Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa
File:                     3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (raw, json)
Hash identifier:          OarkN63CWiu8PSvcbFANSCoQW7fyPwqdT4UGF/IHPkY=
Subject key identifier:   0B:52:C5:57:91:95:B4:B5:E0:5E:43:81:94:68:5E:C4:8F:CB:6A:10
Certificate issuer:       /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
Certificate serial:       49D185A496EC57D1333B41290939F0BC242A7460
Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa
Signing time:             Mon 09 Oct 2023 02:00:00 +0000
ROA not before:           Mon 09 Oct 2023 01:55:00 +0000
ROA not after:            Mon 07 Oct 2024 02:00:00 +0000
asID:                     138886
IP address blocks:        103.141.108.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl
                          rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d1:85:a4:96:ec:57:d1:33:3b:41:29:09:39:f0:bc:24:2a:74:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
        Validity
            Not Before: Oct  9 01:55:00 2023 GMT
            Not After : Oct  7 02:00:00 2024 GMT
        Subject: CN=0B52C5579195B4B5E05E438194685EC48FCB6A10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:84:59:5a:0f:67:57:47:c7:dc:a2:80:1d:
                    73:11:36:26:18:e2:b7:a3:01:d3:6a:e4:52:11:7e:
                    1c:6b:05:e7:10:26:8c:21:d4:0c:9f:7b:2c:7e:5f:
                    df:64:fe:30:a3:07:91:19:66:65:75:ce:cc:92:77:
                    33:95:ab:78:3a:7c:5e:bb:aa:0c:0b:61:46:52:57:
                    e2:a5:ce:59:46:14:ca:4b:2c:70:e1:91:62:6d:06:
                    99:bb:b3:56:a7:30:3e:74:eb:fe:38:12:75:83:0d:
                    64:2e:e5:18:82:68:2b:91:08:19:12:dc:77:aa:23:
                    de:8a:26:e3:84:5f:f3:2b:3d:18:0e:90:49:ac:90:
                    62:ad:8d:61:00:b1:fd:38:22:44:65:bd:d3:41:6f:
                    10:f4:e1:37:be:ec:ca:26:54:63:f1:cd:fb:52:b5:
                    fe:33:7b:e7:8b:0b:00:6f:0e:f1:52:3f:0b:df:3e:
                    3d:12:f7:bf:ea:34:4a:53:d3:6d:5e:cb:d0:de:4d:
                    a4:28:be:bd:64:31:8a:69:dd:49:53:01:9c:a2:21:
                    78:f1:4e:07:c1:c8:50:03:97:09:02:2a:90:0d:6b:
                    3e:bc:64:c2:1f:33:75:21:7b:82:f6:11:3c:28:ba:
                    d8:de:67:97:06:95:26:74:dc:50:f0:4e:7a:20:b3:
                    14:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:52:C5:57:91:95:B4:B5:E0:5E:43:81:94:68:5E:C4:8F:CB:6A:10
            X509v3 Authority Key Identifier:
                keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:88:94:dd:88:1c:12:b5:dc:c9:4e:41:db:22:27:6e:c8:d4:
         03:86:90:4a:96:b1:14:08:38:e6:9a:b1:f5:7d:87:cd:e9:e9:
         d7:ed:d6:94:00:4f:db:f0:fb:d3:96:59:27:fe:a6:b8:f9:1c:
         69:17:d9:fa:ae:b0:72:c3:e8:42:17:49:71:c9:c1:66:f3:5d:
         09:c0:77:38:aa:96:b5:97:86:7d:55:8e:e4:0d:ef:e0:6d:71:
         9b:63:47:4a:ce:aa:20:73:10:40:b1:63:03:0e:0d:03:6b:31:
         46:db:6e:55:13:fb:36:8a:a1:a0:70:8f:ca:69:86:e3:d6:33:
         c7:c2:51:50:00:cc:6e:e4:91:49:01:5e:30:4c:05:ff:b8:91:
         c5:ca:e7:51:04:22:92:76:15:40:c7:5f:92:6b:34:cb:54:98:
         d2:83:b0:5b:a6:a9:16:80:45:73:9f:c9:e3:cb:39:74:e0:41:
         52:f0:0f:86:ce:c5:de:4b:25:40:67:61:d0:c1:b2:89:21:a4:
         6d:0c:83:3d:1c:c4:e3:6f:e7:33:26:70:3d:06:05:40:8c:42:
         24:07:c7:e2:c0:a0:ab:c7:49:fd:54:bf:23:c0:d7:9b:73:9b:
         c6:04:9b:02:5e:23:9f:df:f4:89:5b:6a:64:a3:f2:67:de:d1:
         e1:b1:fd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:09 2024 by rpki-client on console-fra.rpki-client.org