Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa
File:                     3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (raw, json)
Hash identifier:          307XyhPIW2QI2y7N9VTV4M9xxs3dAQ81kE7zvvnzKPY=
Subject key identifier:   EB:F4:D9:0E:8E:96:50:24:40:C4:6B:68:CF:0A:F8:D2:C6:17:98:CB
Certificate issuer:       /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96
Certificate serial:       32663FF3B09D8F329A7D61C03F945BCF06BC3EF7
Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa
Signing time:             Sat 18 May 2024 20:00:00 +0000
ROA not before:           Sat 18 May 2024 19:55:00 +0000
ROA not after:            Sat 17 May 2025 20:00:00 +0000
asID:                     136075
IP address blocks:        103.84.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl
                          rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:66:3f:f3:b0:9d:8f:32:9a:7d:61:c0:3f:94:5b:cf:06:bc:3e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96
        Validity
            Not Before: May 18 19:55:00 2024 GMT
            Not After : May 17 20:00:00 2025 GMT
        Subject: CN=EBF4D90E8E96502440C46B68CF0AF8D2C61798CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4c:17:5f:12:a4:40:0b:0b:bc:5f:4b:87:f9:
                    5f:5b:d7:c5:dd:cb:2f:ad:b7:2a:01:fd:f8:7e:8c:
                    bd:80:39:1a:44:8d:1d:5b:71:50:20:35:19:76:5f:
                    09:dd:46:27:71:07:c8:27:27:b1:b7:f8:50:c6:cf:
                    63:03:8d:56:d6:b6:ce:87:ac:7d:8f:08:fb:15:96:
                    e9:f5:d5:ea:13:12:af:40:d9:01:e4:44:5f:67:55:
                    c9:61:8c:8a:bf:32:be:1d:4b:cf:05:e1:f2:85:21:
                    6d:d3:84:c4:01:a8:c4:96:9a:b2:4b:ac:26:4f:d5:
                    70:4e:de:39:1c:41:18:24:ad:83:16:d3:0f:c3:23:
                    4d:ed:71:31:79:9a:30:95:a8:5f:d3:fb:8d:89:e9:
                    8b:20:41:14:8f:c0:72:dc:e7:9a:43:3d:bd:af:4a:
                    a0:0e:78:92:8d:c8:ef:6f:08:24:e8:68:08:eb:21:
                    e9:35:5b:77:dc:78:a6:c4:cd:e2:d3:87:a8:e9:1e:
                    44:cc:89:a2:12:ce:c8:1b:9a:a3:f7:4a:fb:3c:9f:
                    25:58:83:19:dc:18:62:04:5f:39:38:ea:d7:6e:bb:
                    2c:f2:cb:34:bf:96:53:cb:d2:0a:2c:ad:c2:b1:49:
                    c5:14:65:d6:d0:42:2e:0f:74:7f:cf:39:fe:da:17:
                    96:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F4:D9:0E:8E:96:50:24:40:C4:6B:68:CF:0A:F8:D2:C6:17:98:CB
            X509v3 Authority Key Identifier:
                keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:34:36:6a:ee:ef:da:ce:d7:d5:e1:bc:45:90:1c:a9:02:3e:
         33:d1:1a:8c:9e:0c:8a:a4:02:e5:c0:5f:0e:1d:b7:6f:6f:d8:
         31:6d:a3:ba:84:11:8a:b0:e1:5c:7b:2a:c7:9e:c5:da:33:20:
         09:1d:39:21:fb:35:11:45:bd:ad:e8:f3:e8:3f:90:9c:f4:83:
         48:6a:1e:67:14:1a:34:11:6d:98:22:47:16:e1:06:31:96:bf:
         68:00:cc:fe:7f:51:f0:0a:e2:c3:84:84:20:c7:f4:1f:e9:7b:
         f3:8e:2c:55:f4:25:d3:42:66:18:c9:73:23:69:4f:ce:29:83:
         56:49:d0:0d:8f:59:8a:e6:41:51:39:21:59:61:22:54:13:e4:
         58:15:7d:13:d5:18:d0:d8:f9:6d:f4:01:78:04:e5:7f:24:ab:
         76:25:12:89:86:59:1c:fe:da:ac:0e:c3:73:20:86:98:56:2e:
         b8:2e:3e:13:1c:31:da:72:04:f9:24:09:67:9f:aa:a4:03:01:
         67:93:3f:98:7c:fb:ab:e0:08:7f:32:e9:f6:fc:ac:0b:ff:fa:
         51:c8:57:2e:54:24:10:f5:f3:9b:47:0f:b4:76:ca:09:8a:c9:
         f7:1f:75:9f:de:15:d5:87:3e:ed:13:85:3c:35:3b:46:bf:4f:
         ce:90:83:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org