Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa
File:                     3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (raw, json)
Hash identifier:          ZULjTp4+NYAssAp0CZz3FEnycGBYt+NoPkGuUHEyL7E=
Subject key identifier:   25:21:BD:36:DD:F2:CB:1E:1D:B7:1C:73:F3:7A:30:B9:79:D0:56:81
Certificate issuer:       /CN=255AA179563123A815C2B4073AD84B69F0967F4D
Certificate serial:       4B33091BB6C2AC2B43CCB6D8E9CE697A8AF99406
Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa
Signing time:             Sun 04 Aug 2024 06:00:02 +0000
ROA not before:           Sun 04 Aug 2024 05:55:02 +0000
ROA not after:            Sun 03 Aug 2025 06:00:02 +0000
asID:                     138112
IP address blocks:        103.126.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl
                          rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 07:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:33:09:1b:b6:c2:ac:2b:43:cc:b6:d8:e9:ce:69:7a:8a:f9:94:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D
        Validity
            Not Before: Aug  4 05:55:02 2024 GMT
            Not After : Aug  3 06:00:02 2025 GMT
        Subject: CN=2521BD36DDF2CB1E1DB71C73F37A30B979D05681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:c3:94:fe:9c:ed:32:e8:ef:a8:3f:37:f2:
                    ed:2e:70:af:16:07:fd:8d:8d:f4:14:f2:82:ee:f4:
                    01:8c:d9:b2:6f:a1:38:67:47:df:a0:6e:62:ae:a7:
                    93:52:14:4a:fb:b6:ff:7f:31:f7:fa:a2:6e:7e:6f:
                    d7:2d:a7:6c:98:ab:56:62:79:d9:40:d0:5d:24:62:
                    af:05:bf:94:88:ea:39:22:5e:5c:1c:52:4e:9d:5e:
                    41:a7:5d:a3:8f:2d:2e:f7:79:c9:1e:10:0f:bd:c9:
                    ce:d8:7d:e9:ca:8f:74:85:20:c3:b3:8d:7a:09:ec:
                    5e:93:e4:81:39:67:3f:3e:84:1e:84:ff:a3:ae:86:
                    cd:3a:6b:6e:0b:73:eb:4a:e8:28:21:d3:98:44:b4:
                    4a:4e:ae:bb:04:15:cd:06:f5:4f:de:9c:b2:04:ac:
                    65:0c:ef:a7:85:7c:7c:91:92:6e:0e:df:e4:6c:a8:
                    eb:67:77:b4:67:36:bd:d0:0f:a1:97:e9:40:54:12:
                    6c:36:b9:ea:6d:03:07:da:f2:2b:86:55:d1:42:f4:
                    96:b4:ae:c6:16:58:f5:12:ad:b6:34:95:5a:5d:b5:
                    c0:69:c9:67:d7:92:b6:67:a4:06:5b:f4:79:ef:75:
                    4f:95:e3:62:17:8e:2e:ac:ab:c0:b6:d3:ed:8b:37:
                    59:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:21:BD:36:DD:F2:CB:1E:1D:B7:1C:73:F3:7A:30:B9:79:D0:56:81
            X509v3 Authority Key Identifier:
                keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:df:a1:25:b3:db:82:29:82:5e:1f:c8:ba:7d:d9:11:57:93:
         a3:76:b0:da:14:f5:cc:6b:9e:7d:08:1a:00:1f:b4:de:5d:37:
         5f:40:18:6a:96:1f:b3:34:47:76:6c:db:0e:e0:9b:3b:8f:77:
         99:7c:4d:db:89:81:ed:49:d9:6c:1c:9b:23:94:54:32:37:1d:
         a2:94:27:3b:3c:c4:8a:2e:48:c9:48:ab:0f:5c:3b:0d:57:e7:
         4f:8c:09:1a:fe:10:78:a8:1f:9c:13:9a:5f:00:3f:eb:e2:48:
         58:42:d5:34:94:eb:5a:8a:25:57:7b:41:7e:3f:7d:49:74:f4:
         6b:d4:45:21:2c:0b:46:73:07:6b:20:38:09:6a:7b:6e:38:98:
         c1:28:a5:97:99:d4:67:6e:d8:da:b2:51:15:c1:19:cb:09:0d:
         60:c6:b5:bd:41:c6:84:f4:3f:72:2e:d3:bc:69:c4:10:3f:d8:
         cc:0c:c6:e4:69:36:d7:be:03:99:2a:9d:cb:c8:50:ba:37:ac:
         96:b9:dd:51:da:d4:cb:9a:03:b6:5d:93:1b:15:0c:36:be:c6:
         f7:74:b0:7f:b1:fc:08:2a:c9:9b:e0:c8:13:9e:24:31:67:b7:
         ab:1d:7c:da:a2:5a:38:d2:21:ff:b5:bf:e3:e2:6c:23:a7:b9:
         3a:db:0e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:06 2024 by rpki-client on console-ams.rpki-client.org