Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa
File:                     3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (raw, json)
Hash identifier:          g83LIJ3ExQtEGXGTQd6P8xh7CcOhD81osnr+YMgS0Qs=
Subject key identifier:   95:C3:66:8C:57:81:65:C8:70:CF:8E:5E:71:B8:00:5B:27:25:39:A8
Certificate issuer:       /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Certificate serial:       024E29ACDC40E88387B525B9997986B22194833E
Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa
Signing time:             Thu 13 Jun 2024 16:00:00 +0000
ROA not before:           Thu 13 Jun 2024 15:55:00 +0000
ROA not after:            Thu 12 Jun 2025 16:00:00 +0000
asID:                     131705
IP address blocks:        103.154.178.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
                          rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4e:29:ac:dc:40:e8:83:87:b5:25:b9:99:79:86:b2:21:94:83:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
        Validity
            Not Before: Jun 13 15:55:00 2024 GMT
            Not After : Jun 12 16:00:00 2025 GMT
        Subject: CN=95C3668C578165C870CF8E5E71B8005B272539A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:6d:11:20:9a:0a:77:1e:aa:3c:74:1f:20:e7:
                    84:8d:66:d1:6b:c1:e5:4d:29:67:e4:78:a0:0f:bd:
                    df:96:e8:d0:d1:32:c6:3f:b0:22:39:ba:39:72:73:
                    0c:f1:0f:51:e8:58:d4:32:60:97:ec:73:ec:89:9c:
                    62:99:11:78:d8:aa:82:c7:8a:47:72:3c:51:f9:71:
                    a2:af:83:c9:b9:c4:9d:22:e8:26:e0:ff:d2:1c:32:
                    ec:ee:c9:78:72:d2:fc:c1:92:8b:9d:63:8a:cd:da:
                    d6:df:a9:dc:cc:5f:b4:d6:78:f4:b0:9a:32:39:57:
                    5c:70:12:3d:47:b6:a2:6e:f0:37:6f:25:a3:84:75:
                    03:7d:90:c8:1a:fb:3d:2d:03:ca:4f:67:e0:44:cb:
                    7f:ba:19:33:e6:7d:73:e6:be:25:13:3b:0d:8f:4c:
                    c7:80:8b:e6:a9:82:e6:e7:07:af:35:de:33:5e:1f:
                    18:aa:30:ae:b0:81:28:ae:92:54:51:47:f4:70:68:
                    49:8d:5b:fb:ef:3f:9d:10:b8:14:23:ed:f5:51:a1:
                    1a:5c:09:14:2f:e1:05:c1:9e:98:6a:3a:b2:2d:68:
                    50:d6:00:31:45:43:46:5d:48:43:b5:25:6f:73:6c:
                    fa:08:82:9e:3e:39:bb:32:49:96:70:15:9a:7a:4a:
                    67:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C3:66:8C:57:81:65:C8:70:CF:8E:5E:71:B8:00:5B:27:25:39:A8
            X509v3 Authority Key Identifier:
                keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:85:03:5d:9e:e9:eb:b2:dc:b2:2e:66:db:01:95:0d:1e:50:
         ad:3c:04:28:bb:ee:e6:4e:8c:da:2d:90:7e:f5:aa:ce:03:a7:
         ca:ea:6c:93:78:7a:d9:f6:1e:86:f0:85:d9:ac:3c:21:69:cf:
         da:1d:91:1d:68:ae:e2:e7:8a:c9:eb:d0:5f:e0:8e:ba:5b:9d:
         a4:e5:9a:49:1d:59:49:68:8b:11:34:e2:a4:da:b4:50:7d:7c:
         8a:9f:fc:49:d7:56:bf:d8:ad:79:78:f4:6b:1c:12:84:5e:57:
         a5:1e:52:25:fd:81:f6:99:21:28:15:9f:d6:cc:56:5c:40:51:
         fb:d7:7f:9e:60:b8:81:be:9a:31:15:52:14:2e:15:9a:d0:f7:
         e4:1f:af:6a:f9:40:84:c8:ef:61:54:3f:b8:2e:85:ca:cd:c9:
         80:08:da:47:f6:17:f8:06:ab:eb:e6:a3:12:52:1e:98:bb:cc:
         02:5b:55:33:44:09:64:d8:f8:52:75:27:09:8b:35:00:5d:d0:
         b9:69:36:04:f5:d4:28:4b:34:f8:56:b8:46:41:c0:d1:32:80:
         87:39:8e:fb:01:05:90:d4:97:80:3e:6d:a7:72:c7:ff:a5:08:
         8a:2b:41:5e:1b:c4:e7:bd:00:23:94:71:fc:55:15:16:0f:91:
         d8:d0:ef:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:55 2024 by rpki-client on console-fra.rpki-client.org