Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa
File:                     3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (raw, json)
Hash identifier:          9VCQxiZQ6uQVxpVIt3DfXxPQylWYJU9tTsKyqA1F1Ho=
Subject key identifier:   5A:3A:4F:C3:89:95:57:EC:7D:85:EB:39:A6:2D:0F:70:EE:F1:24:22
Certificate issuer:       /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
Certificate serial:       71863639DC9F290F72983C034BD7D615AA3CD0FD
Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa
Signing time:             Mon 09 Sep 2024 02:00:00 +0000
ROA not before:           Mon 09 Sep 2024 01:55:00 +0000
ROA not after:            Mon 08 Sep 2025 02:00:00 +0000
asID:                     138886
IP address blocks:        103.141.108.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl
                          rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 06:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:86:36:39:dc:9f:29:0f:72:98:3c:03:4b:d7:d6:15:aa:3c:d0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
        Validity
            Not Before: Sep  9 01:55:00 2024 GMT
            Not After : Sep  8 02:00:00 2025 GMT
        Subject: CN=5A3A4FC3899557EC7D85EB39A62D0F70EEF12422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:b9:0f:25:5d:56:e9:7f:56:bb:66:75:03:
                    7f:37:c8:57:08:a6:8e:ee:c7:d7:28:db:e8:b4:5f:
                    33:15:79:d0:b6:7c:a1:90:2b:47:78:2d:eb:e0:aa:
                    34:01:cf:e1:64:a0:e2:f3:93:c4:cb:b8:3d:70:84:
                    75:b9:c4:03:a1:90:95:92:4b:ff:66:7b:59:89:b0:
                    cc:9e:87:0c:ce:eb:95:d4:47:cb:27:5e:83:c0:e6:
                    c2:58:38:95:ed:5f:79:82:6b:90:82:7a:a5:31:2e:
                    c3:f5:47:35:9e:3a:c6:4e:43:43:d6:2d:5c:56:06:
                    04:a4:ea:bd:cf:31:41:c2:86:c8:55:43:c9:98:ab:
                    b6:4a:83:f8:e9:48:55:de:11:87:52:4a:af:ef:68:
                    11:94:c0:86:d2:55:5e:81:69:c9:a9:40:15:22:09:
                    82:a4:8f:97:9a:32:c8:40:b1:65:24:9b:cf:01:d2:
                    c8:90:c1:d9:1a:86:f2:0f:2a:ef:26:f5:d4:0b:a2:
                    7a:84:f2:b8:89:2c:9a:98:72:8c:7d:63:97:53:9c:
                    4a:ab:d1:85:25:a6:99:66:66:f3:68:b3:7a:5d:f6:
                    ca:c2:bb:10:4f:d4:e0:ce:ea:ea:72:6b:a6:db:32:
                    83:e3:ca:40:24:d2:41:aa:25:71:46:d6:79:37:24:
                    ea:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3A:4F:C3:89:95:57:EC:7D:85:EB:39:A6:2D:0F:70:EE:F1:24:22
            X509v3 Authority Key Identifier:
                keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:96:4d:71:32:03:35:cb:fe:30:cb:9f:e5:f3:d7:26:df:7a:
         be:ff:f9:56:56:11:3f:b7:32:11:2b:68:6f:45:d4:4a:3b:06:
         63:3b:81:b8:82:a7:1a:30:52:d7:2a:6e:73:71:89:22:80:d8:
         28:12:75:23:18:ef:d7:64:05:75:ba:58:a9:7f:b8:34:da:c5:
         d5:3f:6b:83:34:3c:21:52:c1:88:2a:ab:98:0e:e6:c1:e6:f2:
         e4:ee:1f:f8:67:42:d5:08:9f:18:d9:f3:b4:18:6b:ad:c6:c6:
         fa:d8:3e:cc:91:00:bb:8b:85:ce:45:57:86:27:72:82:10:ee:
         3e:95:58:7b:a4:ef:26:c9:9e:d7:ec:18:43:4b:7e:51:28:f4:
         bb:9e:e0:5d:6b:01:39:f9:ac:89:c6:34:a5:fe:1f:30:b7:c2:
         59:0d:ba:59:ed:f1:91:41:d2:b3:7e:f2:32:f7:5c:95:c6:b4:
         f7:26:09:df:46:06:d8:85:28:9c:3e:c8:31:b5:40:d5:23:0b:
         fd:28:95:e0:3e:50:f3:f8:71:09:ac:a2:4e:66:df:94:d0:41:
         9c:bc:4e:1c:11:4b:51:df:11:7b:07:bf:08:26:2f:45:5b:25:
         4e:72:de:3a:72:4b:6e:94:7a:b7:19:96:db:07:bb:34:16:9e:
         27:cc:7e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:18 2024 by rpki-client on console-ams.rpki-client.org