Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32332d3234203d3e203536323836.roa
File:                     3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (raw, json)
Hash identifier:          pxnbkS4a52t1BUaITxBc02NGQK7TtrE44PQX92otK6M=
Subject key identifier:   82:92:C4:A7:3A:74:34:20:0D:FC:AA:B0:15:A0:F4:E0:40:6D:5D:E8
Certificate issuer:       /CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
Certificate serial:       1F042834D01583F10F49DFC2BB1A9C32BA1224C7
Authority key identifier: 9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32332d3234203d3e203536323836.roa
Signing time:             Mon 15 Jan 2024 09:00:46 +0000
ROA not before:           Mon 15 Jan 2024 08:55:46 +0000
ROA not after:            Mon 13 Jan 2025 09:00:46 +0000
asID:                     56286
IP address blocks:        103.26.190.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl
                          rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 00:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:04:28:34:d0:15:83:f1:0f:49:df:c2:bb:1a:9c:32:ba:12:24:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
        Validity
            Not Before: Jan 15 08:55:46 2024 GMT
            Not After : Jan 13 09:00:46 2025 GMT
        Subject: CN=8292C4A73A7434200DFCAAB015A0F4E0406D5DE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d6:c5:35:0f:1e:af:4f:8e:96:b5:d1:31:43:
                    e1:de:42:f5:95:50:0a:9e:58:c0:90:97:17:32:89:
                    42:7c:cb:3c:7a:0d:d6:25:e3:27:ad:62:60:29:95:
                    da:42:70:45:f4:83:a1:b2:fd:62:bd:96:e4:a0:cb:
                    6e:b3:1a:21:fe:88:70:59:99:95:d0:a4:d3:cc:3a:
                    bd:f9:0b:d7:eb:fa:86:75:d3:dc:f6:93:a0:f3:de:
                    0d:e2:6e:7f:76:4c:75:71:3e:32:87:58:51:21:fb:
                    76:64:d8:b5:23:f8:1a:b8:8f:c4:45:70:12:df:4c:
                    39:34:72:c6:bd:8b:9b:12:98:3a:fd:64:81:5d:24:
                    62:25:b9:8a:d1:7a:04:59:87:31:12:a5:65:8b:9e:
                    b3:31:13:eb:71:76:3f:59:37:be:65:7e:46:97:4b:
                    ff:14:a4:2c:54:04:c3:d7:96:c6:08:18:52:7a:aa:
                    5c:2f:69:81:39:a5:41:90:3b:27:c2:da:6f:c9:5b:
                    4d:85:4a:3f:12:ff:d9:0c:b5:3a:f5:45:e7:17:ae:
                    23:18:ac:5e:66:11:e2:81:7e:0a:00:4e:12:59:7f:
                    4b:25:b8:cd:24:05:bd:1e:34:42:3c:ae:9b:43:75:
                    ec:69:0a:ac:62:4c:08:be:85:c5:d8:19:0d:76:a0:
                    43:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:92:C4:A7:3A:74:34:20:0D:FC:AA:B0:15:A0:F4:E0:40:6D:5D:E8
            X509v3 Authority Key Identifier:
                keyid:9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32332d3234203d3e203536323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:39:0f:08:5f:6d:96:4f:cd:43:ec:cf:ff:dd:15:77:04:a9:
         dc:f8:10:ce:e6:a7:a2:7c:fe:5a:a9:a2:17:6b:b1:f9:8f:f8:
         a7:a5:f2:af:30:31:e2:06:13:e4:2a:60:59:d0:7b:81:8a:3e:
         b2:8b:b3:06:db:72:8e:3b:f9:fe:4d:9c:14:ce:44:23:51:66:
         c1:a7:38:c5:db:6d:8d:5b:74:01:72:68:8a:6b:3c:d5:ae:14:
         48:c6:2b:07:0a:0e:26:d3:5e:43:6d:d1:c2:2f:a5:e9:1e:ac:
         a5:0c:4f:d5:01:b3:51:fc:12:fc:6a:c5:21:92:f2:c2:3a:41:
         3e:1e:5a:12:1e:50:97:0f:cf:63:c7:ad:1a:e2:38:f8:b0:1c:
         6e:8b:f6:cd:d7:4c:3b:c5:5f:bc:66:27:38:c3:bc:f5:8b:6c:
         ef:1b:7e:7c:8e:bf:fa:dd:cf:74:da:53:9e:15:fc:bf:0c:d1:
         2f:5c:6e:86:39:07:71:6b:0b:56:19:75:94:c4:77:62:7f:9d:
         51:7b:02:c8:2c:73:de:12:f5:8c:78:c7:88:36:cd:a1:28:1b:
         76:c1:28:3c:08:b7:99:8d:49:cd:d0:74:a9:55:01:87:f3:f8:
         fc:58:6d:24:25:33:f6:77:05:f2:93:45:a4:de:45:2f:47:ff:
         e2:b9:66:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org