Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa
File:                     3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa (raw, json)
Hash identifier:          uP3Lxf8p7LpviEyknQjtinyqvEW0qcTjM+HY0BAA+2c=
Subject key identifier:   13:F0:8E:82:69:F8:D1:9B:48:5F:56:33:CE:DE:CD:09:FD:BC:4A:3B
Certificate issuer:       /CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6
Certificate serial:       6E61BFF3995F7BBFE970EF64E4F577CD3195B147
Authority key identifier: B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa
Signing time:             Wed 17 Jul 2024 09:48:38 +0000
ROA not before:           Wed 17 Jul 2024 09:43:38 +0000
ROA not after:            Wed 16 Jul 2025 09:48:38 +0000
asID:                     140398
IP address blocks:        103.150.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl
                          rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:61:bf:f3:99:5f:7b:bf:e9:70:ef:64:e4:f5:77:cd:31:95:b1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6
        Validity
            Not Before: Jul 17 09:43:38 2024 GMT
            Not After : Jul 16 09:48:38 2025 GMT
        Subject: CN=13F08E8269F8D19B485F5633CEDECD09FDBC4A3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:be:ec:ef:69:b7:20:32:48:c2:d0:9b:28:da:
                    93:d4:86:94:a4:0f:3d:c3:1b:e9:fc:1e:ea:95:b9:
                    31:fb:dd:35:7d:37:16:10:5c:04:76:67:f9:d4:4a:
                    34:60:8f:b6:9a:06:00:b7:1a:3c:43:78:35:9d:67:
                    8e:8d:68:47:e7:81:48:9a:87:a4:b1:42:1d:da:68:
                    f5:4e:b2:83:e2:32:d2:50:2e:e6:ba:83:14:9c:7a:
                    6e:2d:ea:ae:87:82:64:08:0e:d4:a8:a1:5a:4b:89:
                    9f:d5:dd:8d:65:4d:eb:ac:f1:d0:13:a0:a7:5f:27:
                    f1:42:c0:f2:5c:be:da:1d:cb:e2:62:6f:39:ea:c0:
                    54:b5:5b:46:41:f7:e9:8c:65:d7:29:5b:ae:24:82:
                    49:87:bb:12:c9:56:a4:30:9b:4b:24:61:1e:6e:c1:
                    6c:2d:30:d7:c1:22:99:d9:4c:4c:aa:96:4b:d8:c4:
                    51:ff:10:35:c4:4f:55:e4:6f:aa:e4:ed:f0:a3:6a:
                    8b:ca:f3:bc:1f:14:8a:21:87:b9:8d:eb:18:52:68:
                    82:ea:46:1a:85:64:33:76:ac:9b:09:b9:3a:21:25:
                    54:cb:7a:11:e8:cc:74:97:07:94:7d:4d:0a:ab:89:
                    9d:bf:63:b7:af:8a:07:7f:69:1b:0f:ce:ea:f3:61:
                    5c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F0:8E:82:69:F8:D1:9B:48:5F:56:33:CE:DE:CD:09:FD:BC:4A:3B
            X509v3 Authority Key Identifier:
                keyid:B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:ca:15:dd:e1:14:8a:a3:2a:5c:8e:1e:6d:72:d8:ee:d1:99:
         e8:3d:04:52:66:a4:9c:da:3d:a0:cf:33:95:ba:38:fd:3c:de:
         5c:44:ab:5b:cc:5c:7b:3e:94:e3:6a:8a:b8:57:19:71:88:cc:
         47:8a:5c:e7:e8:07:a0:2b:7c:e8:6a:6c:37:cf:1f:e1:74:cb:
         30:eb:22:60:53:5c:7a:08:9c:71:42:7c:0b:4a:31:38:32:9c:
         27:f3:19:79:ba:fd:be:06:66:41:81:cf:0a:b8:b0:c2:11:fd:
         ca:8b:63:e4:60:43:d5:36:ad:e0:e3:c0:5a:85:7c:56:9c:12:
         8b:bc:bb:8c:19:56:ba:46:0b:d9:53:da:9b:de:ac:ae:4e:17:
         d2:73:df:9f:79:7e:fa:7c:61:e2:fb:5b:d6:3e:d4:c3:18:5b:
         a8:ea:4b:91:5c:3e:99:7c:df:ea:5d:54:f9:bd:62:54:64:08:
         25:2b:88:c8:76:e3:08:c0:ac:21:44:bb:95:0d:5d:d7:1f:04:
         d9:d8:58:38:0c:26:ca:da:bd:1c:1e:0f:0d:18:09:eb:c5:39:
         1e:31:05:fd:87:2e:69:d4:b9:6e:51:b4:10:7d:34:fb:56:be:
         76:b3:7a:ea:01:23:c5:d2:a6:b2:96:83:65:c1:17:19:4a:ba:
         93:1d:61:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:33 2024 by rpki-client on console-ams.rpki-client.org