Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa
File:                     3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (raw, json)
Hash identifier:          TNpUK4dJFrU18RMU9Zgd4YTXy5oNCmoEosozxJBeWMA=
Subject key identifier:   0E:21:AA:35:8B:C2:08:79:7F:27:A3:45:55:0C:2D:FC:17:4B:53:B4
Certificate issuer:       /CN=255AA179563123A815C2B4073AD84B69F0967F4D
Certificate serial:       3D0B043EE3F8498E733290A3CCECAA0B88AFD8BC
Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa
Signing time:             Sun 04 Aug 2024 06:00:01 +0000
ROA not before:           Sun 04 Aug 2024 05:55:01 +0000
ROA not after:            Sun 03 Aug 2025 06:00:01 +0000
asID:                     138112
IP address blocks:        103.126.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl
                          rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 07:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0b:04:3e:e3:f8:49:8e:73:32:90:a3:cc:ec:aa:0b:88:af:d8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D
        Validity
            Not Before: Aug  4 05:55:01 2024 GMT
            Not After : Aug  3 06:00:01 2025 GMT
        Subject: CN=0E21AA358BC208797F27A345550C2DFC174B53B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:50:8d:cf:2e:56:77:f7:b3:dd:9c:7b:4e:18:
                    01:74:72:8c:aa:ca:d7:c8:81:ce:05:0e:1c:20:2e:
                    7a:03:6e:a3:f3:fb:3f:b5:45:6f:68:dc:42:0a:c8:
                    c8:af:5d:4e:b4:ba:5c:44:a0:3d:84:c0:4c:e4:41:
                    29:af:21:c9:d7:61:2f:8d:40:35:af:4c:56:c0:fa:
                    0d:8e:cf:c1:f5:66:7e:2a:c2:78:ce:d3:ad:6c:12:
                    81:aa:d4:8b:c8:96:43:d1:03:d4:64:01:d3:86:86:
                    ab:50:3e:5e:2f:1c:cd:46:1f:8b:44:cb:b2:87:69:
                    49:97:82:d3:4a:c5:ca:0c:18:cb:69:75:ca:74:e4:
                    bb:76:88:be:b0:19:76:cb:c7:7e:01:f6:ea:2c:8e:
                    19:37:24:ca:d3:46:12:aa:d4:90:1f:ff:dc:c4:28:
                    38:15:48:6e:4f:78:54:f0:13:83:4a:93:a7:53:91:
                    dc:0e:54:6d:8b:9b:27:5f:62:81:4f:90:19:94:1d:
                    69:ab:bb:78:62:c3:7a:0f:04:ac:74:c3:61:b9:14:
                    cb:b6:95:53:46:cf:06:88:4d:53:5c:98:95:ba:c0:
                    bd:a7:ff:0e:b8:67:fa:40:a9:e5:b0:37:97:c0:f2:
                    d4:48:63:76:83:6c:a4:f5:54:37:7c:fe:5d:66:a8:
                    83:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:21:AA:35:8B:C2:08:79:7F:27:A3:45:55:0C:2D:FC:17:4B:53:B4
            X509v3 Authority Key Identifier:
                keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:f5:50:d1:88:3b:7b:8b:21:0e:91:0a:67:b7:ec:fa:dd:d9:
         77:db:e6:6d:79:68:22:7c:e7:e0:7a:1d:eb:20:c2:3d:5d:7d:
         9b:a5:92:c8:be:d9:af:a1:2e:6e:dd:58:1f:49:f6:86:94:93:
         30:64:4e:dc:30:f8:7f:ff:14:57:57:8c:44:69:b5:7c:bf:46:
         01:55:4d:48:ca:d1:1c:83:60:bf:76:fa:6c:02:1e:8d:4e:70:
         97:da:5e:0e:28:59:b3:e1:da:db:dc:26:28:75:c5:34:80:e5:
         5d:ed:d0:08:c2:cb:92:22:14:af:15:71:ee:b6:9f:4b:0d:1a:
         21:29:4b:cd:82:d5:42:ac:85:fb:c3:2b:fe:fb:a5:12:2b:ef:
         00:2b:0a:9a:96:99:63:2b:14:45:3c:ac:ae:7b:5f:e4:7f:7f:
         d1:a8:f2:3b:d1:0a:44:91:a2:49:5a:84:8a:a1:38:57:56:ca:
         98:4f:c7:50:26:6c:21:7a:a4:ad:6f:2c:1b:8e:60:50:18:4b:
         80:83:9e:23:be:e9:44:bf:73:dd:2b:dd:b6:5b:3a:aa:08:21:
         67:14:3e:66:1b:5d:f2:b1:d2:96:a4:94:ee:c7:2c:5c:09:36:
         92:3d:74:25:92:f1:5f:ac:1e:66:63:fe:b3:5c:8a:4b:05:01:
         9c:c6:42:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:39 2024 by rpki-client on console-fra.rpki-client.org