Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/3130332e3137352e32342e302f32342d3234203d3e20313339393532.roa
File:                     3130332e3137352e32342e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier:          6N2zZq51uiKWHkHr8bnvsHH+UdIZQrumHmhwLr8jJiM=
Subject key identifier:   70:46:A9:B7:0F:F3:50:19:91:71:76:F6:7B:9A:37:DE:6D:D9:68:A1
Certificate issuer:       /CN=E07D333345CD7D30F1DC10D98F6E73457739DF18
Certificate serial:       6C4D9AD4401DDDBD4294C7695633872220775E12
Authority key identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/3130332e3137352e32342e302f32342d3234203d3e20313339393532.roa
Signing time:             Sun 29 Sep 2024 18:00:01 +0000
ROA not before:           Sun 29 Sep 2024 17:55:01 +0000
ROA not after:            Sun 28 Sep 2025 18:00:01 +0000
asID:                     139952
IP address blocks:        103.175.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl
                          rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 22:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4d:9a:d4:40:1d:dd:bd:42:94:c7:69:56:33:87:22:20:77:5e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E07D333345CD7D30F1DC10D98F6E73457739DF18
        Validity
            Not Before: Sep 29 17:55:01 2024 GMT
            Not After : Sep 28 18:00:01 2025 GMT
        Subject: CN=7046A9B70FF35019917176F67B9A37DE6DD968A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8f:04:fb:d9:ea:46:2b:99:24:dc:09:b3:f8:
                    4a:fd:38:90:19:27:8c:00:05:66:ff:21:4a:fb:9e:
                    57:78:f6:56:d1:bc:6e:29:d3:44:9f:a4:66:9a:31:
                    31:d4:38:bf:91:5d:4c:ed:1b:fc:9f:30:50:81:87:
                    db:c4:77:43:9f:65:f7:d2:39:88:8c:da:05:86:1a:
                    f5:c1:f5:4b:a7:24:b7:fb:de:8d:b5:ab:51:ed:e4:
                    3a:14:85:46:c8:f3:37:33:18:9e:f5:dc:89:00:2b:
                    a5:83:19:e8:68:9a:91:e8:59:2e:ca:56:ca:76:50:
                    69:02:34:0f:8d:de:fa:ed:49:13:4c:82:e3:bd:11:
                    ab:3e:2a:28:83:17:01:06:bc:7b:4c:7f:f5:90:2b:
                    96:2e:de:71:61:fb:04:71:86:f0:02:8c:1c:97:7b:
                    a9:1d:25:6f:f9:51:dc:db:36:4b:67:55:9a:39:25:
                    f8:9b:28:e0:68:59:ba:73:13:5b:62:80:5d:d0:15:
                    a9:85:5d:92:06:31:cc:0f:d5:37:49:bf:76:f9:ce:
                    99:a6:7e:d6:81:54:dc:f8:d6:92:cc:27:66:1b:34:
                    be:b1:36:fb:2f:4c:db:90:ec:42:81:67:46:56:d8:
                    c0:1c:af:ac:ab:25:e9:d2:fd:8b:ec:ff:cc:67:f9:
                    ea:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:46:A9:B7:0F:F3:50:19:91:71:76:F6:7B:9A:37:DE:6D:D9:68:A1
            X509v3 Authority Key Identifier:
                keyid:E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/3130332e3137352e32342e302f32342d3234203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:26:3e:4b:df:22:d2:c4:ed:92:c5:a1:13:14:e3:03:5d:e5:
         26:f3:f4:a0:7e:71:dd:22:66:fa:a9:a1:f7:fc:eb:8b:45:ba:
         31:b4:8e:36:ff:0d:f1:4c:25:49:6a:6d:7a:57:f9:d6:71:e5:
         49:49:d2:dc:00:a5:81:19:d1:10:ca:22:62:75:b8:15:6d:a3:
         94:b8:36:2f:3e:b1:7f:f8:cb:99:72:52:fd:2d:5e:da:6f:c5:
         4c:8c:20:13:cf:c5:c0:9d:b7:68:ef:35:ef:88:10:90:72:8c:
         04:f4:70:a4:26:86:7a:c1:63:32:55:65:70:e0:4f:68:62:c8:
         83:fb:f4:e6:36:91:c0:eb:ea:51:05:4e:d0:da:b8:ce:04:63:
         ef:bb:f9:0e:db:55:d1:ee:5a:b9:ec:5f:25:7e:06:e5:7c:74:
         86:7a:09:2b:c2:dd:89:36:83:da:e0:d4:74:8c:eb:ec:b2:32:
         b3:b6:89:9c:24:4f:5e:e9:f3:17:49:ad:c0:bc:06:a4:7b:93:
         5c:ae:c1:26:76:40:01:76:d9:53:99:26:9e:a2:48:87:10:4b:
         08:b6:03:70:22:07:81:ff:11:c3:58:69:b0:4c:92:d4:90:40:
         42:8e:c3:94:d1:d5:30:59:36:c7:6c:42:df:bd:be:a2:ab:a4:
         3c:ef:7c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org