Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa
File:                     3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (raw, json)
Hash identifier:          1U1XfXMV+Y1vhHa8I/iG1xcmFueOn6bt5utcIjplAa8=
Subject key identifier:   FA:B4:EA:1E:D2:20:4E:D3:43:7B:6B:04:52:0D:46:A7:F6:5F:3F:0F
Certificate issuer:       /CN=85B934D25B97AC3F22C3D45778109B50456E4722
Certificate serial:       2CBBF8BEE1A60B7577BEBAAF9FEF7B6DC9987B09
Authority key identifier: 85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa
Signing time:             Thu 08 Feb 2024 14:23:04 +0000
ROA not before:           Thu 08 Feb 2024 14:18:04 +0000
ROA not after:            Thu 06 Feb 2025 14:23:04 +0000
asID:                     151535
IP address blocks:        103.245.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl
                          rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:bb:f8:be:e1:a6:0b:75:77:be:ba:af:9f:ef:7b:6d:c9:98:7b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85B934D25B97AC3F22C3D45778109B50456E4722
        Validity
            Not Before: Feb  8 14:18:04 2024 GMT
            Not After : Feb  6 14:23:04 2025 GMT
        Subject: CN=FAB4EA1ED2204ED3437B6B04520D46A7F65F3F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ee:52:9e:fd:47:c8:d7:2f:a1:4a:f5:24:1a:
                    85:8e:48:59:03:b4:04:b6:cc:6a:b6:76:80:b3:1a:
                    7c:ef:07:29:26:7f:70:4a:bf:43:43:1d:69:fe:f0:
                    e4:2d:f3:c5:69:35:b0:d2:29:6e:18:c8:cf:fa:72:
                    21:70:a4:ef:b8:b2:72:a7:8a:d3:47:a9:7a:55:5a:
                    d2:bd:82:75:6c:34:02:a2:bf:1a:8a:bf:e2:eb:ef:
                    a5:91:1f:00:e0:86:6c:a0:8c:0f:09:dd:cb:55:ed:
                    e4:ee:20:17:77:d9:24:ce:a7:46:01:55:1d:81:d3:
                    4b:64:7c:43:d8:70:6c:d2:33:d9:3f:80:b6:10:a0:
                    20:b1:67:8b:5e:8b:78:e0:e6:f7:43:16:fd:c6:19:
                    42:8a:37:73:4a:12:4d:36:8f:75:99:30:ce:17:ee:
                    0b:8e:ab:6e:29:f4:5c:33:4a:12:f3:4d:1f:c2:3a:
                    70:a7:c8:ee:83:c8:de:64:88:d2:51:b8:cd:67:bf:
                    ef:67:7b:7a:73:0a:31:b1:d3:a3:a5:4c:05:86:a9:
                    c3:68:8a:d7:91:f1:a9:f1:b4:af:4b:10:e7:7f:d4:
                    8c:6c:3c:f5:d6:2e:19:a5:99:f5:3f:ca:ae:90:87:
                    de:6c:b3:b1:11:e6:92:f2:99:6a:90:e5:15:c3:ec:
                    71:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B4:EA:1E:D2:20:4E:D3:43:7B:6B:04:52:0D:46:A7:F6:5F:3F:0F
            X509v3 Authority Key Identifier:
                keyid:85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:fa:24:5b:bf:a8:4e:2f:28:15:4d:f8:1f:83:d4:34:68:a0:
         67:68:b4:22:07:4a:2d:ed:28:ab:21:1d:bd:a4:2f:f7:ff:ac:
         5e:eb:e8:08:75:61:78:5f:86:0b:e9:52:7d:6e:fa:1a:e8:51:
         ee:26:41:27:2e:0f:c5:42:78:f9:45:c7:e7:e7:ef:59:f4:11:
         3a:01:d8:b4:9f:62:39:3b:ce:7d:95:ca:b5:ce:da:22:20:af:
         8b:51:6c:d2:30:4a:c2:7b:27:07:42:9c:2c:1e:08:ac:eb:2e:
         65:b6:9a:a5:19:66:e1:f3:65:07:95:62:b6:79:88:f3:54:51:
         bd:c8:ee:19:2c:d9:84:a0:ba:98:05:12:fb:f3:bc:e6:03:c4:
         b9:71:4e:9f:1c:f5:a8:85:d8:04:2b:22:79:b6:99:c0:1b:5c:
         f9:75:e5:9c:c7:40:f9:7e:78:e2:95:87:aa:78:3a:9f:1a:97:
         6d:2f:34:b4:48:e0:5c:52:3c:57:03:fe:2a:e4:8c:88:ba:07:
         01:31:0b:78:1b:07:a6:b3:22:d5:d3:aa:d3:fd:7b:22:c6:de:
         d1:82:de:a7:83:f1:05:b6:ef:84:92:9b:07:da:9f:8a:25:25:
         db:54:0d:4d:1b:35:a7:00:04:8a:2f:60:91:d1:bb:00:54:78:
         9b:17:59:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org