Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa
File:                     3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (raw, json)
Hash identifier:          wkWxkGCvb2rTempfxb5c6tVP5YHeTQgrEi6mm/Sfr3A=
Subject key identifier:   3F:D0:11:D3:F5:92:C2:BD:86:37:30:DB:F1:8B:AF:BC:2E:10:9B:93
Certificate issuer:       /CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717
Certificate serial:       72CC2E79B701C1927D308ECDD6374109B32745B7
Authority key identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa
Signing time:             Thu 09 May 2024 14:35:53 +0000
ROA not before:           Thu 09 May 2024 14:30:53 +0000
ROA not after:            Thu 08 May 2025 14:35:53 +0000
asID:                     134639
IP address blocks:        103.205.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl
                          rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:cc:2e:79:b7:01:c1:92:7d:30:8e:cd:d6:37:41:09:b3:27:45:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717
        Validity
            Not Before: May  9 14:30:53 2024 GMT
            Not After : May  8 14:35:53 2025 GMT
        Subject: CN=3FD011D3F592C2BD863730DBF18BAFBC2E109B93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b7:95:4f:da:5b:38:07:60:e7:f9:38:8c:13:
                    34:56:3d:bf:bd:dd:d1:e4:76:f1:b8:81:13:84:42:
                    93:b0:49:af:21:05:6d:0c:39:ff:94:e5:96:bf:53:
                    cc:56:58:ac:91:97:94:60:54:82:eb:8a:9e:b6:4d:
                    e2:0b:d3:f6:16:8e:97:26:40:92:d7:b6:64:0e:b0:
                    48:4b:ce:b6:4c:29:64:f3:f0:e9:94:06:3d:77:3a:
                    96:00:72:75:9b:0c:e4:ee:58:3e:40:d5:8e:85:db:
                    07:45:bd:47:07:fd:27:69:65:9e:7d:af:ba:c6:e6:
                    b1:48:8d:94:69:32:72:01:fe:94:e1:dc:fb:7f:cb:
                    6e:4b:f4:dc:e1:48:92:bc:ba:b3:71:54:e3:13:5a:
                    5b:50:90:4c:19:d4:95:fa:a2:82:65:04:d1:13:48:
                    fd:cd:29:3a:cc:8a:28:26:4c:8d:2d:b4:2e:c9:6c:
                    fc:be:1c:a9:ab:6b:94:4f:a7:af:b3:c4:7b:e3:0f:
                    c8:e6:54:8d:8e:59:71:37:30:e4:86:54:e2:b7:76:
                    59:f8:d4:d5:9e:77:d2:3a:c9:f6:cc:f0:b2:06:d9:
                    f5:22:c7:1a:9f:7f:59:d8:a6:b9:22:df:f8:68:26:
                    fe:9e:62:9c:0a:1b:11:ee:4b:06:b2:fd:ab:85:0b:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D0:11:D3:F5:92:C2:BD:86:37:30:DB:F1:8B:AF:BC:2E:10:9B:93
            X509v3 Authority Key Identifier:
                keyid:15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:e6:c8:75:d1:cb:4c:07:63:69:63:f2:01:8e:6d:a1:2e:16:
         d2:e4:3e:82:29:a7:ea:b4:92:f1:88:e9:9a:75:02:76:9f:7e:
         47:13:54:51:31:5f:8e:65:06:64:10:18:40:45:7c:f5:4d:40:
         7a:8e:8d:12:59:0d:98:91:68:4e:ae:50:4e:25:21:a5:b6:5e:
         1d:86:15:dd:cf:48:3e:90:f5:11:f5:cf:e4:c5:9f:c8:3c:58:
         e9:ba:33:28:c2:19:44:d1:c9:c9:99:6c:f5:ce:e8:2b:4e:bc:
         46:3e:fb:75:d2:86:cf:5e:c3:3d:f6:69:52:5b:07:ea:2b:60:
         15:75:e7:bd:8c:a0:6b:61:e2:56:8d:f6:84:7f:63:4f:91:8f:
         5f:8c:e9:69:02:5a:c1:34:a4:1e:cf:05:96:e2:08:50:c4:c3:
         26:29:c4:bf:d5:97:0c:de:97:a9:ce:55:a6:d5:26:1c:aa:24:
         70:da:b9:e2:95:dd:3d:14:22:85:a9:40:25:da:a1:de:d5:62:
         f5:6d:67:b4:d1:2e:96:86:44:49:c5:07:c6:ce:e2:9e:6d:29:
         34:40:f8:fb:37:48:4b:cd:58:7d:78:c6:4a:af:88:fb:d9:51:
         bb:50:f9:9e:da:09:9d:03:dc:86:ef:a8:b1:c4:16:c6:1c:12:
         95:f6:a1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:20:19 2024 by rpki-client on console-ams.rpki-client.org