Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa
File:                     3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa (raw, json)
Hash identifier:          wD7K3L0wZgkXzx2g24s15kQ0Tlwyq9mWDYoDHZigfT4=
Subject key identifier:   09:D7:B6:80:EA:42:20:48:3A:19:64:6A:55:3D:9B:18:58:AF:09:D5
Certificate issuer:       /CN=BA0937086D03009DB3422C9809596F09C430C76E
Certificate serial:       4E3DD8D4FE1A0BB13CB0338FC23FF9F1B7AF322F
Authority key identifier: BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa
Signing time:             Wed 17 Apr 2024 10:06:41 +0000
ROA not before:           Wed 17 Apr 2024 10:01:41 +0000
ROA not after:            Wed 16 Apr 2025 10:06:41 +0000
asID:                     138855
IP address blocks:        103.169.222.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl
                          rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 05:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3d:d8:d4:fe:1a:0b:b1:3c:b0:33:8f:c2:3f:f9:f1:b7:af:32:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA0937086D03009DB3422C9809596F09C430C76E
        Validity
            Not Before: Apr 17 10:01:41 2024 GMT
            Not After : Apr 16 10:06:41 2025 GMT
        Subject: CN=09D7B680EA4220483A19646A553D9B1858AF09D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:2c:30:26:71:60:bf:a3:24:17:49:fa:c8:
                    b0:8c:83:7f:66:31:58:cd:e6:48:c2:02:68:b1:54:
                    61:44:f0:54:dc:bf:0b:53:1f:fc:39:40:73:e7:07:
                    8f:af:03:ee:1f:84:78:c4:19:09:09:29:31:ff:24:
                    b5:1f:4f:6e:82:32:99:9f:d6:cf:cc:37:fa:74:53:
                    8e:40:42:9f:b4:d2:7e:ba:3d:11:4c:56:fc:5a:ec:
                    15:83:5e:e7:c8:c3:3d:e6:66:a1:d8:2b:49:9e:94:
                    76:32:67:38:bb:0e:4f:f5:82:cf:ea:6b:41:86:7d:
                    a2:3c:3a:f1:cc:15:14:0c:5e:92:03:e8:76:17:66:
                    2c:a1:cd:1c:b8:40:81:34:a0:32:7b:17:33:02:72:
                    82:19:0f:62:de:f3:bd:de:92:41:86:87:27:1b:65:
                    20:ac:70:8b:c0:4a:e1:5f:f5:d6:5f:3c:ea:1d:df:
                    b0:6a:28:b7:8d:c4:67:68:32:84:1f:11:eb:85:98:
                    c7:b9:cf:e0:18:9b:79:a7:c2:9f:d3:46:80:1d:c3:
                    82:01:af:9f:a7:43:72:ac:4c:2e:5e:0c:30:bb:f8:
                    e1:d1:d5:c1:77:63:87:23:20:ef:7f:37:f5:50:63:
                    14:d3:92:fe:14:d5:82:68:f4:86:2d:b5:43:e1:6f:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D7:B6:80:EA:42:20:48:3A:19:64:6A:55:3D:9B:18:58:AF:09:D5
            X509v3 Authority Key Identifier:
                keyid:BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:72:70:1a:be:a1:20:ee:23:02:c1:26:6b:28:db:51:0d:38:
         77:77:db:b2:61:28:55:b3:60:55:dc:9d:76:8c:22:2e:dc:e8:
         1f:d7:c1:c4:d5:fb:01:ff:88:be:4b:fe:9f:3f:0a:c6:57:ee:
         20:71:7c:5e:13:b3:19:be:4f:91:d6:c7:af:f6:75:13:a1:1d:
         cf:67:97:69:21:5b:5c:eb:3d:c8:0b:75:2d:88:3f:e9:43:1c:
         75:28:43:91:43:4d:9f:0c:62:23:cd:e1:f7:76:37:f4:8f:40:
         ba:56:88:26:50:f1:9b:e7:f2:59:22:3d:60:f4:52:b1:fb:33:
         36:b9:ff:1d:d4:fe:9e:f8:e2:7e:2e:77:39:3c:44:4c:50:b6:
         4c:b0:ec:8d:89:4c:d0:31:73:1a:19:d2:0a:4d:d6:cd:c2:c1:
         31:62:89:25:fd:26:cc:8a:0e:05:b6:a0:48:2e:f5:79:80:8c:
         00:49:26:d0:07:9c:84:7b:56:53:d7:e7:05:b2:3a:b6:d7:c7:
         0d:a4:6a:21:9d:d1:02:ad:7d:06:a9:72:2f:cc:1d:34:ae:a0:
         1b:24:e3:c5:d9:27:ff:2f:d6:f3:02:8a:98:02:dc:33:39:00:
         f3:32:fe:8b:70:f3:e7:04:49:89:c3:27:44:b8:45:01:9a:c6:
         cf:ce:6d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:29:39 2024 by rpki-client on console-fra.rpki-client.org