Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa
File:                     3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (raw, json)
Hash identifier:          kTZlMxGB2xgcXi3FLgIz4de2/PFQXvsRAyg4T49aiL0=
Subject key identifier:   63:E3:91:8A:5D:64:D2:D2:16:54:D3:B3:78:29:EA:CB:B5:FC:DC:DA
Certificate issuer:       /CN=A532AD36631301388EC939BEB0F099FCDE956410
Certificate serial:       2E3C9837E3558750DEDD59E4BF284D3B6FF0752E
Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa
Signing time:             Sat 04 Nov 2023 09:00:02 +0000
ROA not before:           Sat 04 Nov 2023 08:55:02 +0000
ROA not after:            Sat 02 Nov 2024 09:00:02 +0000
asID:                     141071
IP address blocks:        103.155.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl
                          rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3c:98:37:e3:55:87:50:de:dd:59:e4:bf:28:4d:3b:6f:f0:75:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410
        Validity
            Not Before: Nov  4 08:55:02 2023 GMT
            Not After : Nov  2 09:00:02 2024 GMT
        Subject: CN=63E3918A5D64D2D21654D3B37829EACBB5FCDCDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:8c:4e:af:1b:54:b0:d4:98:5c:25:82:5f:
                    a4:97:b5:9c:0f:bd:4b:66:31:7d:28:b9:d8:8e:ff:
                    76:59:e3:ac:ca:b5:30:e0:0c:bd:7a:1c:df:71:4f:
                    18:ca:00:07:8d:c8:18:22:c8:78:8c:b8:2b:cb:1f:
                    89:90:77:7b:33:61:a5:00:e3:73:c5:ee:7e:ba:99:
                    8b:ba:be:88:5b:57:8c:c2:16:e5:4b:b1:79:61:1c:
                    95:e5:c4:16:59:dd:1d:d6:04:c5:69:bd:c0:21:53:
                    cc:9b:46:71:8d:86:73:73:56:b6:55:fc:63:fd:5c:
                    71:b5:eb:48:d5:a9:ef:19:86:55:30:ed:d8:a4:00:
                    7f:11:3e:ad:07:29:38:35:b3:a8:c6:fd:89:94:ce:
                    3e:b3:cf:2e:50:57:6a:f1:50:23:79:ca:3d:2d:bf:
                    4a:8d:61:4d:49:a6:8c:cd:5b:0f:bc:55:7b:78:00:
                    9f:ce:b2:f0:3e:a0:9b:b0:ad:c3:7a:eb:32:1b:19:
                    7d:dc:30:bf:87:e5:66:30:d1:bd:0a:f0:ee:41:70:
                    15:0d:10:41:1a:0d:99:9c:bc:e7:a4:5a:6c:ac:1d:
                    36:2a:26:c9:73:b8:83:df:0d:ca:f3:00:a1:a3:45:
                    e2:52:57:cc:5c:38:63:db:2c:22:6a:3d:64:a6:2c:
                    59:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E3:91:8A:5D:64:D2:D2:16:54:D3:B3:78:29:EA:CB:B5:FC:DC:DA
            X509v3 Authority Key Identifier:
                keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:3a:7e:12:23:da:20:84:31:9e:1a:0c:24:60:af:b9:b6:78:
         cc:0e:2b:87:0d:d7:95:39:4e:14:96:ab:53:33:b5:19:b6:b5:
         23:49:c8:6f:c4:6f:57:54:26:31:3c:ed:f8:18:dd:9d:0c:44:
         27:90:c0:59:f0:26:f9:88:a2:f1:5d:4e:1c:6f:39:1d:fa:1f:
         5b:ec:d6:79:9f:73:f8:c5:13:68:45:f0:76:e3:68:30:b5:77:
         d1:bd:36:ec:a1:24:ab:88:cf:96:81:88:8d:18:0a:07:53:bc:
         8e:65:e0:f3:43:f6:72:af:77:00:13:7f:2c:8a:bd:08:68:7c:
         29:55:c1:5b:f9:a0:3c:d7:81:95:52:ce:4b:1a:b5:dc:bc:fa:
         05:20:d3:f3:e0:a6:a0:9c:5c:6e:75:75:11:3d:b3:f4:0a:e2:
         de:26:04:b7:28:22:9c:35:d0:fd:cf:03:58:66:f9:40:91:8e:
         ad:6d:8b:61:ff:3b:80:d9:8b:55:35:8c:5f:42:6a:d4:b8:02:
         28:54:73:21:51:65:32:b9:e8:95:53:bb:24:23:1b:57:03:40:
         71:5e:ac:55:92:10:9c:f0:c2:3c:97:68:bb:df:8e:c4:c7:87:
         0b:d1:61:2d:e2:e0:a5:d3:be:b5:05:07:5f:3e:a9:22:b4:a5:
         5f:b4:78:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 14:00:37 2024 by rpki-client on console-fra.rpki-client.org