Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/3130332e33392e36392e302f32342d3234203d3e20313530323730.roa
File:                     3130332e33392e36392e302f32342d3234203d3e20313530323730.roa (raw, json)
Hash identifier:          2/IQ6Ol+BPKlBTSwA7bwjnQdrR+Nl265+bbA++Kn4Bk=
Subject key identifier:   DE:EF:F5:2F:FA:6F:A7:76:53:E5:A2:82:B6:F0:DD:D6:1D:2A:D3:87
Certificate issuer:       /CN=75890247E178C40DD3F9A5968202F684AEB89D9A
Certificate serial:       01113FBBFE1E02626DCEE56CDCE3E26B5348D9CE
Authority key identifier: 75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/3130332e33392e36392e302f32342d3234203d3e20313530323730.roa
Signing time:             Fri 20 Sep 2024 05:00:03 +0000
ROA not before:           Fri 20 Sep 2024 04:55:03 +0000
ROA not after:            Fri 19 Sep 2025 05:00:03 +0000
asID:                     150270
IP address blocks:        103.39.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.crl
                          rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 14:16:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:11:3f:bb:fe:1e:02:62:6d:ce:e5:6c:dc:e3:e2:6b:53:48:d9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75890247E178C40DD3F9A5968202F684AEB89D9A
        Validity
            Not Before: Sep 20 04:55:03 2024 GMT
            Not After : Sep 19 05:00:03 2025 GMT
        Subject: CN=DEEFF52FFA6FA77653E5A282B6F0DDD61D2AD387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5c:0e:85:43:8e:df:2f:b8:cb:b7:5a:1d:ad:
                    92:de:4f:90:08:f3:5b:c8:6a:6c:49:13:55:e1:11:
                    99:57:a0:88:2e:ab:2a:d1:fe:d7:ed:8d:d9:1f:69:
                    58:42:79:e3:02:c4:83:b7:35:12:3c:18:f6:f1:de:
                    42:e6:71:06:98:f8:b0:66:06:b2:09:9b:03:fe:1f:
                    1e:bb:33:96:b6:ac:81:0c:fd:c4:72:63:7e:98:a7:
                    e9:69:33:71:6e:bf:8f:49:32:51:5a:a6:b7:e4:e2:
                    bb:61:b1:90:3d:44:8e:77:71:87:e0:68:4b:bf:d7:
                    8c:69:7b:21:e1:0c:1c:4c:0c:f4:a6:07:11:7c:fe:
                    65:a0:7e:e6:6e:bd:29:ed:2c:02:e4:3e:fb:57:50:
                    41:16:51:73:0d:34:cb:1b:b3:1c:a3:89:89:10:68:
                    79:f8:0f:b2:d0:f4:28:56:30:47:4a:c6:4b:9a:7b:
                    22:11:00:4a:7e:a7:c6:a4:3d:08:5b:af:f3:e6:ac:
                    87:00:da:b8:5a:c9:8e:c0:7a:62:86:60:99:b1:4d:
                    73:12:b4:57:5e:96:81:19:72:f8:cc:a5:1b:a6:fe:
                    c5:9b:20:71:b8:c4:74:aa:68:2c:c8:ac:56:c7:3b:
                    33:a6:ff:7c:fb:ab:ee:b2:c6:4b:f3:39:20:5a:60:
                    d3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EF:F5:2F:FA:6F:A7:76:53:E5:A2:82:B6:F0:DD:D6:1D:2A:D3:87
            X509v3 Authority Key Identifier:
                keyid:75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/3130332e33392e36392e302f32342d3234203d3e20313530323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:ae:ca:d9:fc:87:66:b1:46:61:32:25:68:6c:85:81:5f:56:
         6d:87:55:95:ca:16:a5:97:40:c2:d3:a4:9b:94:3f:e8:57:13:
         c5:ab:8d:08:cb:cd:41:8e:76:4f:30:8c:52:df:6b:37:b3:73:
         4b:d0:b9:98:6e:08:0f:70:1c:70:95:f2:d7:a3:79:d3:1d:b7:
         62:77:f7:5e:79:8f:b3:a0:39:33:6c:99:c4:83:65:51:8d:b6:
         9f:98:11:79:7c:7f:05:a3:31:86:da:89:89:66:1d:8e:25:fa:
         8d:78:71:18:a4:77:cf:ca:1b:3b:7a:4e:1c:8a:67:0e:d7:21:
         b0:5c:bf:6b:de:f0:69:41:3c:99:df:85:cc:4e:38:2c:a0:17:
         38:cb:11:a4:62:5d:2e:86:5c:33:3b:88:74:41:c8:c5:6a:b0:
         1e:fb:84:65:63:94:44:ca:33:9f:de:d7:f2:6d:41:8d:5d:4d:
         b0:cd:36:62:bc:af:50:47:da:0d:15:e3:31:13:02:3d:28:71:
         f9:07:e2:e8:ab:53:e5:76:4e:1d:a2:06:fc:b7:f4:20:25:a4:
         82:4b:e6:99:78:a1:06:76:b5:c1:90:48:c8:29:71:1c:57:d5:
         70:0a:01:ee:14:97:d9:28:73:3e:a6:31:47:5b:ef:b9:2a:14:
         df:f5:44:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:38:56 2024 by rpki-client on console-ams.rpki-client.org