Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa
File:                     3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          pu0ttZvTgMirb/HkuzJkh5PphveCvv9f8Ea2Bo6PoMQ=
Subject key identifier:   39:C7:F7:4E:B3:09:6F:15:E6:13:0D:DF:2A:AB:42:F2:A2:5A:D0:93
Certificate issuer:       /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
Certificate serial:       1381BD74674FB5ADDFD2401D39475093A197A0D0
Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa
Signing time:             Tue 20 Feb 2024 05:00:00 +0000
ROA not before:           Tue 20 Feb 2024 04:55:00 +0000
ROA not after:            Tue 18 Feb 2025 05:00:00 +0000
asID:                     137316
IP address blocks:        103.105.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl
                          rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:81:bd:74:67:4f:b5:ad:df:d2:40:1d:39:47:50:93:a1:97:a0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
        Validity
            Not Before: Feb 20 04:55:00 2024 GMT
            Not After : Feb 18 05:00:00 2025 GMT
        Subject: CN=39C7F74EB3096F15E6130DDF2AAB42F2A25AD093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e7:d7:75:22:63:02:86:a5:1c:f1:52:bf:af:
                    ab:3d:d6:d3:f9:ca:6c:32:dc:fc:a3:86:72:6a:12:
                    d3:dd:ca:16:72:df:fa:32:4f:1c:bd:4b:57:f5:d6:
                    eb:28:d6:b2:a5:a1:d5:17:1b:d3:9a:08:b2:d3:af:
                    4b:c9:f9:48:ec:a5:45:07:73:0b:c1:2d:ec:41:6e:
                    cf:15:d5:4d:6d:b4:bc:d0:99:e8:0c:13:a2:da:ed:
                    16:d5:8e:8b:78:45:ac:38:2f:3f:5e:d0:16:17:17:
                    b5:ce:d0:fa:f7:4b:d9:12:1f:03:aa:97:ff:fe:e8:
                    63:e0:3c:1e:2b:6b:d9:69:ea:76:6c:24:2d:2d:92:
                    a3:a6:f6:aa:f1:6b:23:bc:51:17:3f:67:55:1d:e7:
                    36:b1:7d:9f:7e:aa:cf:30:c7:92:b0:c9:c4:18:47:
                    28:11:4b:50:9c:90:79:a0:f9:fb:5b:11:1e:99:6c:
                    da:ad:b1:8d:54:15:8f:1f:34:a0:8e:81:11:5e:c7:
                    27:ed:ce:f2:1b:5d:41:e2:21:5b:be:7d:eb:e3:bd:
                    f8:d1:90:4f:d8:ba:58:44:d4:0a:b7:21:fb:0b:cf:
                    b2:62:bd:88:fd:ee:7f:9b:59:a1:15:d4:f2:43:35:
                    36:91:ee:8f:cf:e9:f3:f9:86:4b:54:62:f6:94:00:
                    0e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C7:F7:4E:B3:09:6F:15:E6:13:0D:DF:2A:AB:42:F2:A2:5A:D0:93
            X509v3 Authority Key Identifier:
                keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:01:08:ed:6e:d2:49:85:85:9c:2c:06:04:4b:3a:f4:b0:3c:
         50:35:ad:6d:97:cd:c2:4f:56:91:a6:0a:f6:54:8c:fd:67:de:
         8c:a0:d1:88:0d:bd:1b:96:80:2c:c4:3c:fc:e7:99:81:fd:23:
         dc:db:35:b1:ca:84:9c:bc:76:f1:56:81:71:26:6d:3c:8f:9c:
         58:85:6f:8b:f8:0a:43:2d:f4:ab:8d:5a:cb:f5:2f:31:93:96:
         a7:09:61:ca:dd:9f:51:e3:32:f2:64:a3:a0:eb:f3:fe:e8:ac:
         cc:8f:66:1b:0f:2a:fc:c2:42:d5:37:af:78:b2:cc:a1:ed:be:
         f0:cf:2e:b1:bf:84:9b:83:19:72:78:f3:a9:14:3a:68:45:b0:
         08:cc:08:eb:3b:35:f0:e4:c3:82:9c:9c:6b:e8:a6:53:0a:5e:
         4f:bc:16:03:9a:0a:9a:e0:db:6d:3a:cd:96:1d:3a:93:40:e1:
         40:05:47:14:9d:12:60:fe:2e:18:fa:19:63:e0:f0:5c:75:67:
         53:2e:93:da:46:cb:96:4a:ec:fd:84:16:14:49:a3:6a:47:fa:
         64:4c:68:7d:dd:bb:a0:d6:6e:a2:4e:76:9e:de:cd:e4:6c:83:
         55:54:ed:bb:a1:ee:cf:65:31:8d:2c:38:d1:cb:1b:95:d1:e6:
         20:8b:3b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:38 2024 by rpki-client on console-ams.rpki-client.org