Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa
File:                     3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (raw, json)
Hash identifier:          V3xcP0CBCfdHG8UdAqoCbngHSyYR4nrHlIYKhYWc4zA=
Subject key identifier:   EE:D1:C7:94:DD:2F:54:BB:27:F6:8D:36:ED:82:C0:FD:F7:6F:26:4B
Certificate issuer:       /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754
Certificate serial:       2C2C352AD184139F83C12591FC574EDE7DF669AB
Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa
Signing time:             Tue 27 Feb 2024 09:02:01 +0000
ROA not before:           Tue 27 Feb 2024 08:57:01 +0000
ROA not after:            Tue 25 Feb 2025 09:02:01 +0000
asID:                     136854
IP address blocks:        103.102.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl
                          rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:2c:35:2a:d1:84:13:9f:83:c1:25:91:fc:57:4e:de:7d:f6:69:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754
        Validity
            Not Before: Feb 27 08:57:01 2024 GMT
            Not After : Feb 25 09:02:01 2025 GMT
        Subject: CN=EED1C794DD2F54BB27F68D36ED82C0FDF76F264B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8c:11:21:e0:f0:29:74:ed:ad:9a:ae:78:d0:
                    3b:b5:0e:5e:f4:b9:4f:24:33:49:d8:51:e7:92:ec:
                    b4:38:ad:32:e8:16:0c:4c:7a:df:fc:d1:d5:36:99:
                    35:bb:dc:99:c3:d6:a8:d1:72:32:4d:ea:2c:4c:0f:
                    c4:4a:b0:37:bc:c5:5e:49:b8:6a:66:43:26:b5:a1:
                    44:78:f3:af:82:54:50:cf:40:37:6d:97:83:3e:b7:
                    51:8d:c9:18:fc:5f:25:f8:a5:be:c0:65:85:05:c5:
                    d6:eb:22:d8:b0:5d:c8:0f:41:38:1f:f7:a5:db:4a:
                    34:01:23:dc:c8:4d:37:5c:27:fd:ec:be:95:6b:f3:
                    1a:b7:0c:99:49:f0:e8:20:20:f7:84:ed:5b:ee:3b:
                    fd:31:62:20:3d:bb:cf:19:72:a0:19:f5:d0:a6:ad:
                    1e:4c:e0:94:a6:bc:7a:4f:63:65:2e:76:48:7c:7a:
                    97:b0:d6:0e:af:cd:73:98:66:11:09:f2:00:9e:01:
                    fa:20:aa:71:ad:25:8a:d2:6e:39:fd:da:de:93:b4:
                    53:fd:d6:cd:20:ee:fb:71:9d:9e:f7:6c:e8:98:3f:
                    32:36:b5:9d:55:27:80:c5:90:ef:4f:85:b0:03:d0:
                    a8:2e:b0:b7:7b:b6:6a:6f:da:0a:b6:ad:34:6f:85:
                    7f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D1:C7:94:DD:2F:54:BB:27:F6:8D:36:ED:82:C0:FD:F7:6F:26:4B
            X509v3 Authority Key Identifier:
                keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:10:58:94:72:a1:ce:04:d0:55:6b:15:62:3b:de:35:01:12:
         a9:e3:6b:ae:a5:6e:22:77:78:e8:67:5b:5d:ea:85:c6:8d:07:
         83:2e:4b:77:bb:20:09:49:ab:35:bc:bd:58:57:cd:4f:14:55:
         ae:b7:74:3e:66:73:3d:58:1a:45:f8:15:69:7b:22:c3:43:78:
         d4:51:bd:6f:71:5e:02:f9:dc:d9:df:33:ae:19:a0:17:a6:87:
         d6:c8:a6:fd:1e:82:f5:47:63:34:c1:0a:06:0d:b0:f3:bf:c5:
         a9:ff:9d:e5:a6:99:36:8c:50:89:13:3a:a0:02:6f:34:13:a8:
         10:bb:59:07:45:0c:e1:3b:85:8e:83:d2:db:71:6c:9a:a1:01:
         4c:ac:5a:ba:02:82:d7:5e:f0:63:39:c1:f2:a0:3c:e0:e0:ce:
         00:96:bc:51:e5:d2:88:36:e1:d4:83:a2:7c:9f:7e:5b:cc:2f:
         5e:6c:3c:06:5a:ca:56:81:90:d9:34:d1:da:48:36:ef:5f:6c:
         4d:39:44:58:eb:a8:36:96:6e:28:7e:cb:a1:c3:50:50:8c:65:
         a8:8c:0b:b5:b1:01:81:df:2a:5a:a6:78:3e:cf:49:66:d1:c7:
         8b:c2:76:a9:01:bc:aa:f5:11:29:fd:54:88:ff:ce:06:f7:ef:
         66:44:20:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 14:55:03 2024 by rpki-client on console-fra.rpki-client.org