Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/3130332e3133302e352e302f32342d3234203d3e20313338303933.roa
File:                     3130332e3133302e352e302f32342d3234203d3e20313338303933.roa (raw, json)
Hash identifier:          gKmQTrWRo0dtB24OlQ8EekvtiPKnerSJt10iLt7klno=
Subject key identifier:   D9:F3:90:27:F4:BA:60:B2:BE:FC:98:B3:15:A8:56:0D:B1:06:B9:A1
Certificate issuer:       /CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A
Certificate serial:       51753FFEC8CFA5237357B9F987FFC655701CA2A4
Authority key identifier: 55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/3130332e3133302e352e302f32342d3234203d3e20313338303933.roa
Signing time:             Fri 19 Jul 2024 14:00:02 +0000
ROA not before:           Fri 19 Jul 2024 13:55:02 +0000
ROA not after:            Fri 18 Jul 2025 14:00:02 +0000
asID:                     138093
IP address blocks:        103.130.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl
                          rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:75:3f:fe:c8:cf:a5:23:73:57:b9:f9:87:ff:c6:55:70:1c:a2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A
        Validity
            Not Before: Jul 19 13:55:02 2024 GMT
            Not After : Jul 18 14:00:02 2025 GMT
        Subject: CN=D9F39027F4BA60B2BEFC98B315A8560DB106B9A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c3:b0:57:3d:1f:ac:53:70:93:73:5b:37:01:
                    d1:08:a4:00:5e:d9:bc:9d:f8:3f:3f:04:f3:21:9f:
                    f3:f8:71:ae:25:5d:2c:a4:05:ac:4a:33:d1:96:2c:
                    17:4f:da:f7:12:cf:09:9d:57:9e:cf:01:67:ff:2e:
                    88:3a:30:d3:d6:1c:6e:07:ae:c6:c0:a8:ca:1e:53:
                    be:48:aa:0d:e2:a1:6a:41:ee:7a:44:4f:d3:a8:f1:
                    13:c6:f4:a8:24:c4:a1:b0:02:f4:ac:b8:8f:1e:c2:
                    41:ad:37:68:91:18:5f:41:87:01:63:70:56:a4:b3:
                    c5:86:e1:33:3f:36:ab:8c:99:5a:91:7d:e4:12:6c:
                    cd:0b:bf:54:11:3c:3a:e3:e3:af:52:96:b6:19:5f:
                    da:5e:a3:5e:f6:75:68:1b:dc:e3:49:a0:57:45:af:
                    65:98:f3:31:0d:d3:5d:15:3b:3c:0f:a7:87:95:81:
                    64:6a:55:c5:c2:7f:26:d7:b8:6c:2d:7b:f4:a9:26:
                    1e:93:f8:21:03:fd:78:de:f6:66:65:e8:48:da:e6:
                    d1:b4:92:d4:05:67:47:6e:62:b4:24:09:ca:f2:f9:
                    85:2d:d9:b2:12:fd:27:6a:97:d6:d3:9d:30:2a:97:
                    80:a0:f2:50:09:0a:33:62:92:a3:67:4f:7a:03:ee:
                    e7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F3:90:27:F4:BA:60:B2:BE:FC:98:B3:15:A8:56:0D:B1:06:B9:A1
            X509v3 Authority Key Identifier:
                keyid:55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/3130332e3133302e352e302f32342d3234203d3e20313338303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:00:34:1e:0c:0f:9c:e6:44:8e:7f:48:f9:34:8f:7d:82:00:
         1f:16:bf:52:b7:f8:75:ad:a3:4a:fe:54:2f:7d:ef:a9:d7:88:
         f7:ff:82:ce:e0:fb:ce:73:1e:fe:be:ca:43:bc:ef:45:12:cb:
         80:c9:80:e5:a8:47:ac:df:ee:20:b1:88:f3:d2:14:a9:1e:c6:
         7d:c1:8a:98:8d:23:3b:f0:c3:70:f4:87:f7:9b:e4:7a:0a:3d:
         bc:f3:14:f5:c6:1c:3f:0b:78:40:52:19:f3:ab:96:56:4e:5f:
         97:cc:16:87:97:6b:bf:05:88:f3:d9:5d:ff:ea:d6:e2:1c:9d:
         1f:99:08:f2:5c:0f:95:50:e6:94:c9:f0:f5:7b:73:7e:19:8b:
         56:3e:e0:36:fb:f7:65:e3:d6:46:76:63:d1:3f:d2:56:bf:31:
         6d:30:67:20:c1:c8:e7:dd:bb:29:30:28:c9:fe:f4:b9:f6:08:
         3d:96:fa:3c:b3:9e:75:6a:60:58:c3:d5:62:af:2b:a3:40:ae:
         21:16:3f:4b:3e:2c:26:bf:8a:3a:38:86:c7:55:f7:49:26:38:
         66:31:31:0b:93:d9:bf:ec:f8:3d:ac:a3:03:b9:ad:cc:d1:a8:
         f3:8e:9a:da:1f:e0:2f:a2:f3:f7:ea:0a:0a:17:98:63:75:95:
         96:38:c8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org