Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa
File:                     3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          4Bz91Y46cB6DjnGy2o5S/tdFCSTpUbC000p7355mxj4=
Subject key identifier:   B5:2E:7D:90:CE:22:5C:43:11:EC:0D:84:53:04:36:8F:A8:09:C7:E1
Certificate issuer:       /CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D
Certificate serial:       748F924FD05DF12D7F0169F99634F267599A00D2
Authority key identifier: 8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa
Signing time:             Fri 31 May 2024 01:00:02 +0000
ROA not before:           Fri 31 May 2024 00:55:02 +0000
ROA not after:            Fri 30 May 2025 01:00:02 +0000
asID:                     45305
IP address blocks:        103.190.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl
                          rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:8f:92:4f:d0:5d:f1:2d:7f:01:69:f9:96:34:f2:67:59:9a:00:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D
        Validity
            Not Before: May 31 00:55:02 2024 GMT
            Not After : May 30 01:00:02 2025 GMT
        Subject: CN=B52E7D90CE225C4311EC0D845304368FA809C7E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:73:d7:7a:a2:67:b6:7a:33:c1:8e:2c:ff:00:
                    ac:ec:c6:79:92:d7:d3:63:fe:10:a7:99:76:9d:36:
                    cf:cb:af:e7:0e:10:d7:02:6c:5e:e3:9d:33:05:71:
                    66:82:5f:07:1c:5f:23:6b:0f:68:4d:ab:2a:2e:d2:
                    c4:8b:f6:52:39:9e:c8:30:34:c5:c0:78:8d:c7:d9:
                    9d:9e:d9:54:64:fd:11:ee:67:d0:d2:e9:ed:2a:b5:
                    28:89:cb:7a:27:ce:5d:76:35:f4:c9:8a:a5:6c:99:
                    29:e3:b3:06:a1:d2:d5:e8:23:9f:86:c1:11:48:71:
                    c4:71:39:22:64:a6:ea:18:5a:83:20:fc:e8:15:f8:
                    59:09:31:4a:a1:7b:04:18:25:c4:f7:ee:ee:d2:74:
                    d0:e1:34:62:cd:8d:a2:76:a2:d5:7a:40:69:d5:4c:
                    0f:e6:1b:46:e4:34:6b:1e:27:21:a9:94:ea:62:8e:
                    3b:77:96:ee:8a:3b:34:bb:56:a1:1e:2f:7a:8c:80:
                    59:c9:90:c8:4a:93:64:89:5e:d6:4a:c2:cc:a2:8c:
                    a5:4c:b4:37:2d:01:0d:e9:3d:e6:26:13:18:63:06:
                    d8:c2:81:b4:45:1b:1a:68:61:5c:60:f5:98:09:ed:
                    6d:46:ef:c4:f5:44:3a:0e:6c:b4:18:14:3d:07:59:
                    39:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2E:7D:90:CE:22:5C:43:11:EC:0D:84:53:04:36:8F:A8:09:C7:E1
            X509v3 Authority Key Identifier:
                keyid:8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:f4:79:35:6d:96:c3:35:d8:2b:58:08:a7:cf:44:7c:b9:f6:
         0f:9a:06:a8:bf:51:ec:5b:f5:0c:c7:ab:02:7e:be:17:14:7f:
         d8:32:2a:b3:2b:6f:81:91:8c:ee:ad:64:c1:32:3c:a3:d1:73:
         99:db:8d:ca:96:fa:09:a4:0a:64:c2:fa:f6:b5:ae:7e:a8:e2:
         56:bd:69:e9:b7:47:10:a4:07:51:40:6a:bf:67:8e:5f:35:8e:
         72:27:e0:1f:41:a6:ba:c4:f2:e8:92:7b:da:6b:36:bb:b3:6a:
         27:93:21:4c:44:13:78:8e:e3:86:15:5d:f9:a1:35:9a:78:11:
         f0:86:71:63:2d:78:de:10:32:2e:10:86:b5:d0:84:bf:47:02:
         87:67:bb:a9:4f:29:a8:49:e1:55:cb:2c:94:5d:a6:7f:7f:41:
         5b:51:7b:13:de:79:b2:10:5f:d2:9e:36:e7:d2:69:7d:d3:49:
         5e:72:a9:4c:e8:66:b9:88:0b:17:ca:29:96:ef:af:dd:45:9d:
         9d:99:27:a5:f9:a9:e3:d4:80:80:d1:8d:d5:4f:89:3a:38:ec:
         60:2a:ef:09:64:6e:7c:81:71:a6:ed:f4:f6:d0:f2:3c:35:48:
         8d:8e:5b:c7:6f:4c:61:cd:60:fc:a7:bb:1b:46:1f:2f:ec:c7:
         6d:55:90:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:20 2024 by rpki-client on console-fra.rpki-client.org