Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/3130332e3138352e34342e302f32332d3234203d3e20313339343536.roa
File:                     3130332e3138352e34342e302f32332d3234203d3e20313339343536.roa (raw, json)
Hash identifier:          4U1h0qDJBkgksl0a6Csp0nCKWhBNxGON7ofYDCa65yQ=
Subject key identifier:   D7:ED:84:A0:3E:84:51:BE:DC:37:D2:DF:72:AC:A8:4C:AE:A1:6A:16
Certificate issuer:       /CN=FB138C203D8A14318A87CA5B1BC5A19CA221F056
Certificate serial:       5B4F65F3F02B9E54DC3D80021283315B83669F1E
Authority key identifier: FB:13:8C:20:3D:8A:14:31:8A:87:CA:5B:1B:C5:A1:9C:A2:21:F0:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/3130332e3138352e34342e302f32332d3234203d3e20313339343536.roa
Signing time:             Tue 06 Feb 2024 04:01:57 +0000
ROA not before:           Tue 06 Feb 2024 03:56:57 +0000
ROA not after:            Tue 04 Feb 2025 04:01:57 +0000
asID:                     139456
IP address blocks:        103.185.44.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl
                          rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 23:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4f:65:f3:f0:2b:9e:54:dc:3d:80:02:12:83:31:5b:83:66:9f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB138C203D8A14318A87CA5B1BC5A19CA221F056
        Validity
            Not Before: Feb  6 03:56:57 2024 GMT
            Not After : Feb  4 04:01:57 2025 GMT
        Subject: CN=D7ED84A03E8451BEDC37D2DF72ACA84CAEA16A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9b:d4:23:ee:41:bd:c4:e0:07:b0:b1:3f:ea:
                    ee:f7:ef:ce:68:27:0a:69:02:fa:b2:f2:05:fa:06:
                    a1:59:c3:cc:3b:82:55:ba:f3:4b:e1:77:51:0b:ea:
                    88:ef:f3:c4:f4:68:e9:77:1c:8c:09:f8:ad:2b:bc:
                    e9:d2:43:56:46:32:87:94:81:69:91:c6:85:85:1a:
                    3a:ae:52:a0:f0:d3:a1:f4:c6:65:72:17:c4:69:0e:
                    9f:e4:68:5e:e0:1e:26:fe:4d:a1:72:2a:ca:1c:de:
                    93:5c:34:0c:ba:2f:18:14:0f:a8:60:58:39:24:0f:
                    5f:82:04:89:67:86:ef:71:ce:7e:71:e3:c9:a9:f9:
                    57:43:d6:8b:a4:e3:e8:f5:b0:e8:ae:8d:f5:24:10:
                    f5:b7:7f:a2:d8:2b:1b:2c:a2:86:1b:4e:16:30:f0:
                    34:0a:2b:ea:0e:7c:cd:70:bb:d6:f1:bb:b2:4a:5c:
                    5e:27:07:fd:7e:0d:9e:ad:52:da:31:0c:4e:d8:eb:
                    e1:39:a1:03:5c:92:b7:71:22:c0:61:b0:b1:35:4d:
                    1a:e8:a6:9e:70:45:e5:b4:68:d8:5a:82:70:31:8f:
                    d2:ce:82:ed:cf:9e:d4:0f:db:e5:60:ee:60:fc:45:
                    77:53:5e:d9:99:e1:55:94:16:db:ad:9c:00:3b:88:
                    89:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:ED:84:A0:3E:84:51:BE:DC:37:D2:DF:72:AC:A8:4C:AE:A1:6A:16
            X509v3 Authority Key Identifier:
                keyid:FB:13:8C:20:3D:8A:14:31:8A:87:CA:5B:1B:C5:A1:9C:A2:21:F0:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/3130332e3138352e34342e302f32332d3234203d3e20313339343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:c5:f4:16:1a:93:9c:5d:32:80:a8:e3:d8:52:9e:bc:4a:2e:
         27:69:0e:3e:49:a1:40:b8:4a:77:4b:c8:74:20:52:20:d3:34:
         c1:d6:e0:95:c6:75:63:76:44:d5:4a:2b:b4:f9:97:e5:d7:51:
         4c:10:f3:9f:eb:d1:47:c4:16:5f:e7:47:57:78:83:9a:da:a5:
         5d:9a:ab:83:2b:b8:f8:53:00:80:69:44:59:ac:ca:26:9d:3d:
         fd:96:0f:aa:93:46:94:36:1b:02:76:56:b7:a5:ca:8e:13:71:
         56:fd:99:63:c7:c4:f2:fd:ba:7c:14:f1:3c:e0:41:b5:1b:5b:
         9b:19:aa:9c:bd:54:05:65:9c:00:fe:e7:4b:59:81:8e:01:82:
         b2:fe:ac:b5:21:18:a7:88:57:c7:a5:e6:b0:c6:9b:aa:91:72:
         7a:40:dc:47:8e:4e:23:7c:b4:2d:32:e4:4b:1c:ac:a9:88:12:
         0e:60:62:a8:44:20:c2:ce:44:0a:7f:a3:fe:98:90:68:75:8f:
         31:43:dc:b0:f7:56:65:d8:95:51:3e:39:ac:ca:41:c4:e2:53:
         76:2b:56:a5:73:76:96:4e:bd:58:23:63:ab:ff:84:8b:24:d8:
         60:3d:8d:0f:4e:43:4a:33:58:9c:e9:e5:2a:de:df:9c:8f:b5:
         de:5d:02:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:18 2024 by rpki-client on console-ams.rpki-client.org