Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa
File:                     3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa (raw, json)
Hash identifier:          9czjjPOxGb0iKBDU7T6Vi3/h8fu6r28sQdl/Nx47ILo=
Subject key identifier:   61:D2:12:8A:28:BD:9D:2F:28:8B:ED:BD:FF:1E:38:3B:1F:03:DD:54
Certificate issuer:       /CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
Certificate serial:       4F9F6D84C83986DF263806E920159B047E0C71DE
Authority key identifier: AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa
Signing time:             Fri 25 Aug 2023 10:00:01 +0000
ROA not before:           Fri 25 Aug 2023 09:55:01 +0000
ROA not after:            Fri 23 Aug 2024 10:00:01 +0000
asID:                     149943
IP address blocks:        103.191.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl
                          rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9f:6d:84:c8:39:86:df:26:38:06:e9:20:15:9b:04:7e:0c:71:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
        Validity
            Not Before: Aug 25 09:55:01 2023 GMT
            Not After : Aug 23 10:00:01 2024 GMT
        Subject: CN=61D2128A28BD9D2F288BEDBDFF1E383B1F03DD54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8d:04:83:50:e5:1e:3a:58:fa:83:88:91:84:
                    f4:05:d6:52:84:f9:e6:41:22:b5:7e:c7:da:21:89:
                    9f:8a:84:03:23:dc:c8:a8:9f:41:bf:31:9e:70:41:
                    fd:35:9d:80:30:a1:71:19:4b:b9:c7:a8:a7:46:9c:
                    80:6f:74:a0:df:db:fd:13:a7:c1:5c:0e:4f:47:15:
                    0f:4d:cc:8d:ab:d0:ba:96:b5:22:b2:2e:12:70:75:
                    b9:b1:1f:2d:8f:d4:4c:3a:3c:c9:45:b3:58:ca:4c:
                    ee:02:9d:20:3a:a4:51:ee:11:de:81:64:38:5c:75:
                    d7:62:aa:53:84:80:f7:87:f7:20:ea:5a:e9:5c:8a:
                    c6:82:9a:b4:03:a9:a9:0f:7c:58:ec:26:be:ef:a9:
                    93:33:33:35:97:d0:5b:7e:36:3c:47:9f:cf:e0:75:
                    7c:fd:d7:65:2c:e1:5c:19:1c:0e:db:82:e7:a2:2a:
                    00:05:62:0a:61:3b:8b:11:7f:8a:9e:22:97:7c:e2:
                    2f:e1:19:24:b3:33:db:d6:10:50:6e:79:38:50:66:
                    1b:7d:0a:f4:c7:9d:48:98:c2:7a:28:50:44:ef:00:
                    25:fa:f3:ca:88:03:0d:e6:ec:15:7e:02:f1:05:a1:
                    77:a4:97:01:b2:ff:d2:15:e3:6a:27:e2:17:cf:4e:
                    e3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D2:12:8A:28:BD:9D:2F:28:8B:ED:BD:FF:1E:38:3B:1F:03:DD:54
            X509v3 Authority Key Identifier:
                keyid:AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:bb:c2:35:48:a5:c7:61:64:dc:62:35:d4:98:73:e2:18:60:
         e6:87:67:f8:60:99:fa:3c:74:0c:3b:96:c4:88:5a:ea:77:d0:
         7a:06:76:e9:48:44:e9:ba:28:eb:6f:dc:e8:8f:55:3b:6b:11:
         21:68:0c:08:a4:e2:fa:2f:92:93:11:7a:47:73:eb:76:d2:70:
         98:a9:f8:ca:a9:58:02:7b:a8:ad:24:a4:c7:73:77:3a:9b:76:
         9f:ce:41:01:28:0e:fd:07:c8:b8:18:b2:b8:39:cf:c9:c3:f5:
         52:01:a2:5a:f0:27:fb:10:17:b3:17:a7:e2:9c:e5:78:e3:e7:
         c7:a6:10:0a:1f:5e:45:fe:d6:25:e2:8c:7a:d5:d9:7b:2e:1c:
         0b:cb:81:6b:85:b5:c5:79:c8:5c:fd:34:31:4a:18:11:96:41:
         21:d7:7b:61:88:8b:2f:fd:62:87:4d:20:a6:3c:9b:df:bc:21:
         5d:62:f5:d4:60:a2:5d:71:6e:79:a4:70:ee:08:6e:a6:70:71:
         bb:72:a3:d8:75:41:c8:19:77:80:c6:35:c6:02:25:c0:d9:7e:
         93:bc:61:a4:59:19:cf:79:a8:09:b8:e2:5d:0e:22:25:f2:85:
         15:80:73:a7:d5:5d:b0:13:38:71:c9:0d:e1:07:cc:47:95:b1:
         54:a2:30:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 09:43:23 2024 by rpki-client on console-fra.rpki-client.org