Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa
File:                     3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (raw, json)
Hash identifier:          d1iOOjv6qaBSXhMhm+Csiy2EgfiQomEVVv4AskXzPBg=
Subject key identifier:   67:38:57:18:DE:6D:9F:4E:F7:06:B5:5B:5A:A1:BC:9F:BC:DC:7C:BB
Certificate issuer:       /CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001
Certificate serial:       010C45D02B5AA382E14FC432DAA0394E22F34B47
Authority key identifier: 26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa
Signing time:             Fri 08 Nov 2024 11:00:02 +0000
ROA not before:           Fri 08 Nov 2024 10:55:02 +0000
ROA not after:            Fri 07 Nov 2025 11:00:02 +0000
asID:                     141909
IP address blocks:        103.164.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl
                          rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0c:45:d0:2b:5a:a3:82:e1:4f:c4:32:da:a0:39:4e:22:f3:4b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001
        Validity
            Not Before: Nov  8 10:55:02 2024 GMT
            Not After : Nov  7 11:00:02 2025 GMT
        Subject: CN=67385718DE6D9F4EF706B55B5AA1BC9FBCDC7CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:36:ab:90:05:24:c1:01:07:99:d4:ee:06:77:
                    2f:5c:c1:55:03:73:5c:c2:72:8e:fa:9a:80:7e:1c:
                    1b:02:1b:7d:f3:c2:6c:66:5e:11:a0:c2:76:a8:e2:
                    b5:34:13:c3:97:ad:cd:2e:cb:1a:75:d9:27:4e:6d:
                    bc:b0:62:5b:fa:39:c6:8c:41:bb:76:72:92:eb:c0:
                    2a:ca:6d:4d:4a:ee:1f:3e:ab:de:b4:34:29:1c:29:
                    8e:d4:f5:4d:4b:1d:9b:8c:39:bc:6f:c9:28:bd:ee:
                    40:ec:5c:9b:0b:f0:2e:69:0f:71:7c:25:17:b4:81:
                    4c:19:58:90:ce:11:95:4b:15:50:b9:87:c2:67:db:
                    98:3b:a2:e0:7a:62:4b:0d:cf:5d:24:ae:c6:c3:12:
                    71:b1:97:5f:19:5d:ee:6c:5b:1d:c3:76:f3:e3:56:
                    ef:14:82:8e:8a:c4:20:65:98:4c:36:4f:6b:13:bb:
                    41:6c:16:04:12:b4:4f:43:a6:e9:cd:ea:d2:88:c4:
                    45:22:07:bd:28:89:90:1e:ff:b2:28:3f:7f:27:9c:
                    da:78:43:e9:50:ef:e6:f4:d7:fb:50:87:c8:cb:28:
                    1e:d7:fb:54:55:c8:d4:60:3b:a8:74:4e:ce:1d:fb:
                    90:68:44:a3:02:1c:4b:cb:ad:81:b0:9b:b7:80:82:
                    a2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:38:57:18:DE:6D:9F:4E:F7:06:B5:5B:5A:A1:BC:9F:BC:DC:7C:BB
            X509v3 Authority Key Identifier:
                keyid:26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:ae:a1:e7:12:ec:d8:96:e7:c4:71:ce:d3:9b:00:fb:06:3e:
         bb:e4:81:84:50:71:04:07:d1:82:25:f0:73:4a:79:ab:8c:45:
         60:15:ac:4d:37:4d:6f:5c:c5:19:c1:dd:6a:95:c0:86:50:5f:
         88:3e:ed:1e:32:32:d0:94:ac:c1:24:b6:ab:fa:fe:ee:70:07:
         5b:fe:97:cf:d5:d8:e4:46:b6:8a:29:09:89:58:5b:b6:31:f3:
         30:63:df:42:75:6b:23:af:a8:7f:1b:99:a0:b9:98:1c:1c:a8:
         cb:44:62:f3:a3:c9:93:98:0c:f2:93:3f:e8:67:f1:9b:2e:c4:
         45:5f:cf:83:99:f8:3a:c5:6d:12:68:4a:06:64:5d:03:0a:8e:
         6c:71:fa:00:58:fd:91:dd:83:84:29:49:fb:95:f5:0b:f5:d6:
         8a:23:6c:84:ac:41:7a:b1:08:d9:0d:8f:fa:9b:7e:21:03:e7:
         c7:7e:44:c2:71:c6:a7:ed:9e:47:1d:d3:ff:57:c6:54:77:9d:
         3f:70:d5:d6:1b:5c:4b:2c:74:e0:89:84:d6:b5:6a:3b:fc:07:
         70:d6:1e:04:6c:e9:6d:83:ea:06:c0:32:d2:a5:50:45:c5:84:
         49:2a:6f:d9:8c:0c:a4:fa:47:cf:ec:c1:be:dd:a8:c3:b8:da:
         a3:e5:c3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org