Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa
File:                     3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          qEcB+1Nyj5l9kqdeua5b72WtgfL2BFXAxUsz5my6HPQ=
Subject key identifier:   EB:1F:8A:92:31:61:63:75:4C:0C:17:7C:74:87:90:D4:0E:26:93:A8
Certificate issuer:       /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5
Certificate serial:       3BC9593223B4FBA250D6DC0C8019BD480B8E002A
Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa
Signing time:             Tue 27 Feb 2024 06:00:00 +0000
ROA not before:           Tue 27 Feb 2024 05:55:00 +0000
ROA not after:            Tue 25 Feb 2025 06:00:00 +0000
asID:                     136052
IP address blocks:        103.117.56.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl
                          rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 17:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c9:59:32:23:b4:fb:a2:50:d6:dc:0c:80:19:bd:48:0b:8e:00:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5
        Validity
            Not Before: Feb 27 05:55:00 2024 GMT
            Not After : Feb 25 06:00:00 2025 GMT
        Subject: CN=EB1F8A92316163754C0C177C748790D40E2693A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:ff:ef:7f:c2:ba:df:cb:d9:34:34:67:95:
                    0e:a5:ff:d8:08:85:b8:b2:47:d9:01:93:ef:07:3f:
                    3f:09:ba:ef:90:1d:da:8a:53:80:fa:ac:33:46:ca:
                    86:50:95:a9:3d:0b:12:be:df:45:31:c3:ff:a8:1f:
                    be:2e:65:17:1c:9d:64:5c:82:05:b6:ef:24:18:52:
                    97:27:d4:59:4b:17:3b:f1:5e:3c:85:a5:ff:c4:d6:
                    31:55:72:16:df:24:4c:db:d2:b9:72:82:8c:6f:e4:
                    4f:e0:cf:7e:50:ce:f2:25:14:fe:a5:fd:67:2c:58:
                    46:b9:99:a0:03:60:9c:80:19:18:d8:96:3b:06:3b:
                    f9:16:4d:c7:38:40:98:08:47:ac:bd:cb:66:2e:07:
                    5e:c4:ef:a2:ce:86:7f:70:ef:ff:de:05:05:83:e4:
                    4e:c8:08:c3:81:01:19:0a:9a:a4:17:41:22:97:8d:
                    b9:2d:65:19:b7:49:aa:2b:67:82:cf:03:b2:1b:84:
                    99:6e:4d:6a:fc:34:b0:e4:de:ce:1a:86:e5:b2:07:
                    5a:49:6d:ac:c0:31:2c:a9:48:52:42:2e:68:0c:81:
                    02:b5:e3:56:29:fe:fc:61:2a:4b:70:dd:7a:2b:1a:
                    3c:62:37:98:77:93:a2:66:4a:e0:62:0c:d6:d7:42:
                    30:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1F:8A:92:31:61:63:75:4C:0C:17:7C:74:87:90:D4:0E:26:93:A8
            X509v3 Authority Key Identifier:
                keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:31:b6:15:32:cc:dd:7b:7b:f7:1d:0e:22:3c:24:6b:01:0d:
         f6:11:d0:97:7c:0e:f8:81:b1:c8:bd:fe:f6:7f:b4:dc:67:08:
         c1:04:dd:ea:f6:ad:8a:ee:9d:dd:39:6f:34:1d:5b:e1:ff:22:
         d6:dd:10:00:a6:7b:4d:44:6c:cb:f1:79:cf:0d:68:e0:a4:94:
         d4:cd:0b:46:56:1f:0e:02:ab:09:d8:b8:85:90:46:5f:c0:0f:
         c7:ef:9d:f0:71:a4:67:4b:8a:51:95:b6:99:2a:e8:92:0a:72:
         0f:27:bb:3f:39:18:e1:7f:44:69:a0:2c:27:6e:d1:85:2c:55:
         37:f9:f2:4b:db:25:04:63:6c:11:e9:94:f9:02:24:1f:9d:16:
         4f:5d:f1:51:40:15:f3:d7:09:38:10:53:1e:06:ff:11:00:37:
         3c:9b:7b:4b:90:50:ad:27:70:a3:8d:cc:a8:bb:b8:d9:73:97:
         11:68:a8:1e:3f:06:02:bf:fb:04:39:2a:6d:e1:03:7a:3b:19:
         b2:a7:a7:de:56:3a:e6:60:91:fe:0d:4d:a6:81:9a:57:ca:9c:
         11:49:15:83:9d:91:5b:59:78:d1:1b:44:82:d5:d0:39:6f:3c:
         88:5c:63:8b:b2:ea:98:a9:3c:3d:17:36:87:52:d2:2f:37:40:
         d6:52:fa:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:03 2024 by rpki-client on console-fra.rpki-client.org