Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa
File:                     3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (raw, json)
Hash identifier:          Gr00cYR+nYBb/SkFvFy1dK21r9ioSRsvvp7/EkC0W50=
Subject key identifier:   8D:37:5B:FD:3E:72:D4:EB:3C:46:A8:A1:A6:66:B5:91:03:63:38:AF
Certificate issuer:       /CN=255AA179563123A815C2B4073AD84B69F0967F4D
Certificate serial:       52213DD211527EFBEAB3F4D3CB214A89FEE8A586
Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa
Signing time:             Sun 03 Sep 2023 06:00:01 +0000
ROA not before:           Sun 03 Sep 2023 05:55:01 +0000
ROA not after:            Sun 01 Sep 2024 06:00:01 +0000
asID:                     138112
IP address blocks:        103.126.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl
                          rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 02:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:21:3d:d2:11:52:7e:fb:ea:b3:f4:d3:cb:21:4a:89:fe:e8:a5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D
        Validity
            Not Before: Sep  3 05:55:01 2023 GMT
            Not After : Sep  1 06:00:01 2024 GMT
        Subject: CN=8D375BFD3E72D4EB3C46A8A1A666B591036338AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f1:fd:18:81:34:b8:9f:28:23:f8:cb:a9:61:
                    ea:8b:5b:de:38:db:d4:32:78:5b:de:e6:82:a0:77:
                    26:61:5b:f4:88:78:53:e7:02:74:ee:fe:20:f9:cc:
                    9e:fa:f8:66:c7:ef:aa:e2:3c:8c:41:92:5d:6f:c5:
                    e3:da:b5:bd:e9:60:c0:f6:89:3a:e3:e1:00:ec:9a:
                    3e:bc:ef:51:24:2d:be:e8:b1:21:4d:fa:5a:c6:31:
                    4b:b8:43:a5:7c:e4:af:e7:69:f7:d7:a4:1f:e5:e0:
                    cd:ba:80:4d:2d:c8:1e:5e:49:4c:d5:c1:3c:77:cc:
                    c7:8a:54:98:82:7a:9c:da:2c:73:13:a7:7d:06:48:
                    40:2a:cd:93:82:eb:e1:dd:60:86:40:6f:78:86:b7:
                    79:45:24:62:6c:98:9e:94:a1:54:8d:dc:d2:24:de:
                    69:70:57:6e:7f:c1:8b:d4:d0:87:40:49:5b:e0:cb:
                    b4:85:b8:e4:4b:41:09:00:cb:ed:99:d8:6e:f9:3e:
                    dc:0f:7c:b2:a0:a2:ca:03:be:d3:2e:ca:0b:d9:2e:
                    46:17:27:2e:51:68:01:71:71:b7:7f:c4:78:e5:5b:
                    b4:a2:99:b0:a8:43:53:26:da:49:a9:26:40:01:2a:
                    cf:2d:e3:50:7c:ae:d3:a8:a1:c6:46:27:05:6c:9a:
                    b1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:37:5B:FD:3E:72:D4:EB:3C:46:A8:A1:A6:66:B5:91:03:63:38:AF
            X509v3 Authority Key Identifier:
                keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:73:33:d7:2d:6a:20:80:83:85:4b:56:21:04:79:f4:a7:92:
         2c:b1:98:5b:e4:66:0a:59:0c:41:02:da:f0:c6:85:5a:1e:29:
         06:c7:f7:37:9d:c1:16:8d:6e:eb:31:26:b2:16:d3:fc:d4:b9:
         14:77:e5:aa:4d:75:3b:50:51:d9:6c:e6:54:2f:a4:01:30:56:
         dd:8f:83:f1:89:60:64:dd:1d:8d:34:87:e0:a8:db:a0:b2:3c:
         17:1c:c8:ac:8c:e1:be:07:21:6c:6e:40:7f:76:7c:58:b0:00:
         90:0f:87:38:75:c6:1f:66:97:75:d7:8d:d4:d0:0a:75:55:76:
         e0:2e:a1:7a:75:8d:28:55:0b:b5:70:e3:8b:7b:ff:ae:69:80:
         a2:9a:a7:0d:8e:58:18:41:d1:74:63:bd:0c:53:ed:cf:6f:4c:
         2b:61:29:ff:fa:84:01:5c:a8:da:c5:b5:db:ad:23:ca:1d:30:
         86:8e:a1:c5:1d:a2:85:3d:44:7a:17:0f:e6:62:76:ba:99:2f:
         f2:00:1d:c1:4c:c1:f6:70:37:0c:53:33:f9:42:88:5e:11:b0:
         c0:b4:1f:be:52:93:99:8a:3b:05:3b:cf:41:99:79:cc:83:2a:
         63:3e:e5:03:54:82:85:d3:91:e4:9a:ec:ed:04:fc:91:b2:00:
         0e:16:1b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 00:59:38 2024 by rpki-client on console-fra.rpki-client.org