Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa
File:                     3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (raw, json)
Hash identifier:          N8s8dFq4TNpWQyxUl9/UrWeAB+JY477G2vxj4+Vdmj4=
Subject key identifier:   ED:A4:01:FD:68:13:29:E0:BA:05:10:60:D0:E8:0B:3D:C8:1D:B9:62
Certificate issuer:       /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F
Certificate serial:       40F78B4D02F539DFB10A31A5D7B0A6F2191BF808
Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa
Signing time:             Mon 15 Apr 2024 08:00:00 +0000
ROA not before:           Mon 15 Apr 2024 07:55:00 +0000
ROA not after:            Mon 14 Apr 2025 08:00:00 +0000
asID:                     136112
IP address blocks:        103.92.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl
                          rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f7:8b:4d:02:f5:39:df:b1:0a:31:a5:d7:b0:a6:f2:19:1b:f8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F
        Validity
            Not Before: Apr 15 07:55:00 2024 GMT
            Not After : Apr 14 08:00:00 2025 GMT
        Subject: CN=EDA401FD681329E0BA051060D0E80B3DC81DB962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:a2:d9:77:49:84:dd:2f:9a:7d:f0:ce:a3:
                    13:a9:3a:1c:b0:06:78:1f:59:4b:64:32:14:d2:d7:
                    bb:07:e3:aa:b4:74:80:7d:e6:94:30:e8:e0:81:9f:
                    6f:41:0f:d0:bd:f7:49:bc:4e:9b:a3:19:62:dc:de:
                    cb:5f:06:45:03:ac:39:61:87:fc:09:79:56:10:4a:
                    7e:4b:e1:c7:a2:c0:92:ed:22:4c:25:c1:15:62:8d:
                    4c:f5:89:16:bb:07:f8:07:e7:5a:3f:14:78:ad:1e:
                    b7:e6:ec:26:a1:f7:78:f0:8a:b5:1c:f9:3e:e5:7d:
                    4e:3f:ba:0e:74:70:29:d4:9c:9e:6a:0a:40:0a:c8:
                    1a:e0:d7:35:ed:4e:7f:05:a2:9f:61:41:ac:94:da:
                    a0:6e:49:5c:31:bc:db:62:2a:df:c1:7f:58:c3:b6:
                    2a:71:39:98:c1:8a:18:2d:43:04:fd:7e:e3:47:5e:
                    91:5e:e8:51:cc:b0:d9:bd:8d:47:ad:46:e7:df:e7:
                    57:f3:db:6c:93:ae:03:22:8a:76:c9:dd:64:5c:d3:
                    61:ca:54:c4:86:0e:7b:c4:f8:f7:bf:01:3d:07:0a:
                    a2:ee:2b:ba:f6:b5:36:83:d5:1d:4f:56:91:ed:c3:
                    70:20:02:8b:d5:b0:ef:27:51:7c:56:ad:9f:ec:53:
                    83:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A4:01:FD:68:13:29:E0:BA:05:10:60:D0:E8:0B:3D:C8:1D:B9:62
            X509v3 Authority Key Identifier:
                keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:05:6e:0a:8c:6d:60:46:b4:5c:88:63:76:2f:e4:09:b8:1f:
         a4:7e:fa:cd:b4:03:72:58:c0:08:bf:2c:f2:db:54:70:51:1c:
         a7:f9:14:0c:e5:c7:3a:49:f8:f7:56:e2:4e:89:16:37:f1:e0:
         c7:6f:95:a6:6f:49:f7:15:ca:d1:52:63:3d:a6:43:48:cf:aa:
         22:aa:9e:0c:07:33:d4:57:8a:77:ba:d7:30:90:f2:7b:6e:7f:
         32:a0:72:a7:8a:92:c7:5e:d9:1a:9d:fd:cd:45:70:fe:bc:96:
         3f:5b:84:27:22:e5:ee:da:03:8d:c4:56:c5:bf:0a:97:c9:3c:
         1d:9e:08:53:97:a6:e5:03:a2:31:2f:42:10:22:b2:91:77:ff:
         02:3d:cd:ab:9b:e3:5e:aa:6d:ec:cb:05:7d:03:64:69:b4:ea:
         68:8e:d1:60:80:34:84:f0:a3:36:89:e9:09:70:51:80:e9:b7:
         05:6d:c3:7e:25:99:c2:8d:4c:d6:c5:49:c8:5b:5a:1a:2c:b7:
         07:98:95:6f:5b:96:a6:ae:6e:cf:14:56:b4:8b:79:24:07:59:
         8e:0e:6d:b5:db:04:a4:ee:8a:e4:23:8f:14:15:c5:f4:fd:3e:
         f9:bb:bb:8e:3a:78:0b:59:00:3b:96:c2:33:25:8a:27:92:df:
         38:78:12:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 11:26:38 2024 by rpki-client on console-ams.rpki-client.org