Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa
File:                     3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (raw, json)
Hash identifier:          4yHX21WHUo392SGtXw+8bz/7pbXAzszyaOP+6cp8BDY=
Subject key identifier:   70:E5:27:43:FA:6B:7D:D8:DD:0A:83:AA:D9:B0:91:33:BF:81:A9:6A
Certificate issuer:       /CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65
Certificate serial:       4F6AB40BFB2F2B6FD2E3C55B2B69F546255D6C25
Authority key identifier: E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa
Signing time:             Fri 13 Sep 2024 15:15:33 +0000
ROA not before:           Fri 13 Sep 2024 15:10:33 +0000
ROA not after:            Fri 12 Sep 2025 15:15:33 +0000
asID:                     139364
IP address blocks:        103.141.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl
                          rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:6a:b4:0b:fb:2f:2b:6f:d2:e3:c5:5b:2b:69:f5:46:25:5d:6c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65
        Validity
            Not Before: Sep 13 15:10:33 2024 GMT
            Not After : Sep 12 15:15:33 2025 GMT
        Subject: CN=70E52743FA6B7DD8DD0A83AAD9B09133BF81A96A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:5e:f4:04:d1:f5:1a:4b:b0:04:8a:e3:11:
                    bf:2a:d6:45:dd:26:cb:bb:b0:f7:da:7c:a7:d4:87:
                    ba:00:fa:a4:c0:79:74:e4:33:70:27:69:3e:f0:cd:
                    52:72:2e:d6:7b:40:2b:ea:01:a2:62:96:28:e9:f3:
                    48:e7:28:f8:d7:ed:1d:cb:e9:2a:dc:b8:06:05:a6:
                    d7:24:11:3a:ff:dc:f1:d0:f5:a8:25:4c:2b:39:7e:
                    c0:ae:54:9d:95:6f:22:5d:cc:98:b5:bd:45:8a:32:
                    e0:8f:64:d1:1f:3d:f9:57:ee:62:39:35:71:d6:c2:
                    bb:24:93:e8:75:34:dd:fc:14:4f:ee:ee:17:4e:9c:
                    36:5e:a7:2f:67:a8:92:e3:8a:a8:d9:d0:b3:cb:69:
                    75:e5:de:29:83:80:26:d0:42:c2:9a:66:57:17:0e:
                    72:98:1d:c5:f3:54:9d:56:25:78:0e:1f:09:f8:83:
                    9d:21:79:6e:06:f1:8e:e8:7b:25:2c:82:57:79:a4:
                    9b:46:e0:7e:37:7e:6f:81:81:e1:5a:c3:d3:f7:65:
                    64:6b:5b:6b:84:e4:11:d5:c8:a2:03:eb:ad:75:23:
                    05:a3:81:4d:e1:ae:2e:4d:df:99:63:ac:4c:7a:d9:
                    4e:bb:a6:b2:bb:df:2c:c2:c9:d9:bf:d7:aa:cc:91:
                    9a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E5:27:43:FA:6B:7D:D8:DD:0A:83:AA:D9:B0:91:33:BF:81:A9:6A
            X509v3 Authority Key Identifier:
                keyid:E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:eb:6f:de:a5:39:0a:23:75:9a:3a:1c:10:47:3a:91:4e:c8:
         66:68:45:21:7b:8e:38:66:61:33:50:b2:7b:13:97:f8:45:31:
         7f:f3:61:5c:df:f0:b5:12:a5:a9:fe:6c:64:2f:13:32:74:ea:
         e0:ea:c8:0d:a8:a9:3f:3f:10:ef:91:5f:33:5f:5b:e3:89:78:
         ae:18:1f:1e:c0:43:1d:36:7b:5f:99:49:27:15:1b:8b:ea:f1:
         a0:8f:f2:31:d6:40:bf:5c:b8:cc:97:e6:a8:fb:ce:e8:a1:52:
         eb:c3:7c:73:1c:27:a5:5f:bb:9f:eb:ce:f1:05:7d:53:ef:f3:
         71:5a:6d:75:79:c5:c5:ef:f4:aa:58:77:bd:0b:d8:6a:32:81:
         24:77:16:5e:3a:f7:80:1e:9d:6e:be:02:53:be:a2:0c:d5:84:
         9e:05:0e:17:b9:7c:5e:aa:75:84:e9:b8:c8:90:05:83:e0:1e:
         32:dc:ad:0b:6b:54:59:c2:4e:ca:7b:07:e3:3a:70:0e:87:ca:
         ab:bf:9c:57:9a:40:a6:12:b9:5a:23:ff:8e:8f:14:bf:98:4c:
         0f:25:4e:3e:ef:44:ff:a5:12:52:56:b2:0a:d5:70:67:7f:f3:
         60:5f:21:87:b0:38:c0:07:7b:7b:bf:2d:8a:19:3c:9e:64:25:
         f4:81:ff:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:39 2024 by rpki-client on console-ams.rpki-client.org