Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa
File:                     3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (raw, json)
Hash identifier:          8DJcpf94efs7+wOfl+gt2z4KZlFft8eztT+k7q3T7FA=
Subject key identifier:   BF:16:98:46:20:2F:89:D4:C1:09:DC:41:4C:53:BF:C1:17:FE:D6:84
Certificate issuer:       /CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768
Certificate serial:       2CAF62F81663AD42CD95E1C2166F3A9057844F6B
Authority key identifier: 9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa
Signing time:             Mon 01 Jul 2024 01:02:36 +0000
ROA not before:           Mon 01 Jul 2024 00:57:36 +0000
ROA not after:            Mon 30 Jun 2025 01:02:36 +0000
asID:                     138115
IP address blocks:        103.126.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl
                          rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:af:62:f8:16:63:ad:42:cd:95:e1:c2:16:6f:3a:90:57:84:4f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768
        Validity
            Not Before: Jul  1 00:57:36 2024 GMT
            Not After : Jun 30 01:02:36 2025 GMT
        Subject: CN=BF169846202F89D4C109DC414C53BFC117FED684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:01:e6:86:a4:8f:2a:e7:77:e5:66:af:ab:dc:
                    dd:7b:14:06:87:36:03:72:9f:55:9c:6b:6b:88:b4:
                    e5:c0:7c:7e:8a:a3:b6:b2:73:7d:d7:00:10:20:04:
                    77:84:8c:7f:a5:aa:7c:77:3e:42:28:59:ba:69:e7:
                    7a:22:0d:5d:1d:40:b1:d5:16:0c:19:09:85:b1:5e:
                    f1:67:41:3c:6c:43:35:35:4b:14:19:b1:ef:fc:dd:
                    a9:72:e2:d4:7f:2c:d5:b1:9b:c3:f1:10:28:3d:57:
                    89:62:ec:54:44:b6:91:94:4a:c9:b4:c6:83:b9:79:
                    cf:ea:eb:50:5b:6f:51:5e:54:a4:bc:28:97:e5:f2:
                    3b:bc:20:95:95:7c:0c:7b:e0:9d:a2:c5:b2:7e:17:
                    61:a9:9d:5b:f4:b9:ab:7c:7a:ec:2b:19:42:e3:a7:
                    ae:7f:e5:bf:2f:ca:b0:b2:7e:2e:a1:89:fc:f6:9a:
                    53:6d:a7:ba:34:d6:8a:3d:df:37:1a:e1:96:12:7e:
                    bf:bd:2d:5d:24:cd:ea:78:bd:cb:c7:8f:91:b7:a4:
                    03:95:c4:70:06:63:8a:a5:89:55:3c:0d:08:c6:c6:
                    8a:cf:ea:2f:ab:3d:f5:81:06:db:ff:9e:f2:f1:32:
                    de:8a:e3:54:bc:d9:95:5c:03:f4:ee:b6:d1:28:fa:
                    59:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:16:98:46:20:2F:89:D4:C1:09:DC:41:4C:53:BF:C1:17:FE:D6:84
            X509v3 Authority Key Identifier:
                keyid:9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:18:c7:b3:4b:ad:39:c3:33:08:39:7f:5c:2f:4b:c0:ef:a1:
         64:2a:c0:20:b8:30:27:89:da:3f:32:ae:83:b5:96:f2:93:28:
         bd:bb:6f:c3:4b:cf:40:d1:03:88:e6:fd:96:9f:c8:8c:a9:5e:
         db:07:ef:ed:43:c2:31:73:28:65:9b:06:e7:86:21:2d:fa:cb:
         69:41:7b:5d:54:e7:4e:32:c8:38:93:54:37:6d:9d:a0:5e:03:
         a6:60:ee:1f:71:dc:c5:a6:35:fc:d1:66:41:d1:de:9c:1c:1f:
         ec:c5:83:9a:fc:04:5e:4e:b3:3e:c1:2f:85:27:18:fe:d2:e1:
         2d:0a:05:66:66:0a:2a:7f:2c:c8:f0:7d:1a:96:4e:3c:d9:35:
         5f:05:25:28:1f:e8:3c:aa:d6:a1:2b:f8:27:56:d5:b6:a4:43:
         ca:18:2c:3f:b6:88:64:ac:30:e7:cc:ae:8d:ec:4b:38:64:a7:
         fc:78:03:62:72:f4:5f:2b:92:1a:8d:df:75:ac:fa:9e:da:12:
         72:92:cc:c4:e2:84:7e:bf:e4:62:85:fb:6a:cc:f9:2e:7f:c1:
         c4:63:47:65:8d:91:af:20:42:1a:fa:64:29:1b:8a:06:ad:c2:
         91:73:05:be:87:d5:a6:f7:98:f4:d2:55:7a:19:71:55:67:97:
         84:67:5c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org