Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/3130332e36382e3231332e302f32342d3234203d3e20313530353330.roa
File:                     3130332e36382e3231332e302f32342d3234203d3e20313530353330.roa (raw, json)
Hash identifier:          P6nuaFz3MXQndqv8bgxsG4yOTsOFx1/WrCZd3LSooJE=
Subject key identifier:   E8:39:2C:1C:AF:37:8C:E2:56:53:86:11:1D:44:45:E9:B6:58:6D:BE
Certificate issuer:       /CN=7C8592B080A17A9CE2F782DEA4C1297A97B60CDC
Certificate serial:       409C598254F648DD44A98920D0E618FE168EE5EC
Authority key identifier: 7C:85:92:B0:80:A1:7A:9C:E2:F7:82:DE:A4:C1:29:7A:97:B6:0C:DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/3130332e36382e3231332e302f32342d3234203d3e20313530353330.roa
Signing time:             Thu 04 Jan 2024 15:00:06 +0000
ROA not before:           Thu 04 Jan 2024 14:55:06 +0000
ROA not after:            Thu 02 Jan 2025 15:00:06 +0000
asID:                     150530
IP address blocks:        103.68.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl
                          rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9c:59:82:54:f6:48:dd:44:a9:89:20:d0:e6:18:fe:16:8e:e5:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C8592B080A17A9CE2F782DEA4C1297A97B60CDC
        Validity
            Not Before: Jan  4 14:55:06 2024 GMT
            Not After : Jan  2 15:00:06 2025 GMT
        Subject: CN=E8392C1CAF378CE2565386111D4445E9B6586DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f4:13:fc:50:54:17:88:22:40:2b:92:1a:94:
                    b9:b9:a9:7c:70:82:ff:fa:35:dd:f9:d4:20:c8:00:
                    be:2a:59:32:d4:07:65:68:ba:c6:4f:10:74:6d:98:
                    53:11:63:b1:b1:cf:c9:da:98:76:6a:9c:74:7a:4b:
                    6e:70:aa:fd:0f:24:d6:43:f4:13:08:51:b0:e4:23:
                    91:05:43:5d:71:2e:7f:6c:db:b8:8d:bd:8f:49:9e:
                    fc:e2:c8:06:9a:93:32:36:58:60:3d:b5:ca:59:37:
                    29:20:28:c9:eb:aa:91:d0:57:47:1e:3c:0b:33:0f:
                    a2:cd:9e:95:94:37:bb:95:8f:94:be:a7:f8:8a:57:
                    aa:e3:84:34:d3:a4:50:d1:25:9d:69:0b:b6:e0:cf:
                    0a:9d:de:c8:d4:35:46:f7:25:cc:1a:9f:84:09:6d:
                    5d:31:b4:c4:56:16:93:c5:31:87:d5:2b:03:ad:c5:
                    2c:fa:69:b2:89:ed:ff:c8:e2:de:13:64:e6:25:0c:
                    af:2d:d7:2a:32:d3:35:c7:32:c9:f0:a9:31:8d:9b:
                    90:a1:dc:18:dc:20:58:87:45:7b:5e:a8:94:c6:8d:
                    09:fc:73:2e:98:70:ef:72:48:50:e7:87:07:a4:cd:
                    7b:e3:2f:12:3f:c2:ef:79:2c:70:84:4e:50:79:a6:
                    64:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:39:2C:1C:AF:37:8C:E2:56:53:86:11:1D:44:45:E9:B6:58:6D:BE
            X509v3 Authority Key Identifier:
                keyid:7C:85:92:B0:80:A1:7A:9C:E2:F7:82:DE:A4:C1:29:7A:97:B6:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/3130332e36382e3231332e302f32342d3234203d3e20313530353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:89:ad:43:59:17:00:f9:3e:8e:13:e4:aa:31:3d:21:b2:fe:
         b2:0e:45:e1:ae:13:70:06:3c:ce:66:4a:bc:4b:31:0d:f4:4b:
         2e:3f:9f:94:39:7f:f2:42:45:f7:31:85:6e:19:89:90:91:fa:
         cd:38:a8:88:00:95:ed:3f:60:f8:e9:32:3a:17:ff:c3:23:fd:
         ad:6a:c9:41:ad:d0:77:b6:1e:18:db:80:61:b4:27:ba:6f:6d:
         76:16:a3:b1:1d:98:b7:94:70:b6:24:a0:50:fe:e9:86:5a:64:
         8b:49:55:a2:62:1a:69:50:5d:9d:d1:3d:7e:27:94:0c:65:62:
         79:e6:06:26:6b:d1:d3:b2:70:3e:25:03:cd:eb:bc:27:77:e5:
         c6:70:5b:75:25:d2:e4:02:f2:04:f6:e3:59:74:ee:b5:b5:b5:
         94:96:07:10:04:4d:3b:6f:3b:b8:2e:9b:78:92:ff:39:fd:ba:
         93:77:d4:28:36:d0:7a:02:14:96:0c:b1:c0:90:4d:f5:9d:b3:
         d5:8b:6f:fb:a8:d6:9d:2e:e3:96:61:62:ee:e5:2a:3f:b6:be:
         4b:3d:30:b1:8d:4e:df:c2:d0:66:d9:b6:f7:5d:d3:cd:85:ae:
         92:bb:cd:f4:db:81:b9:48:2e:66:4b:57:77:62:ab:1b:c6:ab:
         d1:78:11:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:31:59 2024 by rpki-client on console-ams.rpki-client.org