ec:55:5d:1e:c3:57:95:88:62:7c:b6:
                    f0:b2:a7:30:a3:2d:42:8d:9d:04:72:fc:06:1d:ad:
                    d8:ed:a8:d1:7f:21:57:d9:3f:ca:a6:6b:80:c1:28:
                    4a:6b:be:35:12:28:97:97:de:f4:04:1e:ba:29:40:
                    c7:a8:14:cc:57:08:25:91:bb:00:6f:a9:d3:b9:64:
                    0b:84:6c:e8:1f:77:eb:d8:90:27:01:3e:26:d9:58:
                    a1:e9:a7:b2:06:96:55:fa:1b:a4:90:e7:30:fb:8b:
                    47:71:28:87:82:09:72:8b:37:52:7c:62:03:86:ba:
                    76:77:a4:b4:fd:9c:6c:2f:8c:88:53:2f:ba:ad:d0:
                    2d:ee:9d:02:4c:49:13:f9:31:4a:dc:cc:85:fd:3f:
                    b6:22:16:0f:d4:1d:10:b9:21:e1:8a:87:a4:dd:26:
                    a1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:79:5F:3D:56:BD:77:7B:79:73:87:6C:A0:05:F6:D2:57:01:54:9E
            X509v3 Authority Key Identifier:
                keyid:B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:0f:99:ce:46:96:7b:0f:78:37:a1:60:54:fa:d3:d6:e2:69:
         6c:89:ad:77:88:10:8c:60:b9:85:ef:e1:03:c9:f9:ea:fa:03:
         51:66:2c:e4:4b:c9:81:5b:bc:16:58:40:ce:ca:b2:86:c9:ef:
         24:e3:67:f0:bf:24:17:29:e6:26:af:a1:59:31:1d:cb:97:33:
         5c:83:79:0b:25:1b:02:54:6f:5d:ab:9e:81:29:b1:22:d2:ba:
         b4:5a:4d:17:d2:a2:b6:06:3a:99:57:11:63:db:09:cb:87:02:
         2e:8d:1f:49:bc:be:ad:c1:ea:56:74:c4:a7:c4:21:d0:c1:b1:
         af:26:1c:b0:a9:02:ef:f6:88:a6:aa:76:02:b8:dd:7a:b6:71:
         de:af:f2:e5:42:26:09:a9:46:58:ab:e0:c3:41:2c:d5:21:69:
         93:bf:fb:78:38:93:93:93:c7:df:ff:66:78:29:1d:fa:45:d3:
         b1:77:50:ca:e3:d6:7f:78:78:74:70:d8:e7:01:89:95:33:19:
         a3:3d:8f:e3:67:cb:1e:11:a5:34:07:6f:1a:49:f8:a6:a3:9c:
         ad:f3:6d:b2:dc:fa:f8:4e:6b:74:61:ae:c0:f8:35:1b:a7:48:
         96:94:23:71:53:9c:ed:c9:c7:b0:3f:9e:57:40:66:8e:e0:e1:
         e8:51:37:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:02 2024 by rpki-client on console-ams.rpki-client.org