Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa
File:                     3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa (raw, json)
Hash identifier:          IneEF3/tEmWEOJAacx2Lc3dF8gsmXf7WqEW3pt2Yqzs=
Subject key identifier:   15:2D:E1:1A:73:48:10:5D:15:42:53:13:CC:E0:6A:FD:16:0F:99:AA
Certificate issuer:       /CN=7C8592B080A17A9CE2F782DEA4C1297A97B60CDC
Certificate serial:       0C74556DF69A3FA6172E263A9491CD2928DA2B
Authority key identifier: 7C:85:92:B0:80:A1:7A:9C:E2:F7:82:DE:A4:C1:29:7A:97:B6:0C:DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa
Signing time:             Thu 04 Jan 2024 15:00:05 +0000
ROA not before:           Thu 04 Jan 2024 14:55:05 +0000
ROA not after:            Thu 02 Jan 2025 15:00:05 +0000
asID:                     150530
IP address blocks:        103.68.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl
                          rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:74:55:6d:f6:9a:3f:a6:17:2e:26:3a:94:91:cd:29:28:da:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C8592B080A17A9CE2F782DEA4C1297A97B60CDC
        Validity
            Not Before: Jan  4 14:55:05 2024 GMT
            Not After : Jan  2 15:00:05 2025 GMT
        Subject: CN=152DE11A7348105D15425313CCE06AFD160F99AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2a:40:1e:9a:f6:28:e3:90:81:40:46:d7:9c:
                    1d:9f:58:df:65:5f:a0:6a:2a:6e:e3:48:16:f7:51:
                    30:d0:74:47:3e:5f:2e:8d:ef:c2:44:78:8e:94:05:
                    04:96:04:92:75:64:e2:ec:db:be:4d:e7:e5:c9:11:
                    1f:02:a0:37:98:40:f6:be:1f:3d:37:fb:5e:78:fb:
                    25:25:52:c9:4c:48:92:a9:c9:76:15:c1:5d:80:22:
                    c3:7d:41:b0:38:50:6b:a7:30:36:6e:a6:89:a1:b7:
                    8f:ff:77:c7:43:ee:3d:90:d9:5b:7a:ab:fe:54:38:
                    63:10:65:54:86:d4:46:4e:2a:c9:b3:f8:ed:70:a7:
                    35:f6:bb:47:c8:bf:d9:af:70:5c:6b:55:7a:5e:55:
                    a5:fb:61:3b:1e:12:5b:0f:c2:1a:68:70:b9:76:b1:
                    cb:a8:d0:19:6d:4d:68:47:4e:4d:9c:46:89:11:4e:
                    3e:0c:62:d6:06:6a:73:c1:7a:13:1a:dc:1f:07:37:
                    97:30:e2:f1:60:50:af:1b:ce:41:1d:1d:5a:f7:de:
                    22:19:3e:32:54:c6:f1:ef:6b:99:13:30:c5:1b:7c:
                    88:37:0b:70:ed:09:d2:84:f8:46:2e:d9:87:70:12:
                    e7:85:df:6e:42:97:dd:e8:bb:12:0a:e1:90:a0:aa:
                    de:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2D:E1:1A:73:48:10:5D:15:42:53:13:CC:E0:6A:FD:16:0F:99:AA
            X509v3 Authority Key Identifier:
                keyid:7C:85:92:B0:80:A1:7A:9C:E2:F7:82:DE:A4:C1:29:7A:97:B6:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:15:a1:22:a6:ff:c7:7c:1f:16:8c:d2:20:35:06:f2:f8:f0:
         d8:ed:d8:33:fb:44:86:3a:1f:ce:f5:77:d3:89:5e:ac:8f:9d:
         0f:83:83:92:3d:2a:e9:b1:79:3c:2b:b5:70:7e:f6:10:c8:df:
         63:2e:04:87:ea:e9:29:fd:9a:8c:76:1c:9d:e5:e8:a7:d4:da:
         73:23:5d:91:29:61:c6:d5:93:26:f5:7f:37:ea:ee:aa:ce:4a:
         68:2f:22:d4:75:2f:70:7b:ab:02:e9:12:20:27:7c:58:ee:f8:
         bd:7a:ed:19:e9:20:9e:9b:4a:86:4d:55:24:67:dd:81:a1:e0:
         7d:9e:d5:1a:d2:48:ef:a8:f2:35:51:60:ba:8d:4d:60:60:ff:
         d9:43:77:f7:25:be:33:f5:2b:68:0d:27:18:db:eb:04:68:1e:
         f7:c9:74:2c:6e:67:03:05:6c:02:9a:1d:80:b9:24:7a:10:2f:
         59:42:94:b3:02:fe:86:a7:1d:4a:87:eb:f0:14:71:a2:67:74:
         4e:ee:5f:6b:2b:86:dc:94:dc:00:f0:ef:9c:3a:db:80:d7:34:
         4d:ed:9b:96:c5:00:99:e0:3f:c0:2e:17:2e:f1:38:95:03:ae:
         e7:14:8b:f6:23:73:3f:4e:23:3d:43:d4:a5:7e:e2:f0:96:f7:
         86:5b:aa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:56 2024 by rpki-client on console-fra.rpki-client.org