Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/3130332e3136322e3130362e302f32332d3234203d3e20313431363533.roa
File:                     3130332e3136322e3130362e302f32332d3234203d3e20313431363533.roa (raw, json)
Hash identifier:          0Uw2PIlWDAGE9EAdIQN+cpycFZFDrSr303RCOe7U/E8=
Subject key identifier:   BE:C2:D8:FB:DD:83:43:10:56:5A:8C:8B:1D:E1:C8:EF:2F:CA:2F:4F
Certificate issuer:       /CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C
Certificate serial:       4A6055E6A5735FED7EC7E1264928339B8F2A124B
Authority key identifier: 11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/3130332e3136322e3130362e302f32332d3234203d3e20313431363533.roa
Signing time:             Sun 08 Sep 2024 15:04:26 +0000
ROA not before:           Sun 08 Sep 2024 14:59:26 +0000
ROA not after:            Sun 07 Sep 2025 15:04:26 +0000
asID:                     141653
IP address blocks:        103.162.106.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl
                          rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Oct 2024 06:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:60:55:e6:a5:73:5f:ed:7e:c7:e1:26:49:28:33:9b:8f:2a:12:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C
        Validity
            Not Before: Sep  8 14:59:26 2024 GMT
            Not After : Sep  7 15:04:26 2025 GMT
        Subject: CN=BEC2D8FBDD834310565A8C8B1DE1C8EF2FCA2F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:b1:18:57:22:6f:62:aa:52:59:ee:45:76:
                    9a:00:7c:36:da:ce:17:92:51:03:c5:99:63:4b:3f:
                    fb:40:3d:bb:32:6e:33:f6:a3:1b:62:62:12:7b:e9:
                    07:bb:3d:d7:31:1a:a8:2c:41:53:30:5b:01:df:41:
                    91:5a:02:37:4e:30:9a:2b:dc:ba:cc:55:47:93:15:
                    12:11:81:52:dc:b8:4a:f4:83:0b:be:ed:14:0d:6b:
                    4e:08:8c:5a:fc:3a:90:af:0f:95:5c:c0:0e:1d:51:
                    be:d1:ca:bd:fd:d2:a1:cb:43:85:04:dc:ef:77:df:
                    a8:e5:c8:95:76:1d:e6:53:70:d0:b4:03:24:48:98:
                    fc:a7:19:ec:95:d8:b5:54:57:23:65:35:de:6b:79:
                    b0:70:20:f0:32:e2:44:3f:80:d9:3d:4a:65:de:7f:
                    51:c6:f7:82:83:a0:4e:b6:84:51:41:c9:a2:66:82:
                    3b:7e:20:5f:02:eb:48:b6:a9:57:6e:83:45:7f:21:
                    be:f4:53:0d:f6:2b:68:dd:13:bb:7a:45:63:56:ff:
                    b3:f7:8a:4c:4c:29:ba:af:f3:82:2e:19:be:ef:61:
                    83:68:d3:89:02:74:9f:6a:6b:22:62:c4:dc:05:41:
                    5e:fc:bd:3a:17:8e:da:71:c8:03:4e:7d:45:68:66:
                    7e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C2:D8:FB:DD:83:43:10:56:5A:8C:8B:1D:E1:C8:EF:2F:CA:2F:4F
            X509v3 Authority Key Identifier:
                keyid:11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/3130332e3136322e3130362e302f32332d3234203d3e20313431363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:39:76:4a:b1:86:94:84:0d:b7:52:d7:8d:d4:13:ef:67:a5:
         f4:32:89:c1:25:d8:25:3c:61:c1:8a:27:3f:37:02:24:54:4e:
         63:78:3e:a3:02:20:50:19:bb:8e:30:61:cd:2a:a7:0f:b2:e6:
         99:6c:4d:d0:88:b5:44:09:42:14:8c:87:aa:5b:f9:d9:4e:72:
         32:78:be:7c:22:e9:ce:c6:ce:99:4e:3c:8f:08:2b:ef:c2:42:
         d8:03:06:f4:72:30:a6:df:f9:69:16:85:c3:05:a7:8d:f3:45:
         ed:6b:79:65:76:12:af:0b:8a:ea:af:c4:d2:3e:a2:1d:94:ed:
         b7:5f:76:5f:72:cf:43:57:3a:53:2c:73:f7:d1:33:26:56:46:
         b6:45:97:e6:79:8f:c6:25:0f:41:83:97:17:32:b5:c2:df:5b:
         88:3e:f3:aa:13:a7:53:e7:67:96:f0:ba:90:66:02:df:b4:f9:
         1c:e4:39:c2:98:13:a6:1d:52:fb:10:c6:60:cf:15:80:2f:50:
         e2:32:94:67:a9:6b:85:2b:79:e9:ee:9b:93:d3:ee:ca:48:a6:
         57:30:78:e0:c5:63:40:b3:a6:d7:fc:6b:d3:b3:25:79:04:b4:
         e7:f1:a6:e8:f2:5a:c6:18:16:43:52:76:c1:ae:de:50:30:64:
         aa:c3:14:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:42 2024 by rpki-client on console-ams.rpki-client.org