Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa
File:                     3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa (raw, json)
Hash identifier:          50nF5RNG6ulp5/eIfTDrLrdRKQqI76egmRTbXjqjcB8=
Subject key identifier:   86:3C:33:46:D2:1C:BA:D3:83:E0:E3:2C:ED:CF:C0:AD:33:1C:45:E6
Certificate issuer:       /CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85
Certificate serial:       15E6E5E60A02FCC5DB892B898FBF925253DB0874
Authority key identifier: 13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa
Signing time:             Sat 01 Feb 2025 03:00:00 +0000
ROA not before:           Sat 01 Feb 2025 02:55:00 +0000
ROA not after:            Sat 31 Jan 2026 03:00:00 +0000
asID:                     150921
IP address blocks:        103.196.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl
                          rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 19:04:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e6:e5:e6:0a:02:fc:c5:db:89:2b:89:8f:bf:92:52:53:db:08:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85
        Validity
            Not Before: Feb  1 02:55:00 2025 GMT
            Not After : Jan 31 03:00:00 2026 GMT
        Subject: CN=863C3346D21CBAD383E0E32CEDCFC0AD331C45E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:23:fe:27:eb:2f:ba:72:c6:82:75:c9:17:
                    52:9c:1a:1a:00:d1:ee:1d:73:05:86:5e:2a:16:73:
                    3c:1b:d1:1c:43:67:d1:04:20:dc:3c:ac:71:ba:e6:
                    3e:42:50:e7:cb:68:ea:e6:4e:6f:61:68:13:e5:4b:
                    e5:c8:6d:98:3a:bb:f6:6c:9f:02:ea:73:14:15:58:
                    84:5a:d3:c0:f9:be:29:74:88:22:76:c6:31:fc:00:
                    fe:c1:a2:90:e6:7e:e9:84:57:70:e7:cd:aa:ee:9f:
                    e5:53:5f:41:9b:49:3e:d6:97:2e:ec:d7:32:37:fb:
                    90:54:14:d2:3c:ba:80:d9:ff:86:d7:b3:0e:31:1b:
                    a9:0a:d3:8c:c8:fe:eb:95:13:25:87:7c:d2:15:6a:
                    96:b9:12:f2:05:f7:82:2a:6c:e9:c2:78:5d:11:5b:
                    22:c6:7f:5c:d1:1b:0a:91:11:27:d0:9f:3f:fe:b5:
                    22:0c:44:bd:4b:1b:86:b0:83:a5:f4:38:6e:39:c0:
                    e8:6d:24:3d:a1:ed:cd:cb:6a:e1:97:7f:eb:0f:1f:
                    7c:eb:45:27:1f:4f:d9:5b:cc:8f:1a:82:f4:a4:e5:
                    42:ed:d4:ae:36:10:14:63:31:55:c8:24:61:14:34:
                    df:66:bf:6b:2f:07:90:ee:e3:87:75:5e:5b:c1:8b:
                    0c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3C:33:46:D2:1C:BA:D3:83:E0:E3:2C:ED:CF:C0:AD:33:1C:45:E6
            X509v3 Authority Key Identifier:
                keyid:13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:39:b6:a2:5f:29:f0:88:dd:33:9c:35:d5:d8:b1:97:30:93:
         c6:5a:60:9c:2e:9b:07:a1:4e:df:d8:79:b5:14:e4:26:47:52:
         c3:39:ef:ba:db:25:c0:af:67:f1:4c:23:0c:6d:20:df:c0:f7:
         b4:b5:3f:85:2a:a1:c0:8c:d1:d6:62:ce:ab:ba:5a:c6:2f:90:
         82:b6:09:e4:0f:af:fe:7f:c0:cc:d8:01:22:e9:44:47:54:a2:
         fd:fb:02:00:43:a3:da:74:dc:0a:aa:e9:55:59:93:39:d5:9a:
         50:73:ad:91:70:ea:ea:85:00:b6:2d:89:f5:51:af:a5:3a:4f:
         60:91:df:46:04:d4:26:d3:0b:e4:e0:73:d1:7d:dd:ba:1f:53:
         9e:fb:32:b2:2b:37:89:72:31:9f:0c:12:c8:ac:af:0e:68:08:
         d4:2f:7b:52:20:11:75:03:fd:6f:3c:47:34:b5:61:4f:3e:98:
         6d:f7:62:8d:95:dc:c9:42:64:48:a8:4b:af:e7:5b:78:13:dc:
         4f:ec:ec:81:b7:22:bb:e7:95:7b:4e:0c:27:f2:f6:a1:46:e3:
         77:ab:64:69:5b:88:9b:16:57:f0:ef:96:2c:72:5f:0a:44:df:
         4e:7e:68:a1:69:16:1e:49:3c:c3:fb:4e:bf:2f:7f:bb:8e:b7:
         d6:83:49:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:20:02 2025 by rpki-client