Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/3130332e35352e32382e302f32342d3234203d3e20313530343837.roa
File:                     3130332e35352e32382e302f32342d3234203d3e20313530343837.roa (raw, json)
Hash identifier:          OWN6QS4tvhLLIWetZNv4iqkNCXq5fPQXYFc1C2JdOlM=
Subject key identifier:   7D:0D:92:78:76:7F:A1:27:35:C1:3C:B6:69:C1:89:09:1D:22:F4:92
Certificate issuer:       /CN=FA86E23853549D2EF1D9F9C9222147A550E36A38
Certificate serial:       6A9AF46113528BEFC607AD055792247620730B51
Authority key identifier: FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/3130332e35352e32382e302f32342d3234203d3e20313530343837.roa
Signing time:             Sun 31 Dec 2023 04:43:59 +0000
ROA not before:           Sun 31 Dec 2023 04:38:59 +0000
ROA not after:            Sun 29 Dec 2024 04:43:59 +0000
asID:                     150487
IP address blocks:        103.55.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl
                          rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9a:f4:61:13:52:8b:ef:c6:07:ad:05:57:92:24:76:20:73:0b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA86E23853549D2EF1D9F9C9222147A550E36A38
        Validity
            Not Before: Dec 31 04:38:59 2023 GMT
            Not After : Dec 29 04:43:59 2024 GMT
        Subject: CN=7D0D9278767FA12735C13CB669C189091D22F492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a5:50:fa:2f:d7:46:22:f0:87:d3:ee:6c:6e:
                    2d:06:b0:ea:a8:8c:1d:43:4f:02:b7:0d:6f:4b:f6:
                    95:cc:b7:5a:b6:cc:f5:81:c5:9c:7f:b2:12:af:37:
                    cf:35:c2:aa:38:72:b5:eb:93:ef:b5:56:3c:18:a0:
                    1f:0d:27:e3:20:50:e1:8a:fb:15:d2:1a:f5:f8:a4:
                    6b:7a:10:fe:92:53:de:c7:94:58:b1:3b:b2:cd:57:
                    0d:61:01:4b:4b:6b:e3:6d:c3:cb:54:94:f5:ed:3b:
                    4f:a8:96:0e:73:ad:5e:53:73:30:29:35:5d:3f:f0:
                    90:7b:b0:0d:21:a0:5e:5d:6c:8a:91:78:05:10:36:
                    f9:94:aa:af:be:d3:a0:ca:89:4e:00:42:9c:aa:aa:
                    f5:d0:93:ee:f3:06:da:f3:eb:ea:10:6e:9d:85:00:
                    47:df:6b:14:12:fc:bc:32:69:64:97:fc:8c:c8:91:
                    ba:1d:69:72:2e:30:06:53:36:3d:a5:61:b5:49:9d:
                    2e:98:f3:05:70:a0:d9:c0:4c:d6:81:f5:ad:1c:3a:
                    e7:e3:ac:a3:67:9a:69:79:e5:f6:3e:c2:bc:59:11:
                    a1:fc:98:af:2f:79:b2:7a:9e:b1:e9:2b:d2:78:fc:
                    3e:8e:da:a1:91:be:46:36:b3:ec:2e:4c:79:48:cd:
                    07:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0D:92:78:76:7F:A1:27:35:C1:3C:B6:69:C1:89:09:1D:22:F4:92
            X509v3 Authority Key Identifier:
                keyid:FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/3130332e35352e32382e302f32342d3234203d3e20313530343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:cf:98:b7:de:33:ba:ed:ac:11:db:cb:9d:7e:d3:0b:35:60:
         d6:ae:0f:53:7e:1d:d3:8a:07:c5:e4:1a:58:c7:37:aa:21:3a:
         4b:ac:d5:c4:b2:4d:73:03:de:6e:22:ba:aa:d0:94:18:7c:10:
         e3:c6:01:21:a9:e2:5a:b0:e3:46:ea:29:52:79:7d:72:25:e6:
         1b:34:9b:18:97:f8:1a:df:47:fa:52:d6:40:9c:30:73:cb:f0:
         ac:0c:f1:16:e9:60:8f:d5:d7:69:ee:55:04:6b:bb:3a:ae:18:
         36:90:d8:25:1c:cd:c1:b1:d5:ce:02:8b:1f:6f:42:cc:10:95:
         6b:08:6e:9b:78:ff:ad:42:a9:63:80:44:b3:09:05:05:c7:eb:
         d7:8b:1c:c8:e7:0c:e7:82:1b:e6:27:ca:ec:31:b3:7c:81:2c:
         f5:5a:b3:af:21:34:4f:d2:c1:8e:a2:10:73:49:ef:9a:b9:29:
         c0:68:45:8c:8d:21:e2:df:e3:5d:02:61:62:4e:da:f0:df:ac:
         7b:ee:c2:97:f1:2a:86:b1:3e:48:98:ad:3d:17:aa:3e:42:56:
         6a:c5:c1:18:4f:d8:80:1b:a2:b6:c4:09:d7:8b:1e:b8:c8:92:
         46:83:f7:ae:27:e9:50:bb:1b:96:27:32:9f:af:66:df:83:61:
         38:71:74:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 23:38:10 2024 by rpki-client on console-fra.rpki-client.org