Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa
File:                     3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (raw, json)
Hash identifier:          AzI/2bJav2Aj60o9IPwEY1AeK6Tbpch8Oq7GrpIqn/o=
Subject key identifier:   15:A5:F8:53:40:82:F7:83:30:E0:1B:76:C0:9C:C5:10:5E:4A:53:4A
Certificate issuer:       /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D
Certificate serial:       1FB0A294CF557E3BD5028E4077BBF470F081950D
Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa
Signing time:             Mon 01 Jul 2024 01:05:37 +0000
ROA not before:           Mon 01 Jul 2024 01:00:37 +0000
ROA not after:            Mon 30 Jun 2025 01:05:37 +0000
asID:                     63497
IP address blocks:        103.134.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl
                          rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b0:a2:94:cf:55:7e:3b:d5:02:8e:40:77:bb:f4:70:f0:81:95:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D
        Validity
            Not Before: Jul  1 01:00:37 2024 GMT
            Not After : Jun 30 01:05:37 2025 GMT
        Subject: CN=15A5F8534082F78330E01B76C09CC5105E4A534A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5d:f4:e5:41:fb:a8:e2:67:c2:0a:28:c5:23:
                    d8:fd:02:a7:f0:80:08:9d:52:10:d5:90:b6:18:72:
                    41:9e:bd:95:37:a9:48:d1:76:ed:ea:6a:1a:27:b1:
                    c3:e5:8e:6c:cd:a1:5a:e2:44:ba:f9:f3:bf:9b:80:
                    60:37:8a:c3:70:62:58:c3:ad:71:58:3d:c2:ab:67:
                    e9:80:7e:20:e3:16:d7:ce:21:d4:ba:ac:23:31:22:
                    28:76:bb:fd:9b:90:26:66:0d:e9:ea:b8:09:d9:e6:
                    51:ef:62:56:7b:74:aa:0f:4e:e1:28:e1:08:26:c6:
                    50:24:6c:e9:d6:35:46:98:b5:1c:4f:2f:36:d3:04:
                    4b:50:3c:f1:85:19:9c:d4:e8:7c:c8:2e:33:d2:13:
                    cf:27:bf:1c:d2:d4:6a:be:ea:43:34:db:30:78:a1:
                    f8:ab:91:04:1e:04:37:ae:55:c2:9f:54:c1:c6:5c:
                    8e:17:98:02:7e:3c:8d:50:6f:fa:21:e2:db:9d:19:
                    c3:be:7c:a9:82:ed:c4:43:9f:56:ae:e6:ac:88:48:
                    00:3a:c0:df:f5:da:49:c7:2a:b6:a8:f9:74:c6:2c:
                    d1:73:9d:05:a9:75:25:f6:c3:ca:e8:2f:6c:a5:88:
                    cb:04:a2:c3:21:a3:79:5d:93:a2:cb:92:89:ff:cf:
                    c1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A5:F8:53:40:82:F7:83:30:E0:1B:76:C0:9C:C5:10:5E:4A:53:4A
            X509v3 Authority Key Identifier:
                keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:30:78:59:1f:2b:c3:18:5c:a9:23:db:d1:00:91:4f:e6:07:
         34:0e:5e:b8:f4:dd:1a:c0:e9:ff:df:ab:d6:dc:ba:65:c0:b0:
         95:85:64:fb:18:52:db:fc:03:fd:3a:08:f3:e0:e5:99:1a:02:
         28:e6:59:2d:c7:87:0a:2f:10:a8:eb:d8:1d:7c:23:11:72:63:
         b8:9f:ea:9e:9f:54:52:24:27:ca:bf:26:a4:54:82:3f:91:97:
         9f:b3:2c:fc:bb:03:61:93:78:55:a0:92:34:b0:ff:e3:10:7c:
         3d:0e:e4:28:e8:f3:76:c9:d5:89:dd:b4:f9:1c:9f:4a:ac:2b:
         17:c5:11:e3:ad:d4:dd:1e:90:cb:19:76:ca:84:d5:1c:62:3c:
         b7:55:f8:dc:57:3a:f6:b0:81:61:2e:d6:c4:e7:df:d0:1a:72:
         b5:77:04:97:a0:1f:17:b0:fa:64:95:7d:e9:48:40:51:23:58:
         99:46:65:18:9f:32:4f:fd:bf:d4:c5:3c:54:af:e5:e6:c8:ea:
         11:d0:01:d9:52:03:79:d3:a0:bb:1c:2f:2e:e7:84:20:63:07:
         11:fa:79:35:b5:c2:75:8c:8d:1a:ae:c9:0a:68:03:b1:6e:fd:
         6a:aa:cf:94:c6:af:22:b2:e0:5d:61:e1:75:38:b6:8d:1f:9f:
         3f:92:73:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:20:19 2024 by rpki-client on console-ams.rpki-client.org