Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/3130332e3135352e3130342e302f32342d3234203d3e20313431303531.roa
File:                     3130332e3135352e3130342e302f32342d3234203d3e20313431303531.roa (raw, json)
Hash identifier:          FmdjJxKcrI9VbGcSC6mZKn3MCYuK+3bWf6P7ckwmJHg=
Subject key identifier:   FA:A9:85:3C:EF:A7:1B:D9:06:B1:FF:33:12:3F:EB:05:E5:8E:5C:BD
Certificate issuer:       /CN=94980F009D62A16111BD1186549F0579B0CED71F
Certificate serial:       365C26AE0153ACC3C71E790D8055524881BE36C1
Authority key identifier: 94:98:0F:00:9D:62:A1:61:11:BD:11:86:54:9F:05:79:B0:CE:D7:1F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94980F009D62A16111BD1186549F0579B0CED71F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/3130332e3135352e3130342e302f32342d3234203d3e20313431303531.roa
Signing time:             Sat 05 Oct 2024 05:00:02 +0000
ROA not before:           Sat 05 Oct 2024 04:55:02 +0000
ROA not after:            Sat 04 Oct 2025 05:00:02 +0000
asID:                     141051
IP address blocks:        103.155.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.crl
                          rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94980F009D62A16111BD1186549F0579B0CED71F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5c:26:ae:01:53:ac:c3:c7:1e:79:0d:80:55:52:48:81:be:36:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94980F009D62A16111BD1186549F0579B0CED71F
        Validity
            Not Before: Oct  5 04:55:02 2024 GMT
            Not After : Oct  4 05:00:02 2025 GMT
        Subject: CN=FAA9853CEFA71BD906B1FF33123FEB05E58E5CBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:0a:b7:18:e4:72:a2:1c:ae:2f:22:d5:ef:b6:
                    19:3f:0b:62:ab:06:1a:86:4b:c5:9c:88:61:0f:d1:
                    41:c1:40:1a:5b:15:44:e3:75:88:9c:b2:a5:19:a8:
                    f1:6a:0f:3c:fd:eb:1a:f9:a5:e9:f2:02:3c:d9:05:
                    25:ce:29:22:bc:f2:1c:b1:b5:3e:1a:f1:bf:2c:1d:
                    9b:9b:1e:1f:6d:ea:9a:5a:ef:42:af:75:78:d2:79:
                    57:2b:27:d5:d9:2b:0c:87:98:55:ef:29:13:01:20:
                    6b:1f:52:66:dd:8f:f0:fd:bf:ba:46:7f:22:84:bd:
                    ce:9d:a7:63:4b:f6:74:68:de:52:22:ab:b6:8a:63:
                    f4:e5:e8:d8:91:63:59:32:72:fd:5b:aa:8c:dc:19:
                    17:fb:a2:25:25:30:ac:c5:a0:00:59:88:7d:66:36:
                    e6:90:4c:1b:f4:5c:75:c2:46:60:1f:59:a5:d7:25:
                    0b:a5:c1:2e:9a:db:f4:d4:1c:af:0e:2a:f6:d2:15:
                    78:d3:3f:6c:c2:dd:cb:3a:b8:db:23:24:11:0f:3f:
                    12:bf:e2:98:ad:8d:f4:0a:4f:00:03:2e:db:8e:ba:
                    59:22:fe:b4:c3:ce:42:ae:e7:5c:01:02:cb:0b:73:
                    48:8b:c8:fe:2e:6a:55:eb:88:7a:7f:ce:ee:fb:5a:
                    ff:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A9:85:3C:EF:A7:1B:D9:06:B1:FF:33:12:3F:EB:05:E5:8E:5C:BD
            X509v3 Authority Key Identifier:
                keyid:94:98:0F:00:9D:62:A1:61:11:BD:11:86:54:9F:05:79:B0:CE:D7:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94980F009D62A16111BD1186549F0579B0CED71F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/3130332e3135352e3130342e302f32342d3234203d3e20313431303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:83:88:a7:16:45:6a:4b:6d:51:b0:b1:97:9d:e1:e3:f2:42:
         d7:e6:3b:0d:48:43:00:24:b7:38:f8:a7:03:4e:b0:c6:7e:32:
         d8:5a:a4:5f:a0:04:75:93:7c:83:bd:7d:cf:46:2b:d2:a3:31:
         ab:74:98:60:14:f6:f7:62:4f:64:6a:94:06:61:be:bd:55:c5:
         a4:c4:74:05:7f:69:38:2f:7b:36:7b:8f:07:13:42:2b:02:2d:
         7a:59:1f:6f:09:a9:e6:41:de:3b:52:47:30:ca:75:7a:e6:34:
         cb:e3:67:e1:34:84:19:ac:bd:7f:6b:b6:7c:05:fa:d5:d3:c0:
         a3:a3:b3:a1:3f:ca:07:8c:bd:20:e6:90:d3:6b:00:bb:36:49:
         7b:d4:14:1b:f5:ae:b9:4c:27:94:de:3d:e8:2a:e2:bd:a2:59:
         41:a5:db:87:4a:5d:2f:06:4c:5b:25:b6:6f:dd:e9:3a:28:8d:
         40:87:1a:ba:99:d2:2c:49:d0:42:53:69:24:6d:56:72:93:2d:
         ac:97:e8:b7:e9:4e:69:2f:e9:62:df:ba:80:85:8b:fd:32:82:
         13:fa:49:fe:0d:07:55:d6:0f:22:cd:b6:a4:a3:32:62:5c:bb:
         39:d2:9c:6f:ff:67:ab:96:ac:86:55:bc:01:ab:2e:2a:26:f0:
         5c:d9:d4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:39 2024 by rpki-client on console-ams.rpki-client.org