Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa
File:                     3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (raw, json)
Hash identifier:          Xh3q63iYyvrkplxU534qRklvzEwf6vZiKBb9qHrHUkk=
Subject key identifier:   B6:4F:CF:24:47:5B:CE:E5:68:0B:42:7B:CF:BB:43:C0:F4:78:79:06
Certificate issuer:       /CN=255AA179563123A815C2B4073AD84B69F0967F4D
Certificate serial:       7CAB60E99C76F5F9406EAC3D84B20C29BCB66AE6
Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa
Signing time:             Sun 03 Sep 2023 06:00:02 +0000
ROA not before:           Sun 03 Sep 2023 05:55:02 +0000
ROA not after:            Sun 01 Sep 2024 06:00:02 +0000
asID:                     138112
IP address blocks:        103.126.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl
                          rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 02:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ab:60:e9:9c:76:f5:f9:40:6e:ac:3d:84:b2:0c:29:bc:b6:6a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D
        Validity
            Not Before: Sep  3 05:55:02 2023 GMT
            Not After : Sep  1 06:00:02 2024 GMT
        Subject: CN=B64FCF24475BCEE5680B427BCFBB43C0F4787906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9c:a9:ca:44:bf:c6:b8:19:c1:23:32:2c:d5:
                    0c:75:f8:88:a4:b5:2c:de:11:6f:94:4b:1f:24:6d:
                    b7:e4:20:b4:76:19:02:a3:ee:d0:d5:5a:cd:2d:26:
                    ac:ed:38:13:57:65:fc:eb:2e:62:8c:53:9c:2c:df:
                    56:7b:ff:37:ae:41:a7:00:75:d8:1f:68:cb:60:25:
                    49:6e:49:20:88:a3:0b:82:0f:8f:c6:11:24:16:d7:
                    bd:2d:f6:88:9a:09:62:ab:e5:18:23:e0:ae:3c:2f:
                    80:21:83:c2:a9:7a:7a:4a:ce:c8:3f:40:96:eb:4f:
                    f0:35:12:e8:88:3e:99:6d:76:88:0b:02:35:52:02:
                    55:56:2e:91:ff:30:95:4f:63:99:bb:66:f1:5d:f1:
                    8d:f7:23:c5:62:ea:d8:3b:57:0d:0c:62:5b:bd:a1:
                    5e:0b:b4:0d:cd:a8:7d:d5:fe:f3:25:d7:28:de:6d:
                    ff:4c:b4:8f:4d:20:72:75:9b:d2:fb:ed:da:e3:3f:
                    b4:47:b4:1d:ec:8e:fd:47:93:72:0a:42:27:18:b1:
                    c4:e9:d7:3e:09:9e:90:ed:56:ba:08:84:a7:1c:23:
                    84:a6:7e:20:c4:13:28:b3:bb:d7:45:0e:81:f2:bf:
                    95:e1:fa:1a:16:b9:8d:44:ce:e6:52:f2:a1:75:3f:
                    10:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4F:CF:24:47:5B:CE:E5:68:0B:42:7B:CF:BB:43:C0:F4:78:79:06
            X509v3 Authority Key Identifier:
                keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:2b:10:24:ad:8b:35:b7:2b:23:8c:05:ce:b9:37:b9:9d:13:
         29:3b:75:9d:b8:a7:a3:97:53:c0:14:9c:9b:d7:df:64:95:69:
         6b:6f:e6:2d:00:c2:bc:9e:1e:31:63:ea:eb:98:d0:2a:9d:a6:
         af:6b:b1:17:2c:7a:2a:5f:6a:ff:13:e6:69:3f:0a:29:84:b7:
         81:78:4d:5e:79:a0:12:63:94:c8:b9:e4:ec:e8:53:0c:fe:32:
         c9:b5:92:66:fe:51:8e:10:d8:ff:72:c2:66:47:29:91:e2:bb:
         7f:58:f0:7d:06:ed:7e:24:6c:ef:45:4f:b1:cf:fe:10:5a:9a:
         b7:4d:3d:3d:bc:68:4c:0b:3a:ac:40:28:79:0d:b4:66:44:56:
         cf:07:ad:40:65:d6:a1:23:2f:e8:14:16:49:f2:d9:a8:56:34:
         2b:d5:5d:9a:c8:ed:98:30:fc:54:ed:ce:a3:52:22:db:ab:a0:
         62:4a:a5:9a:5a:70:3e:0e:a8:58:c5:d5:2c:c5:cd:5b:a4:c0:
         a0:72:13:00:36:9d:7c:d3:c9:24:05:32:ac:01:9b:4f:72:40:
         db:08:c9:ca:2e:17:df:5b:d9:49:41:5c:a2:e9:0b:59:e7:48:
         e0:cb:f2:8a:b6:11:aa:5b:07:40:a9:a7:16:23:b3:1b:e2:b6:
         f5:29:06:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 00:59:38 2024 by rpki-client on console-fra.rpki-client.org