Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa
File:                     3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (raw, json)
Hash identifier:          5Hz3DyrO7wQwpXeRffEbosBkCXLVJDhMxl5XYFRTw18=
Subject key identifier:   58:93:11:15:13:A5:FF:2D:F2:8F:6D:F0:8B:F3:79:35:6A:69:12:72
Certificate issuer:       /CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
Certificate serial:       039F01ECBA6F3AAA8943328DD30B2C38B4FAF3AD
Authority key identifier: 0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa
Signing time:             Wed 16 Oct 2024 11:00:00 +0000
ROA not before:           Wed 16 Oct 2024 10:55:00 +0000
ROA not after:            Wed 15 Oct 2025 11:00:00 +0000
asID:                     139433
IP address blocks:        103.144.128.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl
                          rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9f:01:ec:ba:6f:3a:aa:89:43:32:8d:d3:0b:2c:38:b4:fa:f3:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
        Validity
            Not Before: Oct 16 10:55:00 2024 GMT
            Not After : Oct 15 11:00:00 2025 GMT
        Subject: CN=5893111513A5FF2DF28F6DF08BF379356A691272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:fa:6f:01:65:4a:b6:fa:e1:e1:3d:d6:dc:5a:
                    1d:b3:c7:f7:de:97:e9:b3:5d:ba:6c:77:8a:ee:20:
                    5c:be:b5:25:30:e6:bc:19:61:cc:70:af:d6:4e:d1:
                    b8:cf:13:0f:ac:24:ed:f4:08:85:6e:58:a4:a0:86:
                    e5:45:bd:d6:58:2e:cd:8f:12:1e:13:df:c1:d6:c5:
                    ce:05:f7:ba:4b:f5:74:25:22:30:0d:1e:34:c6:32:
                    3e:9a:df:aa:bc:b2:3b:4d:b4:db:6d:c1:ba:14:7b:
                    5a:40:e5:b9:03:66:c1:6b:cb:da:f7:3d:cb:76:04:
                    93:7d:fe:90:65:d9:8a:5a:c1:e4:f9:da:46:64:8c:
                    0e:83:81:86:84:ee:a8:87:90:ab:13:28:10:5c:1f:
                    8e:0e:cf:b6:ab:4a:ff:e5:2e:34:44:b3:a3:a4:65:
                    27:53:61:64:59:2c:01:3c:f0:ff:e2:5b:a6:93:07:
                    48:7e:d0:a1:bb:b4:a1:27:8a:5a:26:c0:36:f6:82:
                    a1:62:6b:36:64:34:cc:be:aa:47:74:e4:4a:a1:a8:
                    0c:25:fa:40:1e:ad:3a:71:ca:a6:82:e3:f2:b1:8a:
                    bf:5d:1c:86:f7:52:17:31:26:64:49:87:41:17:28:
                    2e:89:83:17:5c:33:7a:6e:d7:1b:c8:b5:32:f9:b8:
                    49:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:93:11:15:13:A5:FF:2D:F2:8F:6D:F0:8B:F3:79:35:6A:69:12:72
            X509v3 Authority Key Identifier:
                keyid:0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:88:93:70:43:b3:97:71:a4:3d:80:b3:75:0e:5e:d4:e6:63:
         36:ab:73:82:a5:f9:01:d3:ad:99:12:f7:ac:71:95:8d:d1:9d:
         7f:e8:93:d2:bd:6b:cb:c8:39:fb:b8:e9:5c:ae:2d:ea:9f:2a:
         3a:fa:7e:2e:f0:ff:24:dc:7c:3b:97:4e:d1:0b:29:04:eb:bf:
         64:b9:16:fa:3f:63:a3:bb:31:5e:12:90:9d:41:0b:7d:eb:0e:
         4a:d5:66:f1:64:ec:fc:7c:04:40:91:65:12:ee:69:9f:e2:d8:
         23:e8:4d:29:3e:7a:3f:d3:e5:02:ae:60:aa:9c:42:2d:d4:24:
         be:89:56:ae:1f:32:70:ad:53:a1:27:24:be:2f:e2:8c:97:d7:
         f7:5f:f4:3b:03:ce:5f:3b:42:c0:ba:73:60:77:27:f7:62:be:
         6a:73:fa:ac:e0:8e:b0:30:1b:f0:9f:98:58:79:9f:03:5f:59:
         5f:8e:2e:20:1c:ca:73:61:92:9d:29:28:ee:fb:1b:fd:3c:a1:
         71:82:22:6f:b4:a3:34:86:32:35:68:5f:44:86:1f:a2:db:d9:
         98:65:47:e9:69:90:e5:67:ef:0c:e4:26:7e:69:09:6a:67:33:
         c7:78:33:fb:6c:06:7c:f9:29:dc:53:80:ca:05:5b:0d:bb:93:
         10:48:5e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:26:45 2024 by rpki-client on console-fra.rpki-client.org