Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e20313439383830.roa
File:                     3130332e3138392e302e302f32342d3234203d3e20313439383830.roa (raw, json)
Hash identifier:          YBHxbYHxR/hSQ3Ps+0/EW/rc2w51A1/t52HAOxGc93Y=
Subject key identifier:   42:16:44:31:BE:69:B9:A1:EF:F0:A8:2F:EF:5A:22:E9:E1:6F:03:0F
Certificate issuer:       /CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Certificate serial:       3C16C21B9B3B8DC777E1532C77C5655F659790F4
Authority key identifier: 26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e20313439383830.roa
Signing time:             Thu 09 May 2024 13:00:01 +0000
ROA not before:           Thu 09 May 2024 12:55:01 +0000
ROA not after:            Thu 08 May 2025 13:00:01 +0000
asID:                     149880
IP address blocks:        103.189.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl
                          rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:16:c2:1b:9b:3b:8d:c7:77:e1:53:2c:77:c5:65:5f:65:97:90:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
        Validity
            Not Before: May  9 12:55:01 2024 GMT
            Not After : May  8 13:00:01 2025 GMT
        Subject: CN=42164431BE69B9A1EFF0A82FEF5A22E9E16F030F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c3:d3:de:5b:51:20:7c:f5:6a:9d:01:0d:a0:
                    b7:ff:ce:de:6f:0d:3b:98:ed:f1:3b:18:8e:41:a2:
                    e1:2b:43:73:85:86:35:57:22:4d:63:00:04:aa:0f:
                    73:a7:d6:cd:cc:ef:60:8b:36:04:77:26:ac:b9:e7:
                    ad:3f:44:ea:f3:08:f2:5d:b4:88:67:cc:e9:14:99:
                    ff:4a:ef:f3:05:df:ff:36:e6:88:a2:59:7f:92:01:
                    4f:13:f7:50:7b:d9:80:b7:7c:6d:82:15:7a:23:e5:
                    bb:97:71:1c:fe:46:52:6d:73:85:9b:f3:70:c5:c8:
                    ea:86:ad:f5:a2:f9:80:32:10:54:4c:33:32:7b:e4:
                    fd:43:40:4c:0a:2c:5e:b3:b2:21:60:bd:4f:87:bc:
                    86:8e:0e:e8:1b:13:ef:df:fa:4b:bc:90:0e:e1:eb:
                    0b:94:5d:fc:11:8c:d1:d2:28:7c:83:c2:c9:b9:05:
                    d6:85:95:03:d8:80:9b:d5:a4:0a:e4:2d:93:9b:39:
                    da:af:f6:bb:cc:52:58:26:81:03:b6:55:0b:44:57:
                    05:3b:cf:29:fc:60:fe:a1:03:a3:03:d7:18:c1:f6:
                    f9:1c:23:0a:2d:f4:68:ea:6d:fb:dd:32:05:8c:4a:
                    17:0c:27:6e:81:cd:be:a2:d3:65:5e:6d:26:d6:03:
                    a9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:16:44:31:BE:69:B9:A1:EF:F0:A8:2F:EF:5A:22:E9:E1:6F:03:0F
            X509v3 Authority Key Identifier:
                keyid:26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e20313439383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:03:d8:38:e0:36:42:c3:45:b3:63:27:9c:23:76:08:2d:e8:
         10:69:b2:ef:fd:55:dc:db:0f:e2:85:d0:28:7c:f5:3e:a8:6f:
         fb:f8:1a:d9:36:de:0b:5c:22:a1:a2:92:50:2c:31:29:a0:c6:
         c7:ce:a3:d9:53:14:66:f3:ea:72:47:5d:1a:3d:3c:a8:67:f5:
         09:15:4b:3e:9a:8d:50:27:83:2c:9e:14:10:a6:2e:67:66:89:
         2a:ac:5d:72:18:3d:10:30:79:53:15:24:59:25:a0:5f:6c:2f:
         74:7e:f2:7a:6e:5c:18:f4:81:31:90:15:b4:20:6a:dc:19:0f:
         7c:6a:33:ea:c3:ef:6c:e3:f7:8a:70:aa:0c:38:67:24:25:ee:
         d0:54:87:7b:c0:12:c3:81:67:c4:63:72:cd:e6:3b:8a:40:8d:
         03:be:90:72:98:a4:18:45:d8:e8:14:3a:b0:df:23:9b:4b:72:
         39:ee:6a:b0:20:91:b2:1d:0c:3f:15:ff:e8:5f:fa:ae:a8:60:
         66:d0:32:0e:a7:03:c0:ef:2e:71:ee:ce:ce:84:d1:3c:61:5f:
         2c:a4:e9:4d:3c:61:e4:cf:1b:cf:72:4a:f4:ea:6e:1f:99:b7:
         43:12:aa:80:e5:c0:1c:ff:c6:f0:64:dd:70:78:a7:a2:ff:95:
         57:54:03:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:17 2024 by rpki-client on console-fra.rpki-client.org