Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e392e302f32342d3234203d3e20313335343838.roa
File:                     3130332e39352e392e302f32342d3234203d3e20313335343838.roa (raw, json)
Hash identifier:          WO0uyUmEzhKpKYqnnoiDgClFQ0PROSCzgNYZXT3FLKY=
Subject key identifier:   01:75:45:65:98:AF:58:91:5E:B9:3D:41:E0:07:85:FA:D6:EB:79:7E
Certificate issuer:       /CN=415543D423E0BD035D612DEA9BF060290E5552D2
Certificate serial:       57E1A6C0047A96A07BAEA6BFC99B0D03D6B6C345
Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e392e302f32342d3234203d3e20313335343838.roa
Signing time:             Mon 25 Mar 2024 04:00:00 +0000
ROA not before:           Mon 25 Mar 2024 03:55:00 +0000
ROA not after:            Mon 24 Mar 2025 04:00:00 +0000
asID:                     135488
IP address blocks:        103.95.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl
                          rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e1:a6:c0:04:7a:96:a0:7b:ae:a6:bf:c9:9b:0d:03:d6:b6:c3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2
        Validity
            Not Before: Mar 25 03:55:00 2024 GMT
            Not After : Mar 24 04:00:00 2025 GMT
        Subject: CN=0175456598AF58915EB93D41E00785FAD6EB797E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:38:40:4c:08:1a:ee:e1:8c:d3:5b:ad:26:
                    2b:25:93:ee:a1:2a:00:b3:eb:2f:97:cc:72:9b:da:
                    cf:93:1f:e8:a0:14:d9:6b:85:f1:7b:ac:85:b7:90:
                    bb:5f:95:3d:97:bc:a9:59:d3:b0:0a:21:1d:77:36:
                    59:e1:09:7a:47:a9:45:1a:ac:b8:74:6e:6e:8f:b1:
                    97:85:41:8e:69:b5:04:2b:20:0d:60:4b:d8:32:81:
                    f9:84:47:a8:63:20:f9:19:88:50:0c:80:06:a8:93:
                    77:53:32:86:1c:08:d7:7c:f5:76:5b:b5:60:14:46:
                    2f:67:17:34:2d:c9:5b:15:77:43:9f:91:dd:1b:97:
                    e9:5a:54:83:af:81:c6:73:52:6f:9f:c9:7a:b7:fd:
                    ed:a5:8c:b5:ba:79:d8:3d:ea:b1:19:8f:8e:c7:2a:
                    34:b6:02:5f:fd:8b:a0:2e:63:34:5d:71:9d:3b:cd:
                    9e:c6:ee:da:1e:71:3b:83:a3:e9:57:af:ae:c1:a1:
                    b0:96:22:a7:26:a4:a4:dd:5f:18:c8:c4:35:e8:26:
                    ee:64:10:7c:b3:c6:23:b9:33:f9:63:80:d1:10:e7:
                    e2:dd:c6:96:aa:67:4f:60:5a:02:6f:3e:37:69:a5:
                    5b:a3:9b:07:47:a5:b6:c6:fa:db:14:02:32:52:32:
                    ea:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:75:45:65:98:AF:58:91:5E:B9:3D:41:E0:07:85:FA:D6:EB:79:7E
            X509v3 Authority Key Identifier:
                keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e392e302f32342d3234203d3e20313335343838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:8a:4c:86:d8:18:bc:22:cd:9d:65:84:cb:81:7e:a6:dc:db:
         e1:1f:32:17:74:54:c0:2e:82:fd:1b:4d:44:a0:d4:ee:f4:7b:
         9d:b3:6c:1c:68:fd:c7:1a:bb:e5:86:66:42:eb:20:32:1e:13:
         c4:33:00:86:f8:0e:bc:1f:e0:4e:1c:65:bd:ee:66:ed:1e:f9:
         bf:09:fb:01:b2:cc:3b:a0:c7:45:7d:37:3d:63:55:ba:15:c6:
         51:23:7c:1b:ea:c2:1b:fd:a6:3a:e2:4d:b2:97:5e:d9:0d:1c:
         fc:77:e3:8c:a4:01:3d:b8:d8:46:24:5c:2c:d8:bb:4f:30:73:
         a3:dd:a3:7c:06:07:f8:3b:1d:f6:0f:2c:55:a5:70:38:ec:b0:
         80:97:9e:29:64:b1:0e:7a:b5:c8:c3:72:ab:db:f9:67:c3:03:
         06:b2:52:19:c3:72:8c:75:5e:58:3c:1f:c4:e2:70:be:ac:94:
         5f:1f:a9:a1:4e:9e:48:38:05:78:11:cd:78:cc:8d:95:46:70:
         a7:d8:d5:99:d8:c6:73:fc:30:59:fe:a6:f1:4e:96:2c:1b:a0:
         10:d3:b8:43:98:52:1d:90:3f:dc:da:bf:4a:1c:21:60:f5:3d:
         cd:6a:cc:a0:68:a6:5c:1c:4c:86:5d:95:f2:d3:c8:6e:7c:85:
         00:01:7b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:42:07 2024 by rpki-client on console-ams.rpki-client.org