Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa
File:                     3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (raw, json)
Hash identifier:          2ALnzG8NpGh5V78r+rS+kxv6aYsU+DzNaB2tOqBsk2A=
Subject key identifier:   1C:D5:D5:19:6E:B7:F6:B0:41:31:2A:45:77:32:81:55:55:80:E9:32
Certificate issuer:       /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
Certificate serial:       32E417301B0B5949B4A45D648ED0108B7B8C799F
Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa
Signing time:             Wed 27 Dec 2023 03:00:29 +0000
ROA not before:           Wed 27 Dec 2023 02:55:29 +0000
ROA not after:            Wed 25 Dec 2024 03:00:29 +0000
asID:                     136878
IP address blocks:        103.105.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl
                          rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e4:17:30:1b:0b:59:49:b4:a4:5d:64:8e:d0:10:8b:7b:8c:79:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
        Validity
            Not Before: Dec 27 02:55:29 2023 GMT
            Not After : Dec 25 03:00:29 2024 GMT
        Subject: CN=1CD5D5196EB7F6B041312A45773281555580E932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:34:70:1e:24:e4:e8:02:e0:9b:3e:5a:72:50:
                    d8:f5:af:6d:79:d2:2e:1c:ba:73:9e:7a:17:99:20:
                    d4:a6:92:19:7d:27:b9:31:3d:89:2e:bc:34:c9:e3:
                    1a:fe:cb:b4:28:6d:08:a2:d8:e7:69:d9:a0:b3:92:
                    de:82:c9:c6:d4:f4:69:ab:f1:86:ad:d7:f0:b4:12:
                    0e:cd:63:18:c7:c2:0c:53:b7:c3:7f:da:a7:85:af:
                    ee:b6:41:2f:a0:51:f6:1b:31:77:c0:b6:3e:6e:e9:
                    1d:0f:83:f8:52:16:6c:7b:b0:b6:e4:1c:af:59:39:
                    f1:31:81:44:9e:16:e8:5d:5f:d6:9a:f1:ef:6a:57:
                    87:13:ba:62:18:39:2b:e9:5b:6a:96:96:1f:b2:33:
                    ae:39:24:65:6b:d5:a2:ff:51:54:fb:16:25:95:d9:
                    58:f4:37:b9:5d:ed:d5:c1:23:98:4e:8a:5b:74:b7:
                    1d:5a:9d:5c:1d:8f:e0:fb:6e:28:42:71:f0:fa:04:
                    48:e3:5c:ba:da:28:ca:d7:16:ea:88:fe:7e:ac:5a:
                    6b:9e:d1:d3:5d:3c:ea:15:2c:72:85:d0:51:4b:a3:
                    b8:9b:ef:79:61:2d:b1:e7:93:72:aa:ae:fc:ed:e7:
                    51:64:1c:a1:1d:a8:f7:f7:81:d1:3b:ae:22:64:d0:
                    8b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D5:D5:19:6E:B7:F6:B0:41:31:2A:45:77:32:81:55:55:80:E9:32
            X509v3 Authority Key Identifier:
                keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:e5:7c:ee:cc:b1:83:bb:e8:1c:8a:69:1f:f0:83:01:22:8e:
         85:31:09:b2:f0:a6:ab:06:f0:26:8f:c9:0d:f6:b8:48:e2:d5:
         f2:96:3e:5c:dd:7b:0f:f5:31:f6:8c:f1:2f:a4:38:98:8d:07:
         a1:5c:b5:6b:51:37:a3:2f:ec:e5:1e:cf:af:14:a3:d6:58:ef:
         49:08:6d:85:b2:5f:30:87:03:71:5a:49:d8:e8:3d:60:ed:bd:
         40:12:04:01:69:a0:dc:bb:0e:85:79:19:64:2d:d4:a9:76:45:
         25:04:8f:32:79:1a:b2:7b:8b:55:7d:d2:c5:a8:b4:e5:37:c7:
         c2:35:e2:8c:7a:9e:77:1f:90:91:e7:56:1b:30:cd:7f:a9:12:
         3b:fb:17:0a:56:6a:ce:5f:5a:b9:d8:30:d5:69:8a:36:04:75:
         8a:e3:92:bc:7c:6b:f5:1f:c4:4a:32:6e:fb:17:a5:b3:fe:73:
         29:6a:cd:f6:cd:0e:ac:a4:4c:a3:86:a8:16:22:d6:24:e9:5c:
         d0:84:0b:b7:5c:e9:0c:39:a6:29:a9:e4:ff:fc:00:fb:89:17:
         1a:3e:da:e8:8f:0a:02:61:0a:54:ed:6c:69:78:1a:8d:76:e7:
         db:6e:38:cc:df:56:4e:d7:06:bd:d0:4b:05:8d:95:ba:ea:dc:
         59:d6:1b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:53:52 2024 by rpki-client on console-fra.rpki-client.org