Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa
File:                     3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (raw, json)
Hash identifier:          qNFGBIdi3lNB88CIUJDB9tXooFY458hRaINWvmteVv0=
Subject key identifier:   17:23:65:B0:11:71:0F:BD:01:5C:77:19:6F:65:E7:AD:A8:04:9C:1E
Certificate issuer:       /CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D
Certificate serial:       14E7448884B90CE3AC12F212C2CDBAF03A2A621D
Authority key identifier: 0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa
Signing time:             Wed 07 Feb 2024 04:01:40 +0000
ROA not before:           Wed 07 Feb 2024 03:56:40 +0000
ROA not after:            Wed 05 Feb 2025 04:01:40 +0000
asID:                     150548
IP address blocks:        103.126.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl
                          rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e7:44:88:84:b9:0c:e3:ac:12:f2:12:c2:cd:ba:f0:3a:2a:62:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D
        Validity
            Not Before: Feb  7 03:56:40 2024 GMT
            Not After : Feb  5 04:01:40 2025 GMT
        Subject: CN=172365B011710FBD015C77196F65E7ADA8049C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:b3:d3:78:91:03:9c:7a:a8:39:7e:d7:d9:
                    ff:34:58:32:4e:df:eb:12:2d:95:e4:14:1e:2f:0e:
                    3a:38:b2:d8:84:ad:87:47:82:26:10:df:8e:d1:a0:
                    fa:03:0e:6f:97:2b:c4:59:06:fc:03:b1:56:75:78:
                    25:df:e9:15:bd:9e:c2:b4:ad:6b:c6:61:47:5b:d5:
                    a6:48:75:aa:7c:16:9c:82:04:5c:25:a6:29:b1:2f:
                    b2:52:c5:5a:ae:11:18:5d:2e:50:e3:58:ce:3a:00:
                    2f:ab:f0:d2:3b:e9:de:f2:d5:e4:4a:13:b5:48:64:
                    bc:d5:45:6f:96:d5:81:19:34:69:7e:c7:26:9e:30:
                    3c:ee:81:0a:2c:fa:fb:fc:53:f7:c9:83:97:5f:8c:
                    f5:c8:b0:dc:21:0c:b5:f9:1b:4a:e9:57:c4:ad:29:
                    f1:97:2f:af:35:bb:bd:f9:6f:e2:8b:7e:ee:be:ac:
                    e3:a7:18:74:99:f2:78:7d:07:52:79:21:bf:95:3b:
                    b4:0a:fe:0b:dc:85:51:e2:27:90:f2:84:d2:52:e4:
                    18:9c:6a:0b:43:0e:3d:c4:ef:c3:c1:90:07:3d:5b:
                    56:b9:ce:a6:0b:de:50:78:9e:2f:f4:06:2c:bf:67:
                    72:c0:44:8a:43:8a:b6:77:98:14:8d:cf:78:19:25:
                    5c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:23:65:B0:11:71:0F:BD:01:5C:77:19:6F:65:E7:AD:A8:04:9C:1E
            X509v3 Authority Key Identifier:
                keyid:0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:6a:36:5a:fc:d3:28:40:ce:b2:68:e5:53:24:73:fc:35:3c:
         32:da:82:59:f9:f7:c1:1f:84:89:56:74:ad:66:90:93:1e:07:
         96:7d:f8:1d:32:20:b3:dc:38:22:a8:f6:41:1c:60:c1:17:4a:
         70:eb:96:52:84:42:19:69:af:54:4d:23:68:86:5c:66:0d:01:
         c0:5e:cb:dc:52:aa:ff:9b:0a:13:30:c5:38:1e:92:12:e3:b1:
         ba:15:d8:0d:c2:78:20:9a:93:1b:4c:f4:71:8d:6f:b2:78:b4:
         88:9b:6b:cc:21:9d:70:36:08:5b:ca:fa:32:7a:bf:5a:c7:be:
         2d:95:ee:31:04:4c:b4:3c:b1:16:b3:c0:1c:e5:2f:75:ff:3c:
         65:ae:1f:9e:d4:0b:94:63:17:36:93:08:3c:64:86:49:97:40:
         24:1b:84:95:6c:88:d3:9c:84:ea:2b:ef:b1:91:fa:4d:d9:37:
         18:52:3a:a6:6c:bd:1f:32:2d:e6:9b:2d:82:33:03:53:f6:75:
         0d:e7:fd:00:55:43:94:48:a4:5d:36:71:2b:41:05:f3:74:fe:
         bb:99:a5:87:5b:00:24:1e:67:95:96:62:a4:2d:c9:f6:de:11:
         2c:a1:30:bf:c0:b5:12:d0:b8:9a:13:31:49:5c:f6:6a:5d:70:
         f4:50:94:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:03 2024 by rpki-client on console-fra.rpki-client.org