Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa
File:                     3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (raw, json)
Hash identifier:          Juqtcnw5dFFu5T73BMr7UKHzv1aKbgUnoCmnBMU/IDI=
Subject key identifier:   88:A1:EE:95:57:B7:4A:5F:55:EE:BD:EC:55:11:73:46:66:D5:FC:25
Certificate issuer:       /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7
Certificate serial:       734DF85B297EE229CFC11D9DB7FA03758AC78888
Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa
Signing time:             Tue 09 Apr 2024 10:00:01 +0000
ROA not before:           Tue 09 Apr 2024 09:55:01 +0000
ROA not after:            Tue 08 Apr 2025 10:00:01 +0000
asID:                     150935
IP address blocks:        103.109.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl
                          rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 03:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:4d:f8:5b:29:7e:e2:29:cf:c1:1d:9d:b7:fa:03:75:8a:c7:88:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7
        Validity
            Not Before: Apr  9 09:55:01 2024 GMT
            Not After : Apr  8 10:00:01 2025 GMT
        Subject: CN=88A1EE9557B74A5F55EEBDEC5511734666D5FC25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:53:78:8d:56:d7:04:25:c3:a9:86:cb:d5:0e:
                    d7:66:1d:67:ba:fe:b4:2d:9b:03:96:8e:f3:7a:53:
                    02:7a:92:0a:5a:3f:49:9d:de:89:21:40:1a:6e:50:
                    83:0c:a6:79:88:f2:d1:88:9d:85:05:b2:6d:6c:56:
                    64:1b:4c:53:8f:66:75:e0:80:60:a5:dc:d3:8b:39:
                    45:47:59:4e:d6:22:36:ad:b0:d6:bd:af:73:13:36:
                    5b:c0:69:cb:5b:88:f8:b6:c7:0f:fd:9e:63:9f:e9:
                    ae:da:f7:0f:a0:f8:45:e9:60:0d:46:40:0f:ff:2d:
                    98:e0:b4:4c:1f:26:02:74:44:80:1e:c7:62:76:10:
                    88:a1:fd:0d:68:49:23:9f:af:52:72:14:24:c4:c6:
                    82:88:6d:2e:e8:da:36:91:6e:a7:f2:80:51:69:9f:
                    c6:a8:06:7d:8d:b9:84:cc:dd:39:64:41:e4:68:7b:
                    73:5f:82:55:c6:1a:e6:c4:a3:9a:e1:71:3a:f3:46:
                    38:37:a6:88:73:33:64:f3:9f:14:dd:a8:ac:96:ce:
                    ae:42:b8:fb:60:3f:a6:df:7b:e6:4b:1f:e2:63:f5:
                    7c:b0:a9:e5:87:8f:b9:7f:4a:6f:bc:f8:4d:a8:b0:
                    dc:76:48:21:77:41:81:db:c2:c8:23:33:c3:91:f7:
                    0a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A1:EE:95:57:B7:4A:5F:55:EE:BD:EC:55:11:73:46:66:D5:FC:25
            X509v3 Authority Key Identifier:
                keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:7e:d2:dd:77:a4:97:b4:ab:f4:2c:e6:95:be:f1:8b:c7:39:
         c4:70:ea:9d:d1:bb:64:b0:00:19:01:fb:f5:ed:73:9a:c7:ea:
         3f:44:27:b8:0b:53:f0:dc:dc:95:02:25:26:ca:b6:ed:27:c2:
         b2:3e:5d:64:4b:e2:67:b8:bb:71:af:a0:c6:e7:82:88:b0:b0:
         e5:24:be:e0:32:92:0d:69:59:c6:50:37:35:25:69:b4:00:29:
         e4:b7:63:ae:d7:a7:68:fd:d8:78:0a:08:5e:21:32:b8:24:42:
         3e:ec:0e:54:21:60:6e:77:99:ea:41:5f:91:e7:7d:c5:f9:b8:
         45:06:f3:f2:dc:7c:86:df:6b:f5:91:ad:c4:3b:ee:1f:54:e7:
         6f:86:32:5c:d7:f5:b1:7f:33:8f:a2:29:60:db:65:0d:3c:28:
         c6:96:6e:be:f6:77:9d:16:7b:cb:1d:fb:b3:39:ea:be:0c:14:
         9b:48:69:0a:7a:f8:72:4f:c4:3f:54:29:a0:b7:1c:d3:2d:7d:
         d2:6c:41:d5:ce:8a:5d:a0:c3:c5:e2:6a:bb:de:ec:46:ef:72:
         b9:02:66:b1:b1:b5:64:d3:d6:60:b7:cf:83:88:b3:51:03:e1:
         ac:92:c9:07:cb:42:25:f9:86:d0:00:92:9f:72:09:df:71:1f:
         24:dc:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:00:30 2024 by rpki-client on console-ams.rpki-client.org