Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa
File:                     3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (raw, json)
Hash identifier:          uvqfjeAuMsDgy2S+lqKfVA/VGjsHmAxmc+ppKnV8vvI=
Subject key identifier:   0D:79:C6:CD:07:A9:97:02:77:FE:AB:CA:ED:B3:F9:78:F9:23:55:5C
Certificate issuer:       /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43
Certificate serial:       411B5AA6C6D501B75833DDA2E5B9AFAFD1E44862
Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa
Signing time:             Mon 01 Jul 2024 01:05:55 +0000
ROA not before:           Mon 01 Jul 2024 01:00:55 +0000
ROA not after:            Mon 30 Jun 2025 01:05:55 +0000
asID:                     139998
IP address blocks:        103.148.198.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl
                          rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1b:5a:a6:c6:d5:01:b7:58:33:dd:a2:e5:b9:af:af:d1:e4:48:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43
        Validity
            Not Before: Jul  1 01:00:55 2024 GMT
            Not After : Jun 30 01:05:55 2025 GMT
        Subject: CN=0D79C6CD07A9970277FEABCAEDB3F978F923555C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9a:7f:2f:63:12:3f:8c:a8:e5:1a:8d:47:f2:
                    fe:55:49:b1:b5:3f:a2:47:fc:85:7a:c5:b9:3e:8c:
                    99:db:88:34:74:50:88:ac:4f:02:15:f3:73:19:37:
                    f6:dd:ef:b7:f0:95:54:10:48:74:53:72:70:59:34:
                    22:3e:36:54:36:37:ef:2f:e1:11:26:14:cd:ed:b2:
                    0d:e9:28:f3:20:e2:78:e2:e9:1a:11:0a:2d:d8:8e:
                    2e:55:69:96:c0:15:fa:bf:eb:17:6e:1a:cf:a9:52:
                    31:df:9f:05:36:ff:79:86:4f:65:b7:90:3b:54:9c:
                    b6:b2:d3:47:29:63:28:d4:e3:1c:c3:27:76:b7:b4:
                    9d:28:ab:88:cc:1b:3b:51:93:94:84:f4:4f:c1:71:
                    2d:68:03:79:53:aa:75:7d:a1:9e:bc:7e:17:30:7d:
                    9b:1c:05:e4:2f:31:32:93:b0:32:43:63:20:21:24:
                    2a:ed:8c:b0:4a:cb:41:10:f7:54:19:d3:80:d2:a8:
                    ab:cb:bf:1a:b3:33:96:a0:b3:16:71:91:29:2d:16:
                    db:43:12:f0:16:e5:34:27:1c:a3:34:7d:2b:5c:01:
                    86:78:11:3d:17:d1:91:09:4b:ad:d4:cc:42:6a:64:
                    58:81:6f:a0:32:12:6a:34:9a:18:3d:cb:63:f3:8a:
                    a6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:79:C6:CD:07:A9:97:02:77:FE:AB:CA:ED:B3:F9:78:F9:23:55:5C
            X509v3 Authority Key Identifier:
                keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:3d:ed:62:80:e8:f9:72:82:83:8c:e1:5c:47:8a:40:af:71:
         03:57:a9:45:21:29:a0:db:f2:4c:3b:8c:2f:6f:56:4d:1b:a0:
         11:30:a3:c3:28:fb:63:1d:da:10:18:b9:60:85:10:1d:2f:82:
         b8:d2:56:0b:32:67:10:4b:6e:51:ae:8d:0d:4f:c0:a9:f9:9b:
         c7:cf:09:29:3d:cb:ca:ae:46:e1:da:45:60:6d:02:69:aa:8a:
         93:e8:f5:57:96:3f:56:78:65:18:42:04:23:09:d8:b0:29:d0:
         a0:fd:81:37:b6:54:b2:bf:0f:8d:9b:fb:76:e5:08:03:f8:69:
         9b:70:c0:6d:0f:19:0e:10:8e:ba:df:3a:a3:ce:53:34:5d:b0:
         90:55:d4:ee:53:65:2a:48:ba:f8:a7:d9:02:ab:0e:1b:1b:7f:
         27:9b:78:65:5f:70:02:34:b0:23:ed:66:a9:58:a1:91:f1:12:
         4f:c1:86:a7:30:a3:30:33:59:9e:3c:2e:bf:2f:d5:a6:fa:97:
         07:15:f3:13:df:56:3f:01:83:07:78:4a:20:60:ba:d7:7b:d5:
         39:dc:62:2a:b1:5e:49:3e:ef:a3:f0:98:0d:fb:f6:e4:56:49:
         16:8a:a6:14:ad:8a:77:97:fc:1f:1a:db:b1:7b:d5:ec:ec:d1:
         43:9c:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:33 2024 by rpki-client on console-ams.rpki-client.org