Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa
File:                     3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (raw, json)
Hash identifier:          irZR48VDhc2hc41mkd8akfhrTGrqLIWGk08gbYt8OLY=
Subject key identifier:   AE:48:CA:A7:5B:94:5A:E9:AD:DA:F9:CE:7D:10:B6:58:F6:88:E7:3D
Certificate issuer:       /CN=A532AD36631301388EC939BEB0F099FCDE956410
Certificate serial:       1D5CB7BF688CE309B8439B290C73C32C9176ADFC
Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa
Signing time:             Sat 05 Oct 2024 09:00:01 +0000
ROA not before:           Sat 05 Oct 2024 08:55:01 +0000
ROA not after:            Sat 04 Oct 2025 09:00:01 +0000
asID:                     141071
IP address blocks:        103.155.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl
                          rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 21:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5c:b7:bf:68:8c:e3:09:b8:43:9b:29:0c:73:c3:2c:91:76:ad:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410
        Validity
            Not Before: Oct  5 08:55:01 2024 GMT
            Not After : Oct  4 09:00:01 2025 GMT
        Subject: CN=AE48CAA75B945AE9ADDAF9CE7D10B658F688E73D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:d7:8c:20:78:2f:15:9a:45:14:a5:f3:b5:
                    05:ff:67:8c:08:65:91:f4:6c:11:c3:95:48:41:61:
                    c4:2b:a4:7c:69:94:9d:13:19:02:b7:67:28:44:0f:
                    39:69:96:fb:43:83:e2:f5:a1:e2:6c:40:f4:b0:48:
                    37:8d:f3:69:d2:88:17:40:b0:93:b2:98:98:b5:c4:
                    cb:f0:7e:a1:78:31:e9:85:fe:ce:f5:00:a6:77:e1:
                    ea:b7:60:f9:65:da:46:91:88:3a:06:1b:07:a3:5a:
                    b4:24:b8:de:bb:31:01:af:36:07:48:cd:7d:8d:dd:
                    81:cd:7a:d4:1a:d4:f5:0c:b2:98:52:f2:b9:6b:a6:
                    73:31:b2:72:3c:63:ac:c4:00:e6:6e:f5:ee:6d:ab:
                    ea:32:ee:43:b9:df:37:00:20:87:70:94:1d:f8:b9:
                    a7:85:d2:74:b6:78:ab:cd:75:84:a1:e7:f9:40:1c:
                    27:ec:67:31:ec:61:dc:b7:01:63:97:69:ec:03:c0:
                    32:96:4b:c7:df:32:e3:3b:0c:b0:5d:ef:db:f1:70:
                    35:b0:dd:87:51:ed:e5:87:e4:55:72:80:8a:3e:3d:
                    e4:7b:04:14:8d:d5:7e:30:3c:52:85:d5:6b:69:e2:
                    49:f6:58:00:90:92:54:a6:33:2d:1c:09:49:f1:99:
                    31:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:48:CA:A7:5B:94:5A:E9:AD:DA:F9:CE:7D:10:B6:58:F6:88:E7:3D
            X509v3 Authority Key Identifier:
                keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:ab:24:fd:31:13:cb:91:03:09:bb:cc:51:15:3c:02:3d:76:
         43:81:f5:a4:ba:64:39:15:d0:5f:04:96:16:dd:07:4c:6f:82:
         a8:e8:44:5e:aa:c1:8d:53:18:86:94:1c:6e:bb:7e:1b:60:64:
         fe:b0:82:aa:9b:73:d1:41:13:8b:5e:5a:63:8e:2d:b6:7e:8c:
         2b:f8:f4:d7:7c:3d:70:50:14:6f:99:fb:d4:1f:7a:37:d7:99:
         64:7c:32:68:19:af:c4:bf:73:99:96:22:38:c7:c7:00:3a:7d:
         34:67:40:65:ca:cc:a7:8e:8d:de:d5:94:e0:6c:aa:d0:5b:65:
         45:0f:21:3f:4a:b3:0a:59:1e:49:33:e9:57:48:cd:c2:d2:b8:
         cc:48:11:dc:79:ee:e4:16:00:64:38:13:4f:91:8f:18:bf:c6:
         da:56:ab:15:59:e6:8d:fb:2d:bb:c4:83:20:d0:c3:3c:85:82:
         05:b3:7c:c5:77:67:63:9e:f9:f0:af:a7:97:25:6f:50:c8:0e:
         3c:e7:37:5c:c0:d6:2e:84:6b:a4:be:d4:3a:cc:bc:e2:66:fd:
         80:41:4d:28:0d:3e:cf:42:ad:96:7d:73:4a:94:68:cf:e2:2a:
         85:ad:3a:8e:05:d6:91:69:90:cb:de:6b:f0:e2:42:02:86:d4:
         eb:20:6a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org