Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa
File:                     3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (raw, json)
Hash identifier:          6idWc3lf40SrC6ddCZtHyjdlNkTY3XNNuoo22GH5+G4=
Subject key identifier:   E9:E1:36:0F:D5:4F:3A:15:78:EA:DD:3A:F4:1A:02:11:8D:20:CC:E3
Certificate issuer:       /CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA
Certificate serial:       3103186F10333078EFDF5C97E6F004BD3A74CE13
Authority key identifier: BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa
Signing time:             Wed 14 Aug 2024 08:00:00 +0000
ROA not before:           Wed 14 Aug 2024 07:55:00 +0000
ROA not after:            Wed 13 Aug 2025 08:00:00 +0000
asID:                     147112
IP address blocks:        103.169.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl
                          rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:03:18:6f:10:33:30:78:ef:df:5c:97:e6:f0:04:bd:3a:74:ce:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA
        Validity
            Not Before: Aug 14 07:55:00 2024 GMT
            Not After : Aug 13 08:00:00 2025 GMT
        Subject: CN=E9E1360FD54F3A1578EADD3AF41A02118D20CCE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:46:e8:ed:e9:0b:09:03:18:00:6b:05:4d:c4:
                    10:1f:d6:33:89:9b:c4:5d:e1:23:0d:00:d9:78:08:
                    15:d6:cb:af:54:4a:f3:30:61:4b:1d:87:45:93:06:
                    8f:69:c9:0c:13:ae:c7:81:0d:c1:42:e0:c8:c3:44:
                    72:b1:17:5e:83:b8:a9:7a:7e:38:60:69:72:1a:e5:
                    ce:73:a8:21:9a:17:bb:4e:18:1b:d3:18:c6:84:98:
                    ae:2a:85:85:da:23:94:8d:ef:d3:c2:56:dc:9c:2c:
                    e7:3f:65:d5:1b:ee:e5:ad:fc:da:bd:e5:c8:25:ef:
                    d3:c2:ff:79:2b:4c:28:46:15:24:eb:24:e1:35:ad:
                    59:8b:82:b8:f5:7e:61:35:70:57:9d:b2:51:c6:38:
                    63:be:b6:ae:af:7e:94:34:91:ce:d8:b2:c3:90:ff:
                    ab:f3:eb:1f:cf:01:22:0a:6c:d5:10:32:90:48:8b:
                    82:61:7f:cd:83:2b:27:f4:fd:49:d1:5a:17:ce:f8:
                    27:77:80:87:3e:1f:64:73:b7:d3:35:ab:3d:f3:e1:
                    7b:b6:55:e3:81:96:87:a7:ca:5a:35:8d:67:0e:af:
                    78:eb:8a:2c:7a:96:5a:75:86:63:e3:57:3b:0a:c3:
                    db:86:da:ca:b6:d7:f6:47:e1:c1:64:47:27:ce:c1:
                    af:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E1:36:0F:D5:4F:3A:15:78:EA:DD:3A:F4:1A:02:11:8D:20:CC:E3
            X509v3 Authority Key Identifier:
                keyid:BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:6f:c7:1a:15:dd:59:7d:58:d6:85:aa:16:57:4e:b3:5b:14:
         1c:54:01:42:69:d0:80:23:3e:ef:b7:1c:c6:0d:b0:02:7d:a8:
         14:bd:dc:2b:06:e6:1e:22:81:02:29:b9:ff:95:41:ca:21:4a:
         e1:5f:e9:79:63:81:55:34:e9:21:66:34:7a:96:d1:2d:5f:e9:
         e9:4e:93:b4:79:82:34:5a:d9:47:69:2c:8f:75:37:63:ea:c2:
         62:21:74:f4:20:fe:ad:5f:4c:b2:0c:5f:1b:57:06:14:e4:36:
         13:bd:b0:1f:be:39:b0:73:25:d7:ed:9e:3c:1b:11:0a:04:19:
         45:87:b7:17:b5:a9:95:38:5b:25:ac:c2:93:7e:51:44:6a:a3:
         7d:16:f3:7e:0c:ad:b0:1c:bb:87:ef:68:cf:89:b5:e2:9a:7c:
         e6:cd:af:6f:0d:04:2d:12:38:53:02:32:eb:f6:e6:b4:00:ef:
         f4:61:24:cb:e4:7a:9d:0c:fb:7e:76:09:76:76:f1:7b:8c:fe:
         12:44:51:78:a5:bc:8d:53:f2:c0:53:d5:1c:f1:f7:81:ab:32:
         e1:55:bc:da:ae:02:6c:5d:27:0b:76:0a:01:20:0c:84:3d:3d:
         e4:b2:fa:e1:d0:fd:e0:44:49:fc:d6:50:83:27:e4:a4:6f:86:
         d7:10:fe:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 09:53:15 2024 by rpki-client on console-ams.rpki-client.org