Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa
File:                     3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa (raw, json)
Hash identifier:          GVRHm16feyPAS+aWesRTm8bByg/25uedi7NztnO62PU=
Subject key identifier:   DF:F4:6F:9F:47:75:B5:9E:C3:AC:78:B5:72:BA:CB:46:EF:21:F2:9B
Certificate issuer:       /CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85
Certificate serial:       72F91D613E67F6DE5DFD90F80F9E8F31ABEB4BF4
Authority key identifier: 13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa
Signing time:             Sat 02 Mar 2024 03:00:00 +0000
ROA not before:           Sat 02 Mar 2024 02:55:00 +0000
ROA not after:            Sat 01 Mar 2025 03:00:00 +0000
asID:                     150921
IP address blocks:        103.196.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl
                          rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f9:1d:61:3e:67:f6:de:5d:fd:90:f8:0f:9e:8f:31:ab:eb:4b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85
        Validity
            Not Before: Mar  2 02:55:00 2024 GMT
            Not After : Mar  1 03:00:00 2025 GMT
        Subject: CN=DFF46F9F4775B59EC3AC78B572BACB46EF21F29B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:71:dc:35:96:3f:39:90:b0:ac:82:72:be:47:
                    49:b5:13:b5:d8:12:8d:fd:cc:56:01:24:4b:be:f5:
                    52:35:f5:84:c9:e1:34:a6:21:aa:3f:0a:a2:bf:73:
                    e9:5b:45:8b:19:a5:58:f8:8c:ce:ae:09:7d:cb:0d:
                    f5:2f:41:d2:7e:30:27:49:ea:dd:86:ae:07:a9:55:
                    7b:78:9b:b8:13:91:5c:19:5b:05:e6:b3:9b:55:99:
                    d9:49:4e:91:37:d2:e0:df:d1:9a:90:61:00:e8:9a:
                    52:72:81:ff:36:fc:5c:d7:22:47:88:75:9c:65:49:
                    b3:f2:af:4d:eb:d1:c2:93:e9:04:2b:71:c9:08:e6:
                    0e:87:06:95:be:42:04:c3:52:21:73:21:da:c1:94:
                    54:31:95:b3:00:6b:8b:91:bb:79:e5:8b:0f:b2:cd:
                    03:9d:28:71:05:a2:c0:3c:61:54:a6:1c:b9:27:07:
                    da:de:62:39:be:9e:ed:27:00:bd:8d:b3:9c:78:f1:
                    2f:7c:76:ab:be:56:47:05:8b:d5:6f:ec:5a:4c:0c:
                    cb:ce:d3:89:d8:2a:0f:bc:c6:38:3b:7f:66:2f:94:
                    cc:94:66:25:fe:9e:56:45:76:18:5e:05:42:f7:92:
                    03:70:2f:85:a3:4d:3e:e8:94:23:00:3c:83:eb:b3:
                    50:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F4:6F:9F:47:75:B5:9E:C3:AC:78:B5:72:BA:CB:46:EF:21:F2:9B
            X509v3 Authority Key Identifier:
                keyid:13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:ee:ee:f2:c0:fc:bb:19:be:fb:6a:6e:ae:30:b9:6a:68:da:
         13:0e:79:81:31:22:d8:b6:ea:c0:ee:c7:26:31:55:2d:99:94:
         c6:ec:8a:f8:1f:c6:ad:74:2d:f3:53:2d:e7:a8:71:da:4c:3f:
         28:19:e6:c2:46:23:a9:04:f4:41:a4:34:53:ef:3c:4b:30:d2:
         51:74:5b:cb:86:88:6f:25:bb:6d:75:d6:0f:59:69:50:1f:a5:
         4f:c3:a1:e8:ee:fb:a7:1d:47:7b:d9:2c:01:a7:41:c3:d6:59:
         12:54:5f:2b:50:b3:de:1a:e9:c3:ea:1d:29:7f:0b:90:ff:aa:
         5b:9f:25:6b:e3:39:65:37:2b:af:0d:8f:12:3a:2a:93:f5:78:
         9d:46:44:2e:e1:81:b7:41:11:0d:e3:ff:41:a2:00:13:7d:e5:
         85:ca:b1:51:07:0f:c4:da:25:80:13:c9:8d:6c:d0:01:ab:f0:
         4f:72:91:ef:01:3f:87:c9:a8:ef:f6:10:f4:c2:b3:13:89:d4:
         eb:f0:ca:e9:6b:85:dd:1e:ff:0b:cf:93:63:99:12:6a:59:35:
         d8:de:67:8a:84:b4:a3:b2:f6:e5:03:a9:09:73:fb:fd:60:8d:
         b1:68:2e:d3:cd:5c:62:f8:04:c6:bb:7e:93:73:33:15:cf:c7:
         fc:cb:5d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:20:19 2024 by rpki-client on console-ams.rpki-client.org