Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa
File:                     3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (raw, json)
Hash identifier:          Ai7D3RvDxYX2FQX7n3jl8PVIm916gH4mXne2eUMtLic=
Subject key identifier:   5F:25:26:60:16:49:4D:1E:41:E7:19:66:1C:B3:5E:8E:D5:FA:AB:BD
Certificate issuer:       /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0
Certificate serial:       41D194EBA43E22323A956CBB54ED7D174738D5EC
Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa
Signing time:             Mon 01 Jul 2024 01:04:40 +0000
ROA not before:           Mon 01 Jul 2024 00:59:40 +0000
ROA not after:            Mon 30 Jun 2025 01:04:40 +0000
asID:                     139378
IP address blocks:        103.142.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl
                          rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d1:94:eb:a4:3e:22:32:3a:95:6c:bb:54:ed:7d:17:47:38:d5:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0
        Validity
            Not Before: Jul  1 00:59:40 2024 GMT
            Not After : Jun 30 01:04:40 2025 GMT
        Subject: CN=5F25266016494D1E41E719661CB35E8ED5FAABBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:06:7b:ce:82:05:cb:af:98:fa:41:b2:df:65:
                    9f:06:f1:46:5f:c2:c8:2b:10:f4:bf:02:18:c8:ab:
                    d9:bc:96:45:f5:b7:4a:4d:98:6d:48:7f:74:68:86:
                    a1:5f:e4:05:73:df:2c:c4:bb:f3:b1:f9:8d:7f:f2:
                    0e:e0:12:af:4c:fa:70:33:85:f1:62:6a:a7:fa:b0:
                    d0:92:a7:b8:d1:b0:66:7a:fd:1b:d4:c5:84:78:90:
                    c6:09:a5:ee:0c:c8:94:f4:74:a3:27:cb:9f:0e:35:
                    ed:ff:a1:ac:44:41:cb:ad:22:49:84:9c:94:a0:b2:
                    fb:e7:14:ce:ef:41:89:c4:e7:d6:fb:ff:d5:78:bd:
                    87:9d:14:ef:78:7a:5f:72:3c:b8:71:fc:22:d7:f7:
                    8f:72:46:8e:ac:eb:55:59:d3:65:0a:8f:18:c6:ac:
                    c0:bc:ab:4d:ff:cd:c7:2c:4b:cd:8b:94:e5:f1:61:
                    7b:48:4c:7b:48:38:fe:4e:a3:a3:2f:00:1b:b5:b6:
                    06:67:ba:83:0a:ac:26:ad:65:36:12:f8:8b:b4:b1:
                    b7:e8:ab:74:c0:b8:7a:09:b7:6a:1f:aa:d4:20:e7:
                    53:01:06:16:53:61:7e:a2:da:89:b5:c4:ce:8e:e3:
                    bf:03:5a:51:c7:85:de:e9:bb:81:78:81:ad:b9:b7:
                    51:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:25:26:60:16:49:4D:1E:41:E7:19:66:1C:B3:5E:8E:D5:FA:AB:BD
            X509v3 Authority Key Identifier:
                keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:b1:5e:81:45:73:d0:4e:db:cd:53:dc:41:2f:12:37:25:bf:
         ad:04:1a:43:29:77:23:6e:89:92:ff:00:bf:9a:39:f2:ff:e2:
         a5:74:e3:2b:55:43:d2:f3:be:9b:6f:d4:73:93:4d:f1:54:5b:
         cc:f2:ce:ab:1d:6a:56:c9:da:ac:dd:06:74:e6:5c:b2:e4:89:
         17:b9:55:d4:23:85:e3:a0:66:5d:d6:49:84:cb:97:f7:54:ee:
         c4:ea:ee:7f:1c:5a:20:75:ac:64:8a:e5:27:5c:be:97:82:2b:
         82:7c:e8:a1:13:0a:b4:ab:74:bd:5e:77:0c:5a:ce:36:0d:65:
         da:3d:d0:23:a2:1a:e9:10:3b:5a:b0:b7:17:d5:24:90:c5:cc:
         dd:bb:12:98:7c:1c:c2:fc:03:8c:bf:66:88:6a:8e:5a:83:c5:
         12:22:41:46:ee:ce:8f:24:23:e9:0b:17:f0:96:ef:54:b0:eb:
         a0:c4:64:aa:cf:7e:9b:0c:fb:9c:03:54:43:92:ea:37:30:ce:
         42:6f:7f:d1:d3:d0:c3:ac:86:9c:04:d8:9b:bb:16:81:e7:c4:
         29:bb:21:2f:5e:2f:29:21:0e:6c:a6:63:e6:bc:6f:3b:d8:2e:
         fb:a7:9c:bf:fe:2e:d2:a2:c9:29:79:4d:0e:11:28:c7:96:55:
         55:58:dc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:10 2024 by rpki-client on console-ams.rpki-client.org