Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/3130332e36362e33382e302f32342d3234203d3e20313530323431.roa
File:                     3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (raw, json)
Hash identifier:          1Ff4VDmA+7r6oXDzZnPzt9JuYQ1xqWexxGkdvnwFLiQ=
Subject key identifier:   16:B4:93:9E:9F:02:32:C1:F6:52:39:69:D7:70:59:08:67:AF:A7:1D
Certificate issuer:       /CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C
Certificate serial:       6796A0FB66F85946957D10FF6D8E77CA63235E1A
Authority key identifier: DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/3130332e36362e33382e302f32342d3234203d3e20313530323431.roa
Signing time:             Fri 06 Sep 2024 08:00:42 +0000
ROA not before:           Fri 06 Sep 2024 07:55:42 +0000
ROA not after:            Fri 05 Sep 2025 08:00:42 +0000
asID:                     150241
IP address blocks:        103.66.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl
                          rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:96:a0:fb:66:f8:59:46:95:7d:10:ff:6d:8e:77:ca:63:23:5e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C
        Validity
            Not Before: Sep  6 07:55:42 2024 GMT
            Not After : Sep  5 08:00:42 2025 GMT
        Subject: CN=16B4939E9F0232C1F6523969D770590867AFA71D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3a:89:57:20:21:aa:34:45:49:fc:c8:61:59:
                    6a:23:04:aa:67:96:de:db:ab:df:32:e8:b1:67:17:
                    a5:85:cc:f8:61:46:5a:e7:a8:59:be:87:c6:76:2f:
                    eb:5e:a5:2c:ee:42:05:4c:7c:51:e9:c8:e2:2d:61:
                    a4:f3:f8:7a:e3:dd:92:28:1f:f3:fa:0f:f3:a8:56:
                    1f:be:b9:18:cc:d3:a8:34:c3:ff:49:fd:51:25:2f:
                    b7:3f:f2:cb:5f:36:84:a9:65:5a:e7:d2:1f:39:71:
                    ec:20:86:4f:9a:75:3c:71:9f:21:d5:fd:44:e8:6f:
                    d6:1c:c7:3d:14:8e:94:b0:82:af:00:f7:67:cd:6d:
                    54:3c:b6:7c:f7:37:22:ce:0b:6c:a1:b6:be:c7:82:
                    79:8e:1d:42:9c:6d:f6:57:0a:2c:9e:61:8b:97:3f:
                    f5:36:c8:fe:81:76:55:08:0f:82:16:d8:de:1a:21:
                    03:e3:ed:0b:54:aa:e2:71:00:d3:ba:90:da:b1:49:
                    b6:6f:09:44:ec:0b:62:0e:ed:fd:b5:8f:8b:db:31:
                    5d:96:f9:bf:82:bb:3d:00:cb:b5:95:08:0f:d5:0d:
                    d1:94:7d:2f:33:61:6d:bc:5e:fd:8b:5d:a2:10:7c:
                    07:7e:09:f3:5b:69:87:02:94:0e:0a:b5:bf:b8:05:
                    76:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B4:93:9E:9F:02:32:C1:F6:52:39:69:D7:70:59:08:67:AF:A7:1D
            X509v3 Authority Key Identifier:
                keyid:DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/3130332e36362e33382e302f32342d3234203d3e20313530323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:6c:cf:74:f5:a0:e1:cb:93:60:95:59:fc:cb:cd:ec:0d:b1:
         87:5a:ec:66:55:03:26:18:c7:50:f5:fc:af:ce:69:6d:92:35:
         db:99:63:44:2e:ba:d0:dd:8c:d8:d0:e0:34:53:89:87:cd:38:
         76:a1:63:c2:66:bf:f2:33:ba:d5:40:af:fc:94:7c:c0:fb:d2:
         48:39:28:55:78:a3:b9:2a:84:ab:32:b1:4d:07:75:14:70:eb:
         36:47:33:05:0f:e6:9f:e0:67:38:4c:18:5a:13:1a:a2:f9:2b:
         fd:73:ca:c1:d5:a6:33:ec:8f:61:51:fb:95:b8:e7:3a:96:b6:
         5f:93:31:30:80:4e:28:9a:84:f5:af:ea:be:ae:4b:b3:fc:c6:
         06:1f:cc:aa:45:f3:c4:a0:c2:85:bf:47:4b:c7:9b:03:3f:c0:
         bd:2f:c1:50:f9:ae:0c:35:c4:6a:ce:39:85:ce:10:95:cc:9f:
         9d:40:37:2b:00:9b:51:11:23:16:a3:6e:67:59:8f:c9:e9:f5:
         40:09:af:f9:65:6b:3a:e1:0f:d8:d6:db:d7:b9:e2:e6:ec:a7:
         95:21:7a:5f:7d:4f:cc:0d:f2:08:db:df:38:50:74:ae:78:d1:
         1f:b9:b7:00:7b:73:63:66:93:47:82:a1:36:b1:c8:b6:c4:72:
         b7:d6:cc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 07:10:00 2024 by rpki-client on console-ams.rpki-client.org