Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/3130332e3139302e3130382e302f32342d3234203d3e20313439393033.roa
File:                     3130332e3139302e3130382e302f32342d3234203d3e20313439393033.roa (raw, json)
Hash identifier:          rFeP9Ae7ysTyoUPblmhW+TlqcgBMjory024963ml1vw=
Subject key identifier:   E2:9E:9D:FA:29:2E:55:E7:A9:C3:AA:F0:72:34:C4:6D:96:D6:FB:52
Certificate issuer:       /CN=1D80B161A8871962133619E73EBB98762953ABF1
Certificate serial:       259F43E0524248993121045FBB08BFA85F84478B
Authority key identifier: 1D:80:B1:61:A8:87:19:62:13:36:19:E7:3E:BB:98:76:29:53:AB:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/3130332e3139302e3130382e302f32342d3234203d3e20313439393033.roa
Signing time:             Fri 19 Jan 2024 13:00:01 +0000
ROA not before:           Fri 19 Jan 2024 12:55:01 +0000
ROA not after:            Fri 17 Jan 2025 13:00:01 +0000
asID:                     149903
IP address blocks:        103.190.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.crl
                          rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9f:43:e0:52:42:48:99:31:21:04:5f:bb:08:bf:a8:5f:84:47:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D80B161A8871962133619E73EBB98762953ABF1
        Validity
            Not Before: Jan 19 12:55:01 2024 GMT
            Not After : Jan 17 13:00:01 2025 GMT
        Subject: CN=E29E9DFA292E55E7A9C3AAF07234C46D96D6FB52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:9e:01:9c:a8:f8:76:e0:68:bc:71:92:b6:
                    dc:67:f4:61:7e:2d:4b:41:59:27:1f:82:46:15:be:
                    79:c4:9a:a8:67:9e:b4:e3:c1:6b:27:97:95:a2:71:
                    e5:38:fa:a1:0a:48:d1:e2:48:6f:ff:43:b8:a4:33:
                    94:34:6c:2c:c7:a3:0d:06:47:49:40:f3:55:28:a6:
                    f1:ea:3f:73:93:e8:25:c6:99:fb:3b:d4:05:50:40:
                    a8:eb:70:29:6c:44:5b:84:6f:7b:b2:e2:c5:1a:82:
                    a0:03:5e:cc:76:58:dc:92:a6:67:8b:21:f5:65:e2:
                    0b:63:7c:53:b2:0f:2d:ff:0b:39:45:fc:14:c5:f1:
                    41:ec:09:e9:38:a4:1a:3a:a3:8f:5c:b5:d7:ad:1a:
                    6d:1f:1e:96:51:28:14:e0:4d:65:bd:b3:21:86:e9:
                    3e:80:1b:91:ae:85:a0:e9:98:1d:b1:f4:8c:2f:72:
                    28:ed:d3:a8:55:9f:ad:b3:23:40:76:25:7f:d4:a1:
                    89:53:46:6a:5b:e2:03:88:3a:62:74:68:79:c8:64:
                    e7:8d:fc:81:49:5e:8f:8a:02:dd:9a:01:df:f4:df:
                    90:fc:e7:d4:32:b0:c5:7a:6a:8a:94:eb:1d:76:ec:
                    1d:f0:7e:cb:63:5c:03:5f:66:9f:b6:df:1e:0e:f7:
                    3d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9E:9D:FA:29:2E:55:E7:A9:C3:AA:F0:72:34:C4:6D:96:D6:FB:52
            X509v3 Authority Key Identifier:
                keyid:1D:80:B1:61:A8:87:19:62:13:36:19:E7:3E:BB:98:76:29:53:AB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/3130332e3139302e3130382e302f32342d3234203d3e20313439393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:46:b2:dc:88:23:6f:5f:b6:cf:02:af:f8:d0:9c:58:08:be:
         0b:88:a6:ce:47:57:a7:fd:f5:42:76:92:5e:5e:59:f3:58:1e:
         8c:27:9a:97:87:0b:8a:38:10:84:88:a7:f4:1d:bb:98:be:94:
         f5:69:ab:2c:e1:28:3b:e6:86:be:e9:5c:7c:18:33:be:15:df:
         ab:2e:18:53:e2:0b:04:ad:e8:57:25:2d:5e:60:fc:4f:95:a3:
         68:34:76:ad:10:f1:13:d7:b1:ed:17:7e:27:2b:9b:9e:ef:a3:
         16:67:d9:85:eb:84:fa:35:2f:35:f3:bc:6d:9c:96:90:8b:8c:
         e8:fb:a5:0c:95:35:25:e1:8e:24:21:66:bb:70:c4:df:1b:c6:
         23:f7:42:25:44:8d:d8:cc:9d:69:5c:94:31:5d:3a:ae:a0:9b:
         43:9d:79:ea:0f:1e:0a:6c:28:09:98:04:e0:55:00:6e:a2:15:
         b6:04:4d:9a:a5:66:8b:7c:14:f0:68:77:c8:1e:8d:d4:57:c0:
         1b:45:50:c6:e1:1b:3e:a2:81:2b:c6:30:21:0a:7a:d5:f4:df:
         1c:af:57:e4:70:39:5a:29:5c:62:dd:63:29:20:f0:f6:db:c5:
         f8:84:60:3f:42:31:3a:b8:d3:95:5c:9d:00:ef:f2:a0:7f:bb:
         ee:a6:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:13:44 2024 by rpki-client on console-fra.rpki-client.org