Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa
File:                     3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa (raw, json)
Hash identifier:          Ttq6OmcuDA2jvY00pswCCvXRwFmH52FGSMDBivzFf7A=
Subject key identifier:   39:F5:E8:B2:AE:01:BD:4B:37:FE:DF:2E:F3:3E:28:79:49:8B:CE:D7
Certificate issuer:       /CN=7C8592B080A17A9CE2F782DEA4C1297A97B60CDC
Certificate serial:       30C1796C3C74869DF3453739BC39BB0DCA634B5D
Authority key identifier: 7C:85:92:B0:80:A1:7A:9C:E2:F7:82:DE:A4:C1:29:7A:97:B6:0C:DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa
Signing time:             Thu 05 Dec 2024 16:01:38 +0000
ROA not before:           Thu 05 Dec 2024 15:56:38 +0000
ROA not after:            Thu 04 Dec 2025 16:01:38 +0000
asID:                     150530
IP address blocks:        103.68.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl
                          rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 18:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c1:79:6c:3c:74:86:9d:f3:45:37:39:bc:39:bb:0d:ca:63:4b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C8592B080A17A9CE2F782DEA4C1297A97B60CDC
        Validity
            Not Before: Dec  5 15:56:38 2024 GMT
            Not After : Dec  4 16:01:38 2025 GMT
        Subject: CN=39F5E8B2AE01BD4B37FEDF2EF33E2879498BCED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:b5:12:d3:d2:fc:2c:aa:65:17:ab:68:89:
                    bd:7a:f7:c4:54:2e:73:1e:35:64:02:25:8c:57:ea:
                    d8:18:b6:2a:42:b8:1c:d7:8b:0f:46:4d:87:6c:38:
                    a3:73:d1:e6:c4:58:40:1b:70:ea:21:c1:cd:69:d8:
                    49:66:1d:0d:4e:2a:d5:82:02:ed:36:c1:64:3e:6a:
                    e2:20:61:8b:f0:8f:37:c4:f9:62:7c:1b:16:3f:5c:
                    92:be:2d:ca:42:12:89:e0:e3:f9:29:2f:ae:7c:68:
                    a8:cc:69:72:93:87:fb:1e:f2:0b:3b:0d:d5:16:81:
                    d6:0d:d8:05:8d:0d:ab:d3:20:ed:ca:0f:4f:3f:0e:
                    5a:9e:a1:ff:3c:63:01:8f:3b:1d:aa:e3:d6:f8:c0:
                    4e:69:56:92:b1:14:f1:c6:6f:63:90:f8:b0:e7:00:
                    f6:ba:84:0b:88:2e:5d:a4:14:a6:48:2d:60:77:13:
                    ee:9d:bc:4e:18:e5:45:98:9a:74:26:6f:4b:85:77:
                    80:75:50:6f:41:09:f5:71:e6:f4:d8:dc:74:5d:0a:
                    da:99:12:a4:34:12:e6:91:b0:f6:4e:c9:9b:ef:4f:
                    4e:af:13:4e:11:5f:ed:87:fb:f5:26:81:46:1b:32:
                    b9:a3:8a:fc:ed:29:60:f5:b8:b6:19:50:b6:5b:09:
                    f3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F5:E8:B2:AE:01:BD:4B:37:FE:DF:2E:F3:3E:28:79:49:8B:CE:D7
            X509v3 Authority Key Identifier:
                keyid:7C:85:92:B0:80:A1:7A:9C:E2:F7:82:DE:A4:C1:29:7A:97:B6:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:2e:f5:98:d1:f1:ed:b0:84:8c:e4:8b:73:c4:62:2b:02:ab:
         0b:ab:83:43:1f:fb:64:ea:6d:5d:ef:c0:fe:a1:90:3f:77:00:
         79:bb:e4:f6:86:40:3d:e3:cc:7f:78:7b:63:0c:da:59:ef:e3:
         5f:27:53:6a:35:e5:be:5a:87:56:a5:d0:46:0a:3a:4f:4c:aa:
         71:b6:73:c5:fe:e1:c3:89:9a:1b:42:dc:21:80:0a:02:b4:eb:
         32:dc:2f:0d:54:e3:b7:b3:15:10:ad:55:14:ec:c9:f8:a3:3c:
         a6:fa:5d:0d:67:62:03:3d:2f:9f:8f:52:0c:89:57:9e:70:e1:
         a7:16:da:07:3b:70:d0:04:d0:b4:cb:59:ee:54:28:b9:9c:38:
         5c:5d:be:6d:8f:f3:7a:d7:1c:fc:c9:da:30:4c:16:03:4e:58:
         3e:ba:dc:07:ad:4c:d9:84:c1:97:0d:da:69:8d:d5:90:1f:20:
         17:44:8f:8f:ee:89:8b:5a:bc:29:91:1b:18:17:9e:71:7c:7c:
         e3:c6:1a:b7:07:95:b4:ea:53:dc:7b:1f:4c:9b:32:0a:c6:45:
         bc:9a:a9:5b:13:04:81:db:4f:4e:fe:8d:89:0b:5a:85:db:13:
         b6:bc:a3:dc:87:83:a8:1f:32:49:1b:36:75:be:ff:09:63:04:
         64:33:fd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:39:02 2025 by rpki-client