Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa
File:                     3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (raw, json)
Hash identifier:          FBYny/sslKSZbHoouPdsEcYIGUBL0yo5IFHwerdjH6M=
Subject key identifier:   2D:F4:C4:E9:D7:30:96:55:01:3E:C0:C5:B4:E5:B3:9F:72:8B:61:B5
Certificate issuer:       /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96
Certificate serial:       0C82ED2BBFD6E653DF9D397DFD30C0A0878505EB
Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa
Signing time:             Fri 17 May 2024 15:00:00 +0000
ROA not before:           Fri 17 May 2024 14:55:00 +0000
ROA not after:            Fri 16 May 2025 15:00:00 +0000
asID:                     136075
IP address blocks:        103.84.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl
                          rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:82:ed:2b:bf:d6:e6:53:df:9d:39:7d:fd:30:c0:a0:87:85:05:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96
        Validity
            Not Before: May 17 14:55:00 2024 GMT
            Not After : May 16 15:00:00 2025 GMT
        Subject: CN=2DF4C4E9D7309655013EC0C5B4E5B39F728B61B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:fd:93:f0:4d:35:1e:b9:fe:74:17:17:29:
                    bf:ba:46:da:e2:75:5e:04:2c:bb:b9:23:4f:92:ab:
                    75:4d:26:d4:9b:f7:a9:04:e3:74:72:c1:61:9a:21:
                    75:40:05:47:91:87:88:3f:aa:32:17:0f:11:7e:11:
                    6c:d3:89:50:05:cf:a5:1b:15:61:6a:ce:3d:fd:12:
                    41:59:79:55:6c:60:b4:2c:fa:43:52:2d:e7:f4:b3:
                    16:88:e6:14:93:aa:2f:81:eb:cd:0a:03:b9:f3:95:
                    98:b2:c9:80:6c:8e:8d:a8:3c:73:67:cf:3d:c7:8a:
                    0b:5b:21:64:2a:3f:0d:53:cc:13:1a:bc:a1:58:6e:
                    38:c2:e0:c1:e5:bd:b5:4e:c6:15:ef:4c:2e:7e:bb:
                    86:62:f8:64:ad:3a:eb:13:7d:f7:61:28:d1:56:1a:
                    d4:4f:23:f9:04:b2:a1:db:4b:53:c3:dd:aa:3f:61:
                    f8:1f:f5:3e:91:5a:61:26:43:58:b3:31:f5:7c:2a:
                    31:8a:27:93:7f:72:a8:ab:8f:be:5b:ae:06:66:f3:
                    89:6d:d9:10:d4:c2:ae:2c:73:33:c1:ac:b6:c3:19:
                    62:b7:52:20:a7:03:4f:7a:e7:1a:f2:3c:3e:7e:64:
                    72:fc:b3:c0:28:1b:6b:76:e6:92:89:06:23:8b:dc:
                    f8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F4:C4:E9:D7:30:96:55:01:3E:C0:C5:B4:E5:B3:9F:72:8B:61:B5
            X509v3 Authority Key Identifier:
                keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:cd:e4:62:8b:53:9d:f1:e4:17:b1:c2:11:c2:db:c5:fa:df:
         d1:1e:bf:67:d4:30:c8:d2:04:7a:50:01:16:3a:b3:15:1b:f1:
         2e:e1:cd:bc:ae:3f:55:6d:c1:38:a1:0f:eb:09:d7:f3:cc:11:
         41:27:42:3f:6c:8e:a8:e7:a3:4a:fb:63:15:29:df:f5:7e:54:
         4c:2b:76:e0:1d:94:ee:0d:0d:5b:fb:1d:94:2e:f7:7e:a7:6e:
         7e:5d:d7:6f:67:6e:c6:de:28:af:7e:d2:d0:d5:44:84:58:af:
         3a:b2:3a:ae:d8:f0:c6:fd:2f:05:06:a7:0c:fd:07:b7:e7:27:
         a2:37:3b:bf:dc:d3:07:94:4c:d9:94:dd:a2:3c:30:b4:6e:76:
         0f:12:d1:48:f2:4c:ca:83:6c:d7:7f:95:6d:be:7c:d8:94:0f:
         34:aa:06:36:41:3b:34:74:d8:5d:ac:e8:46:33:6c:0a:04:88:
         f8:33:00:b6:ed:f0:8f:8b:c7:6f:a8:8f:47:0a:b0:6a:2f:26:
         6f:e6:57:fc:5e:f2:f7:db:04:52:06:29:67:e9:5d:7e:9e:b4:
         c6:be:06:c4:1b:45:e7:21:69:67:12:e0:45:cb:ab:c5:4d:95:
         06:71:86:e8:3a:a4:e8:48:52:55:ec:9e:c8:30:a1:28:3e:1f:
         d1:20:51:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org