Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32342d3234203d3e20313432333534.roa
File:                     3130332e3136392e3232342e302f32342d3234203d3e20313432333534.roa (raw, json)
Hash identifier:          3odjUif73+czm1/T5NHZhJihhYOLp7wgVGqUFznadDM=
Subject key identifier:   FB:CC:37:80:DE:80:33:A0:4D:98:EC:44:13:DB:FC:79:F9:FB:37:EE
Certificate issuer:       /CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53
Certificate serial:       6DD6A66DC2876D3A4F233F13389E0D98A2D32D39
Authority key identifier: AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32342d3234203d3e20313432333534.roa
Signing time:             Thu 11 Jan 2024 17:00:03 +0000
ROA not before:           Thu 11 Jan 2024 16:55:03 +0000
ROA not after:            Thu 09 Jan 2025 17:00:03 +0000
asID:                     142354
IP address blocks:        103.169.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl
                          rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d6:a6:6d:c2:87:6d:3a:4f:23:3f:13:38:9e:0d:98:a2:d3:2d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53
        Validity
            Not Before: Jan 11 16:55:03 2024 GMT
            Not After : Jan  9 17:00:03 2025 GMT
        Subject: CN=FBCC3780DE8033A04D98EC4413DBFC79F9FB37EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:52:cd:d8:f1:a4:da:85:3f:e6:17:05:4c:9c:
                    0c:9c:6c:b5:d0:6f:89:1e:77:f3:79:d3:8c:6b:14:
                    91:ed:0b:cb:1e:60:42:70:26:3c:08:2b:d4:a1:ee:
                    68:03:44:3d:b6:44:ec:7a:78:1e:09:46:93:32:aa:
                    d3:d7:cd:35:02:c6:94:8c:cd:25:c2:3c:43:da:b6:
                    00:36:46:21:b8:63:64:48:af:1c:0e:10:5f:44:30:
                    30:b9:ba:d9:d8:c5:83:57:8b:6d:4e:f4:09:3f:e0:
                    78:c3:9e:eb:bb:8f:0f:59:7d:de:ed:01:69:79:7a:
                    d5:52:0c:35:59:12:93:85:66:8b:8a:3b:1f:01:84:
                    ee:97:15:ef:06:2f:63:70:d7:a9:cf:1e:4d:79:c5:
                    0f:8e:0a:bf:06:0c:8b:fc:e0:a2:79:c0:ad:91:db:
                    ee:ff:61:f5:6d:f1:0d:bf:05:00:b8:76:e5:45:89:
                    99:8f:59:b9:f2:45:b2:6a:d4:83:99:69:71:02:19:
                    6c:ae:b5:71:2d:63:ee:15:a2:38:ec:ab:ea:4e:99:
                    66:ad:a0:2b:08:13:c4:8c:f6:87:03:4a:59:25:9b:
                    f5:4a:78:d5:67:e1:c8:ea:98:43:18:43:02:cc:fc:
                    72:07:f5:eb:2b:49:25:e9:3c:9b:01:8e:c2:73:aa:
                    d7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CC:37:80:DE:80:33:A0:4D:98:EC:44:13:DB:FC:79:F9:FB:37:EE
            X509v3 Authority Key Identifier:
                keyid:AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32342d3234203d3e20313432333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:7e:b8:b8:06:8b:f5:5d:a9:ba:ee:85:f4:70:04:d9:44:ff:
         86:6a:1f:bd:c4:35:cf:3d:5b:c8:5a:8f:cc:fc:1a:1d:e0:8e:
         cb:d9:28:17:90:49:27:2e:f9:6a:98:5a:54:38:00:a7:2b:e7:
         dc:aa:26:22:51:c3:38:ee:42:be:ef:64:11:26:39:7e:be:41:
         a6:02:39:04:2e:65:be:ba:dc:16:2e:0c:9e:e8:97:9a:df:18:
         46:4e:e1:d9:a6:b7:ab:f6:25:a8:bc:0e:b6:5b:bf:f0:89:4b:
         81:8b:07:a2:9f:4e:e6:de:63:db:78:04:a5:2a:01:2d:c1:75:
         79:13:ff:5a:57:86:4c:19:13:d3:85:a7:ba:22:83:d1:86:ba:
         d6:81:93:46:9d:e5:09:f9:38:ac:8a:a5:c1:a8:b1:63:3d:b0:
         0e:ff:6f:0f:7b:07:a1:17:e1:28:76:f2:9b:eb:17:55:82:56:
         c9:fe:2a:b7:ed:97:ec:ff:89:88:a7:af:fd:9c:7b:e0:38:3e:
         17:9d:7b:d3:2c:1e:76:0e:4c:dd:e1:9d:0a:6e:f7:18:dd:78:
         76:d0:bd:b4:fa:64:11:80:0d:fa:61:65:9e:13:75:5a:bf:1a:
         ce:50:d1:d0:f1:b0:d7:1c:9f:48:a3:39:8b:15:d0:b8:ac:31:
         2c:95:d2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:04 2024 by rpki-client on console-ams.rpki-client.org