Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa
File:                     3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa (raw, json)
Hash identifier:          VLjHM4YlnI1AUzMWzTfbmvoXH2VoufJGdhFCyvKy/AM=
Subject key identifier:   31:D5:0C:76:58:56:D3:97:5C:86:F4:6F:CF:A5:BE:DD:54:2A:E0:B4
Certificate issuer:       /CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9
Certificate serial:       55D7DB8DBB581647FCEA8E172BD33F40A7662F06
Authority key identifier: EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa
Signing time:             Mon 01 Jul 2024 01:02:24 +0000
ROA not before:           Mon 01 Jul 2024 00:57:24 +0000
ROA not after:            Mon 30 Jun 2025 01:02:24 +0000
asID:                     136081
IP address blocks:        103.86.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl
                          rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d7:db:8d:bb:58:16:47:fc:ea:8e:17:2b:d3:3f:40:a7:66:2f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9
        Validity
            Not Before: Jul  1 00:57:24 2024 GMT
            Not After : Jun 30 01:02:24 2025 GMT
        Subject: CN=31D50C765856D3975C86F46FCFA5BEDD542AE0B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a2:a4:b5:80:61:89:61:3f:79:f7:2f:00:7e:
                    5f:a9:22:f2:6d:5e:e9:bb:18:1b:55:29:9a:a3:b2:
                    1a:b0:4a:41:2e:be:66:a1:5b:f3:27:2a:95:ab:e5:
                    07:92:3d:a8:b8:94:cc:e8:11:c6:1e:64:39:28:6a:
                    fc:c8:d4:fd:f1:56:14:b0:79:bb:59:4a:c7:71:12:
                    d5:c1:41:f6:92:55:c3:d1:df:75:a9:f2:61:8e:3e:
                    45:b9:80:60:d4:c2:0b:30:37:f8:5e:84:00:19:b2:
                    e4:b0:8f:fe:91:90:9f:3d:43:41:75:e9:39:69:85:
                    4e:6f:eb:cd:06:d7:03:f6:9e:90:a3:41:48:06:91:
                    40:0b:5f:24:2e:70:f7:6d:fd:2a:c3:d6:2f:50:2f:
                    16:00:57:38:1a:24:1d:3c:07:23:17:1a:f2:6a:6a:
                    b9:e9:d8:94:7d:ca:db:f1:6f:9f:63:85:a2:14:e7:
                    fe:83:2d:79:3e:38:6a:01:c8:ba:28:2f:0b:e7:3b:
                    4c:0e:d6:5d:14:56:ef:16:21:7a:54:4a:92:58:be:
                    9a:ee:21:43:72:16:05:f0:f7:68:cd:0b:e9:b0:d1:
                    33:2a:e3:09:09:3c:02:88:c5:14:5e:43:c0:a2:ae:
                    30:55:17:98:0a:14:61:f1:51:31:f0:57:10:66:3d:
                    c2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D5:0C:76:58:56:D3:97:5C:86:F4:6F:CF:A5:BE:DD:54:2A:E0:B4
            X509v3 Authority Key Identifier:
                keyid:EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:0c:b1:06:80:fc:93:e0:e9:b1:dc:b0:02:91:ec:ed:43:d2:
         d5:f2:55:03:0a:64:65:3d:2b:d7:d9:b9:f5:83:19:0f:a8:c3:
         b9:5d:96:7e:68:d1:e1:e6:f9:5e:c5:77:0d:b2:21:63:a6:50:
         3e:b0:e8:7d:be:bb:99:a2:77:3b:7a:ed:81:96:55:93:19:46:
         dd:96:10:17:ef:ed:a7:a8:b7:3f:e0:9c:96:a5:08:a5:c7:2e:
         02:a1:b9:e3:3c:83:80:cb:a0:33:d6:26:86:bf:aa:41:ba:ed:
         94:e3:57:9f:11:f8:b5:a9:ae:3a:5e:a2:e3:f5:99:f6:69:9b:
         82:09:94:77:82:e2:38:8a:9f:1f:3c:23:1d:bf:87:89:cc:b2:
         b2:9b:0d:f0:3c:8a:53:48:ba:9c:3f:37:d1:e5:5f:f4:c8:b3:
         a6:ab:a5:2b:73:65:e9:6b:91:75:6e:d1:59:6d:61:13:7b:66:
         e6:37:1e:6a:77:3c:d4:6f:9a:0f:97:8c:d5:73:3b:98:9a:20:
         a5:42:8d:d1:ed:13:91:d2:f3:bc:b1:07:e0:38:97:46:1b:ec:
         bd:a4:1c:d9:17:19:01:51:e5:42:fc:2b:1e:b8:20:68:7a:dd:
         84:f3:8a:d0:3a:34:e9:b3:a4:08:58:71:b9:d4:79:fb:b6:65:
         09:32:44:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:21 2024 by rpki-client on console-fra.rpki-client.org