Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32342d3234203d3e203536323836.roa
File:                     3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (raw, json)
Hash identifier:          uZ/e5I3QH0UjCtUWqlAPZEiD+xLwrFV/2Cdu59luZio=
Subject key identifier:   3C:DC:49:42:84:98:23:32:CF:D3:D6:DC:45:B1:97:A6:E3:83:6A:ED
Certificate issuer:       /CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
Certificate serial:       4B153CA94241FE392FA11EB2292311728A07ACB5
Authority key identifier: 9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32342d3234203d3e203536323836.roa
Signing time:             Thu 11 Jan 2024 17:00:01 +0000
ROA not before:           Thu 11 Jan 2024 16:55:01 +0000
ROA not after:            Thu 09 Jan 2025 17:00:01 +0000
asID:                     56286
IP address blocks:        103.26.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl
                          rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 11:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:15:3c:a9:42:41:fe:39:2f:a1:1e:b2:29:23:11:72:8a:07:ac:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
        Validity
            Not Before: Jan 11 16:55:01 2024 GMT
            Not After : Jan  9 17:00:01 2025 GMT
        Subject: CN=3CDC494284982332CFD3D6DC45B197A6E3836AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:5c:58:c2:c2:46:17:1d:f2:a3:7a:4f:23:
                    dd:93:05:38:34:ff:35:e1:cf:fc:cf:81:ff:57:72:
                    ee:db:5e:45:24:f4:e1:4f:d8:03:06:c4:1a:40:b7:
                    bc:66:ad:87:d1:1d:6d:b8:db:65:37:dc:71:02:b1:
                    d9:0d:a2:31:ca:e4:15:b6:41:06:c8:3b:0b:d4:cb:
                    60:10:f0:2e:d9:9f:3c:6d:ff:32:0d:11:d4:dd:86:
                    fc:c3:5c:56:45:16:5f:c5:2d:eb:52:ba:aa:fe:65:
                    f9:29:82:79:70:c1:6a:71:93:ff:86:b9:30:5c:08:
                    4f:31:c3:5b:96:c1:da:b3:18:ba:81:4f:52:16:a0:
                    90:ae:48:44:56:5a:c9:20:2d:16:2f:a8:c8:c8:df:
                    42:27:01:1f:f7:b5:f3:0e:a4:03:b9:b6:1d:a3:36:
                    3f:18:98:95:81:4a:b2:c2:76:66:7d:88:ff:fa:99:
                    56:b2:c3:d3:9e:e4:3e:ce:46:3e:1b:5e:89:b8:44:
                    7c:5e:d5:9c:b8:05:96:2c:87:02:59:a8:2c:4e:d3:
                    50:c6:a4:e2:69:9a:45:91:d5:07:94:74:57:bb:37:
                    1a:83:43:61:a2:aa:9b:a7:3b:70:08:19:e4:81:ef:
                    f3:e0:20:21:47:35:d7:a8:cf:76:ac:b2:c6:f3:d7:
                    c2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DC:49:42:84:98:23:32:CF:D3:D6:DC:45:B1:97:A6:E3:83:6A:ED
            X509v3 Authority Key Identifier:
                keyid:9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32342d3234203d3e203536323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:82:c7:c9:5d:61:d5:91:8f:06:9e:e9:cb:ab:03:b5:af:5c:
         d1:6a:21:62:92:78:67:c0:d4:4d:30:d3:96:7d:20:00:ca:14:
         4b:1b:a7:6f:b6:07:a8:19:1b:38:bf:4b:82:b6:0a:9f:76:a1:
         56:b0:b6:c0:0a:a7:4c:6f:ba:b1:4e:46:9b:ca:a7:08:80:3b:
         01:bc:ad:0b:13:0f:57:ed:a0:bc:81:1e:50:c0:9b:b9:17:c2:
         10:93:45:0b:29:e5:ff:f3:e5:89:67:04:01:00:a3:4e:63:f4:
         d6:08:21:31:69:9c:78:14:40:9e:de:c5:9b:9d:e4:13:08:14:
         89:be:2d:ac:f3:b8:b4:f3:f0:28:d1:07:98:54:20:72:c1:8b:
         06:5e:84:6b:59:f0:b2:5b:9f:af:13:bc:a4:0c:2f:89:5f:9c:
         f3:db:ed:90:24:71:9d:51:df:1c:87:41:2a:70:7c:91:8a:e7:
         f1:80:8f:c7:e1:52:fc:02:67:03:99:dc:cb:98:68:f0:2b:1a:
         77:99:09:7d:10:ed:eb:89:4d:3f:4b:c0:76:c4:a5:a3:d7:09:
         6c:c1:b2:d1:1d:0d:5d:9e:1e:47:e2:b0:e3:be:c3:7b:16:8f:
         97:e5:da:5d:84:32:e3:eb:05:57:b3:6c:09:da:9c:c4:44:cd:
         27:66:f1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:56:57 2024 by rpki-client on console-fra.rpki-client.org