Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa
File:                     3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa (raw, json)
Hash identifier:          sJlpSAXpnAOAavNq3mzp6a49Bmd3VaX73BDvee/Ceuc=
Subject key identifier:   D1:22:98:55:DA:9B:EF:D2:28:DA:A1:F9:74:2C:48:31:79:01:8C:2A
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       2E7611A61DE72762A9221F128D63E5319237266E
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa
Signing time:             Sat 20 Jan 2024 17:10:07 +0000
ROA not before:           Sat 20 Jan 2024 17:05:07 +0000
ROA not after:            Sat 18 Jan 2025 17:10:07 +0000
asID:                     149746
IP address blocks:        103.255.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 05:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:76:11:a6:1d:e7:27:62:a9:22:1f:12:8d:63:e5:31:92:37:26:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Jan 20 17:05:07 2024 GMT
            Not After : Jan 18 17:10:07 2025 GMT
        Subject: CN=D1229855DA9BEFD228DAA1F9742C483179018C2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2b:c3:6d:9c:23:9a:01:8d:d5:94:b3:98:bd:
                    d8:08:38:16:60:63:2d:e8:9d:00:73:f3:4e:37:e3:
                    b1:51:50:52:c1:6d:96:1b:76:e3:fd:07:8a:96:d5:
                    7d:0b:70:b1:cb:66:f7:76:37:e3:c7:6d:89:39:25:
                    b0:0d:f1:12:e9:7b:ce:92:6a:75:f1:99:6e:3a:5c:
                    27:da:dc:45:0d:f2:f5:75:dc:57:a6:07:f1:1d:e3:
                    da:7c:0c:e4:fc:79:15:99:f3:e4:74:5a:ae:e2:4b:
                    c8:0d:5e:11:57:6d:69:c4:a6:2d:94:35:a7:f8:bf:
                    32:50:ec:02:42:d7:78:c7:b1:32:04:8d:06:9b:07:
                    da:5c:92:44:ed:b3:dc:e0:c8:75:8f:2c:77:70:b6:
                    ff:dc:f4:e6:57:8c:d7:5a:c3:99:8f:ec:bc:8b:1f:
                    2a:c7:26:c2:df:24:bd:82:d9:0e:9b:60:19:d5:d7:
                    6c:b9:fd:65:cc:32:4b:06:2f:9e:29:ac:3b:2d:3f:
                    7f:86:76:27:8e:11:29:42:e1:94:d1:b0:3c:b0:b0:
                    52:47:5d:7c:08:10:6f:58:37:b9:6e:72:b7:59:58:
                    2c:bc:af:c8:d8:75:c6:ee:87:35:b6:c8:54:0c:17:
                    ee:a3:ef:7a:eb:5c:d2:18:75:49:c1:6b:36:fd:18:
                    84:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:22:98:55:DA:9B:EF:D2:28:DA:A1:F9:74:2C:48:31:79:01:8C:2A
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:f2:5e:91:3f:2b:d8:6e:6f:37:54:eb:f5:4c:3c:76:15:f0:
         bc:74:10:d0:f6:01:ea:91:55:ee:4a:1e:25:09:c0:35:12:7b:
         ba:59:c0:08:76:cd:a1:ae:84:0c:8c:38:32:ee:13:9f:9e:4a:
         38:6d:0b:e8:8c:42:22:fd:19:00:29:e8:e3:d2:f6:0c:ee:12:
         3a:b5:b5:f7:93:fb:70:33:81:dd:71:f9:e6:22:1f:7b:4a:02:
         f7:fc:eb:38:dd:53:7c:c4:5f:6c:94:cc:31:8b:c8:60:8d:9b:
         98:9e:40:e5:83:30:71:17:ca:19:c6:9a:95:3f:97:46:c4:9f:
         d9:7b:f9:c1:0d:ec:33:36:8d:09:2e:8a:5c:f6:3b:5e:40:de:
         fa:25:8f:a5:b0:5b:2c:84:71:8c:5a:ac:0b:25:b5:c9:2e:b2:
         16:8c:0d:a5:22:64:a2:c1:9b:80:cc:68:10:81:ad:c4:4a:04:
         6f:b9:30:af:03:86:f6:e4:f4:d7:d2:67:74:04:27:e0:95:47:
         04:e5:1d:5a:2f:b1:1c:ac:e4:83:dc:be:bf:ac:36:40:a0:f6:
         fe:94:ea:1f:48:7f:72:17:12:d6:25:1f:b6:3f:5f:af:0e:12:
         b2:c7:a6:c4:71:d0:99:92:bf:be:f3:41:e8:e7:ea:7a:6c:61:
         11:8d:a9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:40 2024 by rpki-client on console-fra.rpki-client.org