Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa
File:                     3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa (raw, json)
Hash identifier:          kRIFZio38exK3BHLmfgjR+p7MGDva6afV6/G2wqCEYs=
Subject key identifier:   8F:52:2C:06:C5:D5:3D:55:16:AB:4B:4D:44:E1:81:DC:EF:68:DA:ED
Certificate issuer:       /CN=1952B074D19D5AB562D7EE537AD3059EA097353B
Certificate serial:       6888CCBE7D9B935ABD1E40DAB296D7CA18DD299A
Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa
Signing time:             Thu 06 Jun 2024 03:00:01 +0000
ROA not before:           Thu 06 Jun 2024 02:55:01 +0000
ROA not after:            Thu 05 Jun 2025 03:00:01 +0000
asID:                     141675
IP address blocks:        103.158.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl
                          rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:88:cc:be:7d:9b:93:5a:bd:1e:40:da:b2:96:d7:ca:18:dd:29:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B
        Validity
            Not Before: Jun  6 02:55:01 2024 GMT
            Not After : Jun  5 03:00:01 2025 GMT
        Subject: CN=8F522C06C5D53D5516AB4B4D44E181DCEF68DAED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f1:11:de:79:af:30:79:50:a9:db:db:dc:3f:
                    d9:72:07:33:99:23:93:14:b6:ef:ec:fe:36:66:49:
                    9b:b2:32:01:55:15:5d:11:e2:bc:0e:22:80:27:94:
                    05:b1:d9:dd:0d:d5:3f:81:6a:4b:05:67:ac:6d:85:
                    81:4a:89:a2:59:09:56:19:dc:c7:67:1b:bc:9c:e3:
                    35:d0:34:0a:ad:3b:99:09:6f:ef:a3:5d:b6:6f:09:
                    ed:8d:2b:93:e8:fd:5f:3e:98:25:77:01:2e:c0:68:
                    87:ba:71:72:80:2a:a0:f5:c8:6b:44:24:be:9b:06:
                    f8:39:4c:da:57:03:2f:c9:75:ba:53:d8:eb:e2:c1:
                    fe:e4:fb:ef:5b:c5:17:8a:94:5b:01:39:0b:8c:4c:
                    a5:1c:ff:25:55:1b:a5:f6:3f:81:d9:29:ae:8b:05:
                    e8:ef:87:0e:57:a6:b9:da:69:11:26:5c:ee:ca:38:
                    a1:c9:f1:34:e2:6a:2d:e1:07:87:81:b7:68:59:e7:
                    5d:9b:57:2b:23:d9:a0:57:31:5f:71:42:d3:bc:37:
                    4e:0e:4a:99:92:19:04:f0:db:e3:e8:d9:f9:4c:51:
                    7b:c1:95:44:dd:f9:d2:02:af:6d:4e:3b:17:47:0b:
                    82:4c:51:0d:1e:13:e2:1f:7e:0f:0d:a1:f8:61:04:
                    52:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:52:2C:06:C5:D5:3D:55:16:AB:4B:4D:44:E1:81:DC:EF:68:DA:ED
            X509v3 Authority Key Identifier:
                keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:b1:4a:9e:50:a8:f3:d1:13:1f:47:b2:f4:6f:94:ca:54:45:
         28:dd:6f:3b:d7:37:b0:c1:29:1c:20:65:44:b0:ac:dc:7f:31:
         c9:9a:a6:34:da:97:dd:82:52:e8:ab:8a:4b:20:a3:01:ce:ce:
         4f:30:28:15:d7:66:15:46:6e:dd:1d:78:34:53:f1:f6:a7:ea:
         a5:11:9b:26:db:a3:c8:09:5d:db:39:57:53:9e:77:4f:cb:f5:
         e1:a2:88:aa:95:5f:97:7a:49:f6:ea:b3:03:67:16:21:53:a7:
         7a:76:35:82:16:fb:ec:2c:67:5f:7f:46:29:45:24:8a:b5:11:
         2c:51:b9:46:16:86:f9:f0:b2:2f:46:1e:18:32:27:04:4b:2f:
         8a:7b:ed:0e:10:5d:92:2b:e6:54:58:8f:5a:33:83:c5:d2:ee:
         06:78:6c:1c:f6:d7:df:d0:94:f8:80:1a:38:67:94:72:56:64:
         00:db:a7:b6:17:82:a4:8c:25:ab:27:cb:22:7d:4f:77:82:d3:
         66:1e:9d:4f:53:a0:99:c5:cd:4c:51:b1:ad:9b:0f:35:db:a5:
         83:04:1e:72:6b:7c:7c:a8:73:bc:04:92:72:61:4e:53:3b:4a:
         dd:39:0c:9f:01:aa:41:72:a5:50:aa:43:43:c3:34:64:aa:f3:
         d9:61:82:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:56 2024 by rpki-client on console-ams.rpki-client.org