Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa
File:                     3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (raw, json)
Hash identifier:          jsQ3cGwTb93KQ3+TKRABx0l0miUMW9JXJpLX/A8kMmk=
Subject key identifier:   0B:80:16:24:96:F8:BA:CA:8A:AB:D6:A4:1B:88:67:81:2F:71:84:45
Certificate issuer:       /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD
Certificate serial:       26F6C8783DFE25B21E17279C2ED93F562FA6080D
Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa
Signing time:             Tue 14 May 2024 14:00:02 +0000
ROA not before:           Tue 14 May 2024 13:55:02 +0000
ROA not after:            Tue 13 May 2025 14:00:02 +0000
asID:                     138876
IP address blocks:        103.140.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl
                          rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f6:c8:78:3d:fe:25:b2:1e:17:27:9c:2e:d9:3f:56:2f:a6:08:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD
        Validity
            Not Before: May 14 13:55:02 2024 GMT
            Not After : May 13 14:00:02 2025 GMT
        Subject: CN=0B80162496F8BACA8AABD6A41B8867812F718445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:83:e4:2b:bb:00:18:0e:4e:f2:d5:14:fd:0b:
                    70:70:4b:d6:12:e2:63:14:0f:64:34:e0:c0:e0:59:
                    a5:c9:ce:de:a9:63:41:e8:f6:e6:bc:ed:bc:29:be:
                    7d:5b:8b:ff:ce:9d:c4:15:6a:3c:b2:08:50:a4:69:
                    59:27:72:87:2e:9b:dd:01:52:87:7b:af:73:24:e6:
                    87:22:d9:b9:d5:39:3f:8b:84:e4:34:8f:d4:8e:0a:
                    5e:94:d4:1f:c7:4b:dc:21:48:b3:1e:b3:09:54:cc:
                    35:67:65:3b:91:c1:34:82:e2:ae:e6:c3:9b:9a:b1:
                    a8:64:ae:21:12:4c:ab:c7:6e:e0:93:f6:a4:53:5d:
                    c7:e7:9f:04:31:32:05:37:69:74:c4:a2:6a:c2:dd:
                    44:d8:10:fa:5f:af:4a:00:8a:26:d9:64:e4:a5:2f:
                    12:94:b0:40:6a:79:04:39:22:c9:a1:67:49:38:0c:
                    71:10:df:79:92:6e:3e:46:ad:2c:f7:6b:b5:13:20:
                    f9:0f:4b:47:d1:6b:10:cf:4a:5b:0a:32:66:4f:e3:
                    97:ca:9c:13:85:6d:10:33:a1:c8:5e:7b:6d:82:84:
                    28:9d:ae:0f:7f:f9:f7:13:aa:fb:0a:82:07:64:21:
                    1d:41:74:20:7e:f9:11:33:69:ad:3e:4b:ff:03:11:
                    89:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:80:16:24:96:F8:BA:CA:8A:AB:D6:A4:1B:88:67:81:2F:71:84:45
            X509v3 Authority Key Identifier:
                keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:2d:0e:a5:4c:fa:b9:34:9e:1c:0d:0d:d0:3c:cd:ad:3f:27:
         55:a3:07:35:9d:15:11:29:66:d8:5a:01:b0:8d:d3:59:8e:5f:
         cc:a6:4e:8f:27:35:23:dc:df:54:9e:d1:65:07:a3:04:8d:e2:
         57:df:48:8a:92:80:91:cd:27:fe:01:2d:44:b0:0a:d1:70:1e:
         fe:73:ec:39:24:7f:c9:bf:40:94:85:2a:09:8d:69:12:d1:53:
         79:a3:8a:7e:35:f8:74:67:e6:de:0e:ae:e0:64:16:82:fd:95:
         c0:a5:58:9a:67:d8:45:15:b0:9f:5c:23:e9:bb:fc:30:ed:ba:
         0a:29:73:65:dd:3c:59:c8:66:1b:1b:10:c8:3a:47:f2:4a:93:
         41:d8:a8:21:01:da:2d:64:2c:4e:98:88:9f:6a:a2:1f:54:84:
         7c:7b:d6:8b:7d:25:ba:88:c3:67:e7:81:39:25:69:21:9c:ef:
         c0:52:38:79:dd:11:1f:95:77:36:26:67:3b:62:b7:c2:ae:09:
         66:70:9a:b4:7a:18:c1:b4:bf:b5:8a:27:09:ac:af:06:54:48:
         59:22:6c:cd:d7:d9:41:3e:e0:a0:db:36:38:d9:6b:00:34:fc:
         cf:c8:6e:40:71:72:32:5e:ca:1f:51:78:8c:4c:66:ac:b6:10:
         0a:17:2b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 06:32:38 2024 by rpki-client on console-fra.rpki-client.org