Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa
File:                     3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (raw, json)
Hash identifier:          +iBP1n25amN1BUbKW4c0Cv8N7jOCDGCOsAfJU3KqYkY=
Subject key identifier:   B4:0F:09:74:27:A3:40:A6:C1:A4:43:67:08:5D:A4:4F:91:BF:DB:B0
Certificate issuer:       /CN=A532AD36631301388EC939BEB0F099FCDE956410
Certificate serial:       4D6AB0D4A206750ED029680A8B62646681E8535B
Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa
Signing time:             Sat 04 Nov 2023 09:00:01 +0000
ROA not before:           Sat 04 Nov 2023 08:55:01 +0000
ROA not after:            Sat 02 Nov 2024 09:00:01 +0000
asID:                     141071
IP address blocks:        103.155.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl
                          rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 05:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6a:b0:d4:a2:06:75:0e:d0:29:68:0a:8b:62:64:66:81:e8:53:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410
        Validity
            Not Before: Nov  4 08:55:01 2023 GMT
            Not After : Nov  2 09:00:01 2024 GMT
        Subject: CN=B40F097427A340A6C1A44367085DA44F91BFDBB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2d:fb:3b:b2:02:a0:92:98:e0:c3:14:cd:65:
                    b9:a5:54:c7:c6:38:52:52:c3:60:81:40:41:58:04:
                    d6:cf:db:37:13:90:fd:cf:76:eb:59:f1:74:af:6c:
                    bf:b0:93:e3:8b:b8:60:60:5d:c4:fd:f6:33:75:0f:
                    f9:db:44:d4:f5:2f:cb:ef:57:25:37:22:3e:ce:05:
                    59:82:4a:cb:9f:a4:f0:b6:b9:ff:48:b8:93:bc:2e:
                    92:b1:5f:93:dd:ee:95:94:06:0a:f8:9b:8d:62:26:
                    8c:79:72:0b:80:c4:c9:92:5e:bd:25:bd:b5:ff:2e:
                    ed:1b:f9:59:5f:ef:16:88:13:27:1b:bd:65:ee:b9:
                    6c:d0:03:db:e3:0c:fc:af:21:91:2c:d9:13:9c:0d:
                    ec:87:5b:f9:c3:35:25:69:e5:ca:fd:73:1e:85:7f:
                    9c:06:25:ad:10:7b:3a:ab:3d:da:97:5a:06:02:88:
                    29:cc:75:7e:01:21:16:80:e0:85:82:58:e6:b5:b0:
                    99:18:46:20:4f:ad:44:f5:58:21:c4:cc:1c:b4:e0:
                    6d:40:72:01:5b:69:b1:16:19:b6:dc:5e:39:c3:59:
                    a7:c1:c4:5f:a9:5e:a3:1c:b5:51:ce:b7:ce:ad:4b:
                    27:05:e9:4a:3b:e4:9e:c0:d3:d1:a1:6f:ab:2e:5c:
                    e5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0F:09:74:27:A3:40:A6:C1:A4:43:67:08:5D:A4:4F:91:BF:DB:B0
            X509v3 Authority Key Identifier:
                keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:c0:97:6b:ab:6c:aa:53:21:36:bd:39:28:92:99:f1:1d:52:
         53:ad:8e:59:7b:22:54:bb:d4:31:b6:ee:e0:16:b0:eb:16:df:
         67:e1:8a:a7:b5:41:70:9d:6f:f6:ab:5a:b9:79:b9:36:ba:85:
         79:bf:7a:4b:ea:e3:82:f2:44:c0:fb:38:aa:c2:3b:79:c4:8c:
         88:29:f4:ab:a1:dc:93:60:90:5d:1c:d4:9a:32:38:c4:7f:35:
         93:02:1a:56:d8:f0:83:50:a9:fe:e3:28:d3:79:a9:e0:92:0b:
         d9:cf:dc:2f:dd:3f:f3:ea:62:86:0c:e5:8c:ce:bf:34:ea:c9:
         6a:c3:41:35:53:33:92:ea:2e:21:1b:ae:f3:fd:9c:b3:a5:02:
         26:f8:5f:ef:ad:aa:06:dc:84:ef:f3:1f:43:92:06:78:df:b0:
         d1:7b:b3:8a:b4:b5:01:cc:9a:47:ad:d9:bc:c1:50:7f:a3:dd:
         ed:1a:40:fc:fe:66:d1:11:63:fd:6b:46:48:88:52:14:0d:ce:
         f1:e5:65:c7:1b:2a:41:81:e4:96:1b:59:87:2d:5b:56:4c:24:
         d3:65:d4:0b:c1:4b:23:20:6b:02:55:a9:41:de:19:0c:ee:80:
         c8:a4:b1:b0:6e:c3:0f:8b:f3:0b:cd:71:ab:80:de:ea:d1:d5:
         3a:ff:77:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 23:52:41 2024 by rpki-client on console-fra.rpki-client.org