Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa
File:                     3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier:          3IyEShEeofzEZUvsp/9YLk7A3IOTw4ew58ZAJ0GoCYA=
Subject key identifier:   FF:4E:82:06:F1:49:E0:25:F8:EE:3E:2C:E5:E2:48:6A:2B:A9:BF:58
Certificate issuer:       /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD
Certificate serial:       310B066583D0C63B1DE187911A87DC45BD72A8EF
Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa
Signing time:             Mon 01 Jul 2024 01:04:08 +0000
ROA not before:           Mon 01 Jul 2024 00:59:08 +0000
ROA not after:            Mon 30 Jun 2025 01:04:08 +0000
asID:                     138131
IP address blocks:        103.115.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl
                          rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0b:06:65:83:d0:c6:3b:1d:e1:87:91:1a:87:dc:45:bd:72:a8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD
        Validity
            Not Before: Jul  1 00:59:08 2024 GMT
            Not After : Jun 30 01:04:08 2025 GMT
        Subject: CN=FF4E8206F149E025F8EE3E2CE5E2486A2BA9BF58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:16:d1:59:9e:a8:77:59:88:4f:0b:f6:c8:
                    60:46:ae:60:09:f1:12:23:89:61:4e:4b:eb:d1:9c:
                    55:e9:ad:e6:7f:b3:38:87:81:dc:b3:91:0e:f8:78:
                    fe:ba:d8:6d:b4:62:32:d8:ad:7f:04:27:3a:56:97:
                    7e:79:a4:1d:4b:d2:a4:4e:0e:df:18:69:fd:b9:d7:
                    21:75:9d:0c:5f:2d:b3:0b:e9:36:37:2b:50:a7:69:
                    01:c4:e9:f9:6e:0d:9d:79:0f:28:2a:d5:36:37:4d:
                    41:2d:07:7f:9d:6b:92:f0:72:ec:9c:58:64:82:67:
                    83:f1:57:d5:25:ef:22:b9:f6:c1:a3:3c:19:75:a1:
                    5b:5b:e3:0a:ae:a5:33:cb:a4:fa:49:70:84:50:8e:
                    2c:48:1d:31:2a:a6:f7:a4:0a:79:70:13:08:68:9f:
                    08:fb:53:13:49:e2:c5:f1:1a:46:af:b9:8d:bb:73:
                    33:b9:6c:56:c7:6b:5e:01:17:21:cc:ad:c5:cf:10:
                    ab:a9:93:f5:cd:6d:03:03:6f:37:69:84:c6:25:7a:
                    ee:2b:47:fe:e7:f5:ba:c1:33:e1:77:07:38:f8:80:
                    01:c4:c5:6d:c3:fe:28:57:de:13:57:32:94:64:39:
                    6e:17:07:21:cc:c0:16:c6:66:f5:d0:bb:6c:23:5d:
                    ef:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4E:82:06:F1:49:E0:25:F8:EE:3E:2C:E5:E2:48:6A:2B:A9:BF:58
            X509v3 Authority Key Identifier:
                keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:cc:8b:b5:96:a4:8b:d7:40:05:66:6e:4a:24:38:87:ee:97:
         c7:e6:27:bd:d9:5b:a6:1b:5b:d6:df:7a:4a:bb:6f:d4:f6:2b:
         aa:22:c4:b8:b1:72:3f:49:50:e5:ed:46:25:75:3e:6e:bc:1d:
         fd:8c:42:fe:74:a7:a2:6a:9c:19:e6:c0:e9:e1:b7:b4:9f:55:
         bc:a3:21:55:db:88:5f:98:cd:58:00:28:02:6e:6a:cb:c9:6d:
         ce:47:b3:da:5b:6a:37:cc:3f:40:91:80:3b:53:e3:59:65:17:
         73:3e:95:28:06:d4:7e:b3:0b:04:dc:4f:5e:57:d4:39:cb:eb:
         8f:3c:fe:28:a9:8e:12:4a:0f:49:92:8c:42:91:56:97:13:81:
         f8:16:01:e5:28:5c:3a:05:45:eb:a0:db:43:fa:78:61:ce:bf:
         a2:95:82:0b:39:8e:88:ed:94:f0:50:82:8d:0f:ad:b5:80:c8:
         95:38:9b:b3:26:2b:2d:1f:93:2a:35:cf:10:85:b3:ed:91:e0:
         b1:55:24:23:a6:b8:07:d3:65:f0:28:5d:8c:cc:d9:2a:95:7f:
         3f:70:e2:d5:60:3d:2e:a3:53:49:7f:37:2b:d1:ac:12:a7:dd:
         5e:f4:07:70:87:c6:88:8c:bc:b8:f9:c6:5d:88:17:0c:5b:bb:
         e3:08:d3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:47 2024 by rpki-client on console-ams.rpki-client.org