Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130392e302f32342d3234203d3e20313339343436.roa
File:                     3130332e3134352e3130392e302f32342d3234203d3e20313339343436.roa (raw, json)
Hash identifier:          dgMi/Tp2ICRH9EJxdF7Z+YXoOSalcj9Ux7/OpYXk5qg=
Subject key identifier:   3D:39:38:7D:28:C6:7E:FA:12:73:6D:22:B8:20:1A:B2:9D:97:66:9B
Certificate issuer:       /CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE
Certificate serial:       55D0DDEF88909D48CF1B03C0A510FA738E442CB8
Authority key identifier: FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130392e302f32342d3234203d3e20313339343436.roa
Signing time:             Tue 20 Feb 2024 07:02:01 +0000
ROA not before:           Tue 20 Feb 2024 06:57:01 +0000
ROA not after:            Tue 18 Feb 2025 07:02:01 +0000
asID:                     139446
IP address blocks:        103.145.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl
                          rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d0:dd:ef:88:90:9d:48:cf:1b:03:c0:a5:10:fa:73:8e:44:2c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE
        Validity
            Not Before: Feb 20 06:57:01 2024 GMT
            Not After : Feb 18 07:02:01 2025 GMT
        Subject: CN=3D39387D28C67EFA12736D22B8201AB29D97669B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:95:3c:3e:81:c0:a0:f1:1d:40:35:8a:16:68:
                    74:09:b1:4b:50:23:dd:ff:28:34:0f:d3:5f:78:ff:
                    82:ba:31:e4:5c:00:34:89:ce:98:ea:fc:18:28:23:
                    4c:0c:92:9c:6d:1a:3c:1f:db:fc:ef:e4:a8:1c:ea:
                    14:8f:71:81:13:e9:76:3c:df:99:cb:be:0e:29:fe:
                    e9:8b:b5:01:c8:52:15:27:83:7e:2a:b8:6d:27:c5:
                    a3:54:72:03:1b:34:f6:f3:57:1b:f5:4e:64:24:89:
                    50:c6:30:44:ba:a0:d8:02:ec:b2:b5:da:79:e3:fe:
                    1f:b6:d2:e4:0d:be:20:51:8d:66:0b:08:7d:85:5e:
                    32:af:6e:35:c9:d8:b8:0e:6f:3d:4f:93:bd:97:aa:
                    c5:d6:3d:0e:ea:47:86:98:8d:2d:13:aa:78:bb:1e:
                    83:2a:f0:29:12:43:28:1c:41:09:0b:01:59:b6:18:
                    b6:19:11:24:44:58:00:fd:c9:02:22:99:a6:95:0c:
                    9e:32:3a:80:5f:3a:07:7b:b3:e7:32:a6:8b:ea:20:
                    2b:68:0d:89:9e:5f:a8:e1:b6:12:e0:c0:eb:47:f7:
                    63:bb:57:1c:87:25:a3:da:ac:f5:29:af:64:34:8b:
                    36:28:b1:5d:56:20:4c:fb:09:25:e0:fb:ce:ed:da:
                    70:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:39:38:7D:28:C6:7E:FA:12:73:6D:22:B8:20:1A:B2:9D:97:66:9B
            X509v3 Authority Key Identifier:
                keyid:FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130392e302f32342d3234203d3e20313339343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:e5:d3:5c:e0:d9:c2:72:35:36:29:f4:22:44:aa:c3:a7:33:
         75:d1:fe:20:29:f2:9e:62:48:92:d1:7d:7e:38:aa:36:83:52:
         b2:f3:79:a1:f3:da:51:4a:a2:ef:95:e4:56:eb:42:3f:ef:ef:
         88:48:5a:30:c2:ec:0a:34:72:1f:c7:80:96:f3:cc:40:8a:91:
         d0:b0:5b:2e:2c:98:4f:99:d7:bc:64:0e:ab:e8:c2:63:4f:14:
         76:61:d7:5d:88:5a:a0:c0:88:b1:27:ee:41:02:eb:74:bf:a3:
         ba:ce:5d:8e:5d:ba:6d:70:10:91:7a:97:b9:10:84:35:a5:5e:
         5c:1e:00:39:eb:18:4e:78:84:b5:fd:4e:ba:54:3d:b2:ae:c6:
         d8:b4:ea:2e:37:e4:6a:bc:76:a7:c9:59:c6:05:39:6f:bd:90:
         b4:9e:75:01:5a:a1:01:fe:6e:f8:f1:f0:fb:f5:e5:4b:32:87:
         81:89:0a:93:f1:b6:46:45:e2:2b:e4:d7:46:a4:d2:35:30:52:
         fc:6a:e3:e3:62:e7:fc:60:b4:4a:92:35:f3:29:68:61:32:75:
         2a:44:1c:76:5f:24:4c:b3:3a:85:4c:41:59:53:92:66:66:f4:
         3e:a6:83:f2:29:4c:bd:c5:ca:cc:02:ad:bf:6b:4a:d3:ed:51:
         67:d4:d8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:34:15 2024 by rpki-client on console-fra.rpki-client.org