Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa
File:                     3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (raw, json)
Hash identifier:          FmFK0HCMSLt7SyGKtb9ztPHc3ssDI+Z3SQRwQMgog5Q=
Subject key identifier:   41:54:85:3C:C3:8A:DD:79:BD:35:DC:7A:8F:08:C6:5A:21:45:84:37
Certificate issuer:       /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D
Certificate serial:       D59F1E87789053700E34C24FD29C4A1206EE25
Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa
Signing time:             Sat 06 Jul 2024 07:02:09 +0000
ROA not before:           Sat 06 Jul 2024 06:57:09 +0000
ROA not after:            Sat 05 Jul 2025 07:02:09 +0000
asID:                     137338
IP address blocks:        103.112.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl
                          rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d5:9f:1e:87:78:90:53:70:0e:34:c2:4f:d2:9c:4a:12:06:ee:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D
        Validity
            Not Before: Jul  6 06:57:09 2024 GMT
            Not After : Jul  5 07:02:09 2025 GMT
        Subject: CN=4154853CC38ADD79BD35DC7A8F08C65A21458437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:20:65:66:9f:48:a7:c1:42:0e:ff:ce:a4:
                    ea:01:f2:5e:30:0b:77:47:b6:b2:32:0b:0f:17:13:
                    57:f0:e4:60:33:ed:96:9b:8e:b2:9a:a1:d3:db:cb:
                    c9:88:8e:72:cd:c0:b9:d2:6f:61:26:de:54:6c:8a:
                    05:59:d5:26:8e:c8:dc:47:2b:b8:e8:3e:9c:57:52:
                    69:3c:3e:f8:2e:87:ca:ed:53:1c:92:2d:cf:ed:51:
                    af:91:19:c3:7f:3c:96:8b:47:af:06:4a:69:62:d2:
                    5c:a0:20:f7:86:18:0b:f0:13:54:71:51:3c:6a:b7:
                    0d:25:f7:7d:59:47:37:f4:e2:8c:6f:3b:e5:f2:14:
                    28:43:f4:28:f8:b3:cc:e1:47:0c:a7:46:1f:9c:46:
                    08:e9:d3:4a:76:1c:72:01:cb:e7:27:a0:5a:80:a4:
                    10:f0:ce:bf:d5:a4:e5:9a:e4:08:ca:24:2f:74:da:
                    96:5e:5b:99:7c:59:59:44:8a:6e:74:86:fe:4d:62:
                    96:33:00:9d:e9:e5:93:cc:c6:90:15:03:c1:65:2f:
                    c3:37:a2:90:49:85:c5:4d:cb:86:29:ed:57:ca:81:
                    2b:9d:b5:ca:e5:8f:43:20:d6:af:3f:f1:f1:d7:55:
                    dc:da:56:06:eb:b4:6b:18:1c:9a:9a:6c:77:1b:8c:
                    df:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:54:85:3C:C3:8A:DD:79:BD:35:DC:7A:8F:08:C6:5A:21:45:84:37
            X509v3 Authority Key Identifier:
                keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:8d:8b:8f:5e:ea:6e:7a:3f:0d:4e:a9:11:11:c7:8a:9b:65:
         ff:a1:86:7f:1e:9e:81:ca:81:43:87:b5:07:58:a4:d1:f3:b5:
         39:62:d7:b8:25:fb:dc:91:91:bb:e6:d2:78:1b:6f:21:07:49:
         89:81:9c:b3:3b:04:ea:f1:fd:dc:bf:ca:6d:57:d9:c5:c7:b9:
         2c:7d:b1:f0:95:17:98:f0:a7:b6:3d:cf:90:b1:ba:84:88:4d:
         a6:35:25:d8:c7:b3:96:51:49:af:29:cf:de:80:fa:ed:91:c0:
         20:72:5f:31:4c:ca:6c:a7:9a:76:c0:47:28:02:ce:9a:55:9d:
         6e:ad:f4:a8:c0:18:4d:53:d5:e0:56:d4:d2:d2:7a:71:15:69:
         19:9d:35:4a:87:f2:4c:63:c5:f0:be:12:16:06:f7:84:b8:55:
         b6:6a:04:67:c1:c6:8e:54:75:16:e6:3f:71:b0:8f:11:32:ef:
         3c:a1:1b:a1:f3:f9:54:ca:03:9c:ec:84:51:c8:df:63:8f:80:
         47:51:2f:32:db:51:f5:ef:f3:2c:a4:ba:a2:8b:5e:c1:44:b9:
         7d:15:c1:ec:95:d2:5b:58:dc:f9:5b:ba:e5:b2:1a:e0:84:27:
         5d:dd:8c:e2:26:30:32:0d:db:81:95:5e:8a:a3:75:d2:9e:ec:
         db:51:80:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:11 2024 by rpki-client on console-fra.rpki-client.org