Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/3130332e3135312e39342e302f32342d3234203d3e203137353338.roa
File:                     3130332e3135312e39342e302f32342d3234203d3e203137353338.roa (raw, json)
Hash identifier:          6APR7Hv9TSOuXZpSsPHBjMrP1CKzIss5d9cN4qNnUI8=
Subject key identifier:   D6:65:B7:99:13:7F:02:6C:EE:F7:57:51:8F:5B:B5:EC:7C:23:31:0A
Certificate issuer:       /CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9
Certificate serial:       013D7ABABAD1EDA29760DC7B5E39CA4B43F2340A
Authority key identifier: 6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/3130332e3135312e39342e302f32342d3234203d3e203137353338.roa
Signing time:             Mon 01 Jul 2024 01:05:06 +0000
ROA not before:           Mon 01 Jul 2024 01:00:06 +0000
ROA not after:            Mon 30 Jun 2025 01:05:06 +0000
asID:                     17538
IP address blocks:        103.151.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl
                          rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3d:7a:ba:ba:d1:ed:a2:97:60:dc:7b:5e:39:ca:4b:43:f2:34:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9
        Validity
            Not Before: Jul  1 01:00:06 2024 GMT
            Not After : Jun 30 01:05:06 2025 GMT
        Subject: CN=D665B799137F026CEEF757518F5BB5EC7C23310A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c8:78:fa:2c:a5:ed:b0:eb:7d:32:c6:7f:e4:
                    f7:70:8d:e0:68:c6:ac:4c:83:c5:44:81:38:79:e4:
                    a5:33:25:42:88:78:5f:b4:71:70:42:4d:94:3e:9d:
                    bd:0e:5c:91:37:e2:9d:c4:b5:4d:fd:ae:45:f8:21:
                    22:e4:d6:96:a6:04:aa:be:4e:71:5a:b7:99:5b:b3:
                    14:d4:a3:e3:48:ce:6e:57:e5:19:62:b0:50:67:27:
                    bf:0f:00:1c:6f:1d:f3:86:06:a7:95:27:33:06:fc:
                    d2:8a:f4:b9:aa:ec:3d:59:87:0f:f7:4d:95:00:be:
                    7d:78:9f:49:9b:20:10:66:dc:56:b7:72:b3:0e:04:
                    91:da:ba:da:67:f8:cf:14:a3:c8:18:06:02:a2:ed:
                    52:00:81:c7:e7:73:da:85:83:7f:0c:73:bb:13:e9:
                    25:46:59:45:09:e3:c4:a1:42:a2:b7:72:ea:a9:af:
                    74:3d:bb:6e:4b:fe:88:9f:23:53:df:e8:82:b5:d2:
                    c4:f7:79:5a:ca:ff:7c:69:bb:9a:68:9b:56:ab:86:
                    2e:71:99:5e:4c:60:e6:4b:91:bc:fc:55:29:6f:65:
                    f5:c6:a5:73:33:34:bd:48:19:14:f3:3a:08:53:f1:
                    ef:0c:ff:20:5a:6f:2d:75:14:b8:3b:84:e1:81:c3:
                    fa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:65:B7:99:13:7F:02:6C:EE:F7:57:51:8F:5B:B5:EC:7C:23:31:0A
            X509v3 Authority Key Identifier:
                keyid:6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/3130332e3135312e39342e302f32342d3234203d3e203137353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:b2:ff:2c:8a:e4:f7:fc:5e:0b:e3:81:a8:70:51:cb:2e:f1:
         99:01:14:1c:17:57:fc:79:46:d7:00:31:2a:d7:8c:d7:0f:71:
         b9:4b:fb:c4:6f:74:a5:19:eb:ee:98:35:40:eb:e5:d5:a7:97:
         4c:3f:e8:8b:54:da:b1:33:c1:83:08:84:f1:18:66:88:d4:4a:
         4d:ef:c6:27:23:85:ba:51:bf:1c:4b:43:aa:b5:95:d0:ce:16:
         f0:eb:99:c6:85:fd:15:f9:be:7f:03:67:cd:94:dc:d5:de:35:
         8a:fc:57:c0:f6:1c:98:75:d8:29:9f:eb:f1:6b:7a:d8:26:46:
         ff:b3:e2:d7:89:8e:c5:40:e7:7b:81:1c:90:e1:0e:65:ed:78:
         8e:2e:9b:97:22:4a:1c:44:fa:62:92:60:de:66:81:d6:42:91:
         d2:77:2c:df:3e:88:22:4c:26:90:d6:3c:70:87:f9:57:b7:a9:
         1f:a5:10:85:01:0a:da:6c:59:8a:7e:54:29:5f:dc:8b:b9:7e:
         e4:6b:92:0d:93:ae:68:72:9d:cc:f1:eb:7a:b6:73:ef:03:70:
         fd:fb:2c:5c:33:7c:15:37:48:c0:54:a2:db:34:50:c3:11:03:
         3a:36:47:94:cf:6b:ca:e1:67:5c:76:0c:8f:d5:9c:45:28:fc:
         85:6b:b3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org