Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa
File:                     3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (raw, json)
Hash identifier:          jy1Fc5g9Db6h1mMJwzy/8O2MmQKCnyUDCwHhfQ+qXBM=
Subject key identifier:   EA:9C:9A:E6:30:C6:1A:15:45:4C:0B:2D:C6:84:C1:EB:56:FD:CC:AE
Certificate issuer:       /CN=255AA179563123A815C2B4073AD84B69F0967F4D
Certificate serial:       2CAEFE9BAC3C2A00769651813A8E6DCD67497DA8
Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa
Signing time:             Sun 03 Sep 2023 06:00:01 +0000
ROA not before:           Sun 03 Sep 2023 05:55:01 +0000
ROA not after:            Sun 01 Sep 2024 06:00:01 +0000
asID:                     138112
IP address blocks:        103.126.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl
                          rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 02:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ae:fe:9b:ac:3c:2a:00:76:96:51:81:3a:8e:6d:cd:67:49:7d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D
        Validity
            Not Before: Sep  3 05:55:01 2023 GMT
            Not After : Sep  1 06:00:01 2024 GMT
        Subject: CN=EA9C9AE630C61A15454C0B2DC684C1EB56FDCCAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3e:ae:da:d4:e6:44:fa:90:79:b7:e4:34:f3:
                    c8:37:0a:91:13:8d:4d:d3:63:09:22:43:60:f3:cf:
                    8a:b0:78:94:96:16:7e:f2:1f:65:00:36:b2:31:38:
                    fe:71:8e:5e:50:5c:1e:38:f0:e5:aa:3e:1c:35:53:
                    78:2b:e7:89:32:ac:ff:0a:48:e9:15:e3:69:30:e8:
                    0d:17:89:21:d4:8c:16:66:7f:3d:ee:09:8a:d5:83:
                    c3:43:a9:97:de:b8:ee:5e:f2:64:36:1c:29:3e:23:
                    94:9b:8c:ed:d4:79:6b:72:30:55:f1:fc:7b:27:44:
                    0c:4a:9b:df:d0:3a:a1:85:52:5f:d0:44:0c:e9:fa:
                    6c:75:69:0f:f0:0e:46:8f:1b:1d:9e:9e:c7:e5:ac:
                    9f:28:fe:bd:9c:8b:61:82:38:0c:0f:43:97:84:2f:
                    00:5f:eb:db:e0:99:38:2b:65:f2:aa:90:71:87:2a:
                    96:11:3f:4b:bd:33:5c:15:d8:f4:c1:30:39:77:10:
                    fb:a7:c9:68:69:f6:c7:23:13:c9:5b:d0:ab:75:08:
                    b0:6f:94:3e:ad:01:2b:f3:eb:5f:d9:fa:24:b3:dc:
                    c8:30:b2:a4:52:27:3c:b9:3b:ee:d6:a8:84:02:83:
                    9b:d0:f3:4b:b7:04:2a:bc:ea:7d:d3:76:0e:60:1f:
                    36:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9C:9A:E6:30:C6:1A:15:45:4C:0B:2D:C6:84:C1:EB:56:FD:CC:AE
            X509v3 Authority Key Identifier:
                keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:82:b0:80:e7:84:4d:05:9b:be:fa:52:7a:aa:a4:9a:f3:b4:
         de:cf:c4:14:a4:dc:2d:e7:69:d5:fd:ca:1e:49:07:82:b1:bd:
         93:00:9c:5b:01:14:23:84:f9:78:9e:68:57:80:4e:49:09:af:
         e9:e9:65:6d:6b:42:94:54:07:79:f2:48:61:67:0a:af:c2:d9:
         08:a0:85:37:8c:55:02:d0:20:bb:ec:2c:44:1f:bf:41:15:c8:
         e7:e8:3f:3d:ec:4b:f2:03:5a:6c:82:00:25:44:41:5d:3f:71:
         f6:28:5c:e7:60:91:fe:e6:43:da:92:1d:95:c9:66:cc:0d:2a:
         ef:93:67:37:75:ef:1c:34:4f:3c:f5:a1:ea:b7:82:aa:bd:1a:
         09:b4:94:b7:c9:d8:8f:89:bb:28:f7:e2:1a:ca:f6:65:84:6d:
         b8:1f:67:fb:2a:3a:05:81:07:e4:d0:df:99:b5:34:9e:57:c9:
         cd:c4:64:f4:03:79:a5:12:e2:38:23:2d:2f:b1:88:59:1f:a8:
         22:59:e2:16:dc:70:cb:bc:8e:5c:5e:86:0e:99:12:a6:fc:ec:
         34:53:d7:d6:17:03:a7:cb:3e:c3:79:c8:2b:a6:f8:1a:a8:5e:
         98:ec:01:9b:81:06:18:5d:ec:cc:b1:d5:de:bf:f9:42:ad:24:
         72:da:14:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 00:59:38 2024 by rpki-client on console-fra.rpki-client.org