Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa
File:                     3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (raw, json)
Hash identifier:          06QZdyklcUmWupIhsOVNL9NiOUjK+/J3FEFr90f9R1c=
Subject key identifier:   60:DC:96:D2:C5:C9:1E:D6:C1:BC:F4:7E:F0:82:C9:4A:64:8B:A9:8C
Certificate issuer:       /CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
Certificate serial:       73FB58D31C982A594AEC09AC67228DD6040DD4F4
Authority key identifier: AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa
Signing time:             Fri 26 Jul 2024 10:00:02 +0000
ROA not before:           Fri 26 Jul 2024 09:55:02 +0000
ROA not after:            Fri 25 Jul 2025 10:00:02 +0000
asID:                     149943
IP address blocks:        103.191.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl
                          rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:fb:58:d3:1c:98:2a:59:4a:ec:09:ac:67:22:8d:d6:04:0d:d4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
        Validity
            Not Before: Jul 26 09:55:02 2024 GMT
            Not After : Jul 25 10:00:02 2025 GMT
        Subject: CN=60DC96D2C5C91ED6C1BCF47EF082C94A648BA98C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:85:eb:e1:e8:1d:31:f1:9e:ff:43:25:cc:
                    bb:3c:61:6f:82:44:45:1c:3a:00:05:40:f8:a1:b4:
                    46:c3:d2:b9:4f:fc:6c:d8:e9:ee:d3:6d:a1:a4:37:
                    ec:98:36:86:06:11:d1:08:35:25:74:15:fd:aa:d6:
                    c7:1d:c6:93:24:28:3d:aa:2f:8d:32:61:f8:b9:bf:
                    7c:3e:cd:a8:4e:dc:ce:e4:24:db:fe:f5:74:ee:16:
                    09:06:ca:88:6b:ed:67:b9:e2:ad:5b:c3:12:49:36:
                    e0:68:c7:ae:60:7c:df:01:9c:4a:3e:82:c9:eb:86:
                    02:dd:e0:d1:49:be:94:0f:b1:51:17:64:22:d6:0e:
                    62:75:9f:61:09:d7:87:16:0d:74:6c:9c:2b:3d:de:
                    20:22:01:80:5d:68:55:13:ed:13:5f:95:68:96:18:
                    1b:b5:14:f4:8d:7e:21:7d:cc:07:4f:2d:76:bb:e0:
                    83:da:80:e5:26:ee:49:6a:ca:ce:fc:b9:87:b4:ea:
                    19:d7:44:ee:6b:25:47:b4:c3:7f:fb:5f:11:51:c0:
                    88:4e:d3:1f:1f:b9:bd:23:3f:3b:67:04:11:eb:5f:
                    47:af:90:79:fb:a2:8a:34:b8:94:a2:f6:f8:2f:c8:
                    a5:f8:d1:5f:04:cc:dc:f7:ec:36:f6:62:47:c4:aa:
                    9a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DC:96:D2:C5:C9:1E:D6:C1:BC:F4:7E:F0:82:C9:4A:64:8B:A9:8C
            X509v3 Authority Key Identifier:
                keyid:AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:3b:1d:f7:4f:c5:89:d0:e3:ad:0a:f8:3e:a7:ab:7c:da:6e:
         b6:e1:08:cd:1c:44:05:d8:cd:f2:85:99:54:6c:a5:0e:c7:6c:
         32:fb:e2:6b:25:95:48:db:d4:e2:9c:11:d8:59:59:6b:ac:49:
         0c:3e:4b:e4:71:e3:62:06:91:92:73:02:6f:aa:0d:dc:be:e4:
         9a:23:69:d8:50:26:08:5c:3a:a7:59:95:e3:7c:33:06:0a:44:
         6c:e1:eb:d3:58:35:20:7e:5d:8b:87:6f:94:84:7b:6c:00:20:
         c7:9d:99:cc:9e:a1:02:55:4b:28:09:bf:56:88:5a:4d:15:76:
         5b:fd:7a:e9:15:6a:33:e2:d7:62:14:c1:6d:5b:80:27:0e:ec:
         ae:f2:0b:5f:cd:dd:d0:9c:8a:3a:63:1d:f6:0b:1f:97:96:ee:
         54:8f:12:56:1c:44:cc:03:d0:cd:81:0c:05:87:ef:00:00:31:
         fa:3c:41:6b:5e:67:15:45:6f:0b:7b:6e:89:b1:18:ab:50:4d:
         f5:c8:3f:08:95:10:32:bd:4c:11:15:31:c9:99:e7:0a:8c:04:
         e2:28:04:94:e6:77:a7:4f:88:c0:58:9e:6e:d7:7c:eb:11:c6:
         2b:ee:47:00:87:23:29:f9:97:4f:7e:0d:65:c2:b9:ee:43:89:
         ab:10:bf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:20 2024 by rpki-client on console-fra.rpki-client.org