Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa
File:                     3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (raw, json)
Hash identifier:          L70TfedRiAwbvBLHEjNY7ygsdEFoED/WYYpjm09FWPc=
Subject key identifier:   0F:25:67:30:BA:AA:2F:04:C8:FF:A4:5B:6E:4D:4A:85:A2:F0:29:76
Certificate issuer:       /CN=34D127CE360B682CEC5998F9625C80D9C841DF3A
Certificate serial:       15D71068632F656A5A3D3B96131C1DC7C4168812
Authority key identifier: 34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa
Signing time:             Fri 21 Jun 2024 08:00:00 +0000
ROA not before:           Fri 21 Jun 2024 07:55:00 +0000
ROA not after:            Fri 20 Jun 2025 08:00:00 +0000
asID:                     138901
IP address blocks:        103.139.188.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl
                          rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d7:10:68:63:2f:65:6a:5a:3d:3b:96:13:1c:1d:c7:c4:16:88:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D127CE360B682CEC5998F9625C80D9C841DF3A
        Validity
            Not Before: Jun 21 07:55:00 2024 GMT
            Not After : Jun 20 08:00:00 2025 GMT
        Subject: CN=0F256730BAAA2F04C8FFA45B6E4D4A85A2F02976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d6:7e:a2:8c:da:3b:9d:c4:1a:e0:d0:a6:47:
                    d2:4d:ff:35:21:64:d1:99:bf:6b:ea:7c:01:f2:ed:
                    ac:80:12:19:13:41:c9:2f:db:9d:5f:3b:9d:ae:46:
                    85:1e:a8:11:f1:9d:14:cf:33:21:70:bf:31:75:cd:
                    9f:1a:49:8a:bb:6b:7d:62:00:c7:49:ed:64:93:22:
                    f4:47:11:6e:fd:eb:6a:8a:4d:d3:9f:8f:56:25:07:
                    68:92:03:1a:61:1b:5a:13:af:13:e8:19:22:fe:a8:
                    0c:e6:2b:02:ce:54:08:64:5d:63:1b:21:6f:c5:29:
                    7e:44:7f:3b:50:d4:d6:af:db:44:ac:93:53:72:f2:
                    55:02:22:9f:da:41:3e:50:89:30:8e:4e:e2:a8:b9:
                    ed:3f:4e:22:6e:7f:b3:84:97:c7:a4:d5:ed:56:f3:
                    84:59:8c:26:fd:bd:07:14:e5:d9:c4:f9:72:3f:6a:
                    9b:b6:65:a3:35:c5:4a:c2:1f:d0:14:5c:70:3a:79:
                    a1:4d:64:81:e0:86:76:05:24:e5:aa:18:ce:d6:c5:
                    83:a6:46:5c:12:28:bc:20:c8:50:35:63:61:90:ba:
                    a6:03:fb:11:9d:95:da:bd:3e:98:63:63:cd:31:7e:
                    4f:a7:ae:fa:b5:55:95:ed:80:79:c1:ac:b9:be:08:
                    4a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:25:67:30:BA:AA:2F:04:C8:FF:A4:5B:6E:4D:4A:85:A2:F0:29:76
            X509v3 Authority Key Identifier:
                keyid:34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:56:4e:b4:57:f0:fd:ff:62:49:e1:79:c0:15:bd:2d:7e:b8:
         3d:2a:0c:09:02:1a:40:de:31:d3:a1:ed:d8:ba:55:d5:c4:20:
         80:52:43:9f:9f:b1:1d:7a:ce:15:ed:14:d0:f7:38:78:59:01:
         36:7f:75:f1:74:53:71:b4:11:5b:70:0a:fe:05:7b:d3:63:81:
         b2:12:9f:d9:48:a7:e3:7a:41:75:10:a0:0b:2e:a8:ac:1f:95:
         a1:73:13:64:4c:af:5f:df:25:bb:97:24:34:31:48:b4:68:44:
         8f:a6:ad:5f:95:3f:20:80:88:1a:82:06:01:70:f5:52:19:de:
         bb:fc:54:c8:1e:48:c7:14:39:63:56:dc:a2:69:ff:1d:f0:36:
         74:24:07:4e:0f:af:bf:15:7a:6a:f0:ef:9b:11:57:e1:1e:a9:
         1b:02:cd:04:d2:78:17:20:ee:ef:53:b9:92:d5:dd:56:50:ef:
         27:bb:e5:15:c7:d9:48:ae:30:47:53:d7:09:ba:70:c3:13:54:
         36:ae:a3:60:80:cb:aa:e6:c9:cc:60:7d:32:72:cc:50:e6:bd:
         97:d0:92:00:9c:58:5a:e3:99:6c:17:a1:4e:4f:e8:0f:a6:b8:
         7a:0b:c4:59:f7:fa:3d:ae:06:fe:e0:b1:7d:4c:cc:f9:0d:2d:
         63:3a:a6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:32 2024 by rpki-client on console-ams.rpki-client.org