Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa
File:                     3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (raw, json)
Hash identifier:          S9T4Njr1S5t2cL0qzbEw2qPQzlgOAecG0HGE00Slwz4=
Subject key identifier:   19:D6:73:7B:94:93:BD:D1:C0:8C:B9:89:61:9B:FC:8E:86:2C:7E:55
Certificate issuer:       /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
Certificate serial:       70EA1291D3451EA4BC4DB96E5DE15C52C3444EEF
Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa
Signing time:             Thu 08 Aug 2024 15:00:00 +0000
ROA not before:           Thu 08 Aug 2024 14:55:00 +0000
ROA not after:            Thu 07 Aug 2025 15:00:00 +0000
asID:                     136878
IP address blocks:        103.105.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl
                          rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ea:12:91:d3:45:1e:a4:bc:4d:b9:6e:5d:e1:5c:52:c3:44:4e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
        Validity
            Not Before: Aug  8 14:55:00 2024 GMT
            Not After : Aug  7 15:00:00 2025 GMT
        Subject: CN=19D6737B9493BDD1C08CB989619BFC8E862C7E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:43:63:7e:42:80:ac:dd:21:c8:da:00:2f:
                    16:7b:9e:4d:bb:34:7e:08:6b:0c:a3:94:ba:5b:a5:
                    b5:79:28:2d:5c:1d:6a:bb:27:c5:9e:30:cf:65:07:
                    d0:c7:d1:d9:c2:aa:52:5b:31:1a:60:0d:e8:59:50:
                    9e:05:cf:f1:b6:6a:45:7a:0b:be:6a:a3:85:99:fe:
                    a0:9d:b9:5e:4e:db:fa:02:9d:e2:0e:45:d9:cb:60:
                    aa:90:bf:d9:ad:1e:c4:5f:b7:3a:b5:61:93:86:30:
                    55:7f:e4:b0:ae:f6:b1:44:7f:89:d6:2c:38:7c:d5:
                    f1:1e:8d:bf:61:6f:14:cf:e8:3e:dc:97:8b:dd:a1:
                    29:bf:4f:49:af:91:c8:b4:01:c9:5c:f4:f2:de:ac:
                    2f:eb:62:a7:c2:03:da:9b:95:87:89:9c:d8:e9:77:
                    8f:06:4c:79:65:47:10:48:81:f0:36:9d:38:fe:7d:
                    af:17:a2:d6:91:92:2c:65:07:3c:2f:11:de:e2:03:
                    f9:9a:ec:a0:17:67:de:6c:ca:3d:37:35:ab:d1:f3:
                    4a:88:66:23:c7:4a:86:88:ed:af:66:f8:10:7a:46:
                    52:ac:24:fa:9d:cc:68:94:55:92:3a:6a:6c:42:0a:
                    63:69:0f:e6:c0:af:be:35:39:a5:20:59:a7:fb:58:
                    a1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D6:73:7B:94:93:BD:D1:C0:8C:B9:89:61:9B:FC:8E:86:2C:7E:55
            X509v3 Authority Key Identifier:
                keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:41:c6:58:ce:1c:05:53:c4:81:d6:4e:a8:7b:c2:86:95:23:
         be:ac:73:d6:77:d5:33:a0:81:50:e8:01:36:14:25:38:af:eb:
         22:52:6c:6f:c1:04:0e:ab:78:f3:97:1e:49:3a:15:97:84:87:
         0b:83:1e:90:64:94:60:a5:1b:76:b2:1b:26:be:51:04:69:94:
         be:4b:76:0f:a3:a0:c3:2f:65:e6:13:71:7f:d8:6a:01:c5:3f:
         7f:f2:04:77:34:56:74:49:4b:ec:72:d7:8d:89:47:94:be:6e:
         72:77:1e:13:5d:d4:11:ac:c4:56:b9:e7:ac:50:0d:fd:c0:6c:
         d6:db:86:1b:f9:b8:69:16:2d:fc:c6:e1:5c:b0:7f:0d:ca:2c:
         59:d9:dc:91:f0:1b:97:33:83:89:cf:96:b4:68:e1:09:b5:44:
         8a:ad:5e:13:80:ad:a1:af:b0:91:9d:61:49:d7:fd:20:c0:e5:
         d7:49:e1:2b:66:fc:05:14:47:05:e8:8e:6f:43:32:35:7d:83:
         55:97:64:75:d9:43:fc:14:c6:0a:c0:e3:04:dd:26:1c:89:f6:
         b6:a8:ff:7d:c6:b2:1e:7d:f5:e9:dc:5d:6a:a8:a0:ec:11:54:
         7a:87:6f:56:0c:27:32:e7:ca:3a:67:1f:ba:18:d7:6a:84:b5:
         e0:a6:23:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:20 2024 by rpki-client on console-fra.rpki-client.org