Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/3130332e3231312e32362e302f32342d3234203d3e20313530313933.roa
File:                     3130332e3231312e32362e302f32342d3234203d3e20313530313933.roa (raw, json)
Hash identifier:          PV2HuUkz7O5+EwYA2W7kDpKNpaNzFvBV3xAns7uGgEc=
Subject key identifier:   7B:0B:00:28:1C:5F:F2:3B:3B:83:62:BE:D1:CD:48:09:E9:15:BC:F4
Certificate issuer:       /CN=69CE57F4984A7B332974000C0033734628A36A46
Certificate serial:       2129EB964FB59E94B358F48321E0D20A3A89690D
Authority key identifier: 69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/3130332e3231312e32362e302f32342d3234203d3e20313530313933.roa
Signing time:             Thu 15 Aug 2024 18:00:02 +0000
ROA not before:           Thu 15 Aug 2024 17:55:02 +0000
ROA not after:            Thu 14 Aug 2025 18:00:02 +0000
asID:                     150193
IP address blocks:        103.211.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.crl
                          rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 19:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:29:eb:96:4f:b5:9e:94:b3:58:f4:83:21:e0:d2:0a:3a:89:69:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69CE57F4984A7B332974000C0033734628A36A46
        Validity
            Not Before: Aug 15 17:55:02 2024 GMT
            Not After : Aug 14 18:00:02 2025 GMT
        Subject: CN=7B0B00281C5FF23B3B8362BED1CD4809E915BCF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:d3:fc:55:0a:5b:2c:4a:cf:b0:58:ca:16:
                    84:5c:68:14:b9:f2:4c:58:d7:7a:4f:2b:0f:e1:de:
                    a2:d4:be:29:99:9e:bd:9b:a9:87:31:f7:11:52:af:
                    18:fb:2c:0b:53:9a:b8:79:1a:88:99:77:54:ac:a6:
                    16:56:ed:38:d6:ae:49:6f:5a:45:99:3d:df:02:bd:
                    ea:45:b6:59:36:5e:84:bd:19:36:03:cc:af:0a:0f:
                    f8:a0:50:33:10:3c:8c:5f:66:81:17:2a:2d:67:d1:
                    2a:95:b8:c1:e2:cd:46:e6:b7:6b:f7:88:bf:1e:b4:
                    79:54:a0:6c:fa:19:2a:99:13:cd:0f:96:dd:af:fb:
                    0e:b3:ad:fc:09:e6:4a:29:7b:dc:d0:d0:ce:04:3c:
                    09:d2:e4:c0:d3:e9:5f:d4:c6:6d:72:80:82:46:87:
                    ca:14:5d:20:84:74:36:cf:1d:d5:88:d1:63:a8:52:
                    98:39:e4:d3:03:71:00:96:c7:47:35:f8:ea:e6:0e:
                    5f:50:89:07:6e:4a:fe:af:69:36:55:ae:ce:46:41:
                    57:55:9a:82:4f:66:74:2d:c6:54:0c:b5:36:00:09:
                    da:24:04:10:03:c6:19:a8:ae:1d:f3:c3:38:d3:6e:
                    34:99:e3:aa:b6:a7:f2:c1:a7:a7:84:4c:6e:48:8e:
                    56:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0B:00:28:1C:5F:F2:3B:3B:83:62:BE:D1:CD:48:09:E9:15:BC:F4
            X509v3 Authority Key Identifier:
                keyid:69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/3130332e3231312e32362e302f32342d3234203d3e20313530313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:93:47:9d:70:29:f4:98:e1:98:ec:97:76:15:4f:b7:68:02:
         4d:83:58:25:e5:9c:b1:17:42:4e:93:06:cb:ea:fb:c1:38:5d:
         45:63:4b:1d:bd:34:52:35:a6:bd:9c:77:59:16:2d:2c:bb:8c:
         84:05:2c:2e:a7:a0:ac:90:69:22:69:ac:71:97:87:74:9a:d6:
         6d:df:a8:41:c1:77:2b:bd:f4:8a:f0:ec:ce:ae:a3:aa:18:c2:
         0e:f0:f8:97:72:ed:02:65:10:4a:c3:30:7b:68:d2:21:2c:02:
         13:75:78:3f:37:83:a0:ee:c3:61:30:95:c4:0d:a1:16:4e:7f:
         e2:3e:a5:b1:ba:e0:85:93:08:a8:a9:93:cb:2d:0e:a2:70:6c:
         45:83:2c:cb:cf:7c:35:5c:e1:43:2f:ab:9f:ff:27:98:ce:5b:
         51:f6:0d:2e:ad:11:af:0d:74:5c:55:b4:03:ee:ea:da:9a:fc:
         4b:e4:db:af:24:08:27:19:7c:34:59:40:cc:ac:e1:d7:55:53:
         5d:fc:fa:5f:01:52:2c:d4:b7:ff:e5:1a:2a:65:b0:fc:28:fc:
         1f:c8:81:b4:9d:cb:7e:d4:1c:25:5e:50:66:0c:ed:91:f5:17:
         28:cc:3a:9d:11:18:c0:8e:f8:3d:ee:18:26:7f:77:db:9d:ae:
         df:99:f8:4a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUISnrlk+1npSzWPSDIeDSCjqJaQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzczNDYy
OEEzNkE0NjAeFw0yNDA4MTUxNzU1MDJaFw0yNTA4MTQxODAwMDJaMDMxMTAvBgNV
BAMTKDdCMEIwMDI4MUM1RkYyM0IzQjgzNjJCRUQxQ0Q0ODA5RTkxNUJDRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFCtP8VQpbLErPsFjKFoRcaBS5
8kxY13pPKw/h3qLUvimZnr2bqYcx9xFSrxj7LAtTmrh5GoiZd1SsphZW7TjWrklv
WkWZPd8CvepFtlk2XoS9GTYDzK8KD/igUDMQPIxfZoEXKi1n0SqVuMHizUbmt2v3
iL8etHlUoGz6GSqZE80Plt2v+w6zrfwJ5kope9zQ0M4EPAnS5MDT6V/Uxm1ygIJG
h8oUXSCEdDbPHdWI0WOoUpg55NMDcQCWx0c1+OrmDl9QiQduSv6vaTZVrs5GQVdV
moJPZnQtxlQMtTYACdokBBADxhmorh3zwzjTbjSZ46q2p/LBp6eETG5Ijlb1AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUewsAKBxf8js7g2K+0c1ICekVvPQwHwYDVR0j
BBgwFoAUac5X9JhKezMpdAAMADNzRiijakYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
MGQ2NmI2OS03MDdhLTQ4MzAtYTJkMy1hZjZjYTBkMTViY2UvMC82OUNFNTdGNDk4
NEE3QjMzMjk3NDAwMEMwMDMzNzM0NjI4QTM2QTQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzczNDYyOEEz
NkE0Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcwZDY2YjY5LTcwN2EtNDgzMC1h
MmQzLWFmNmNhMGQxNWJjZS8wLzMxMzAzMzJlMzIzMTMxMmUzMjM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzEzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9MaMA0GCSqG
SIb3DQEBCwUAA4IBAQBTk0edcCn0mOGY7Jd2FU+3aAJNg1gl5ZyxF0JOkwbL6vvB
OF1FY0sdvTRSNaa9nHdZFi0su4yEBSwup6CskGkiaaxxl4d0mtZt36hBwXcrvfSK
8OzOrqOqGMIO8PiXcu0CZRBKwzB7aNIhLAITdXg/N4Og7sNhMJXEDaEWTn/iPqWx
uuCFkwioqZPLLQ6icGxFgyzLz3w1XOFDL6uf/yeYzltR9g0urRGvDXRcVbQD7ura
mvxL5NuvJAgnGXw0WUDMrOHXVVNd/PpfAVIs1Lf/5RoqZbD8KPwfyIG0nct+1Bwl
XlBmDO2R9RcozDqdERjAjvg97hgmf3fbna7fmfhK
-----END CERTIFICATE-----
Generated at Thu Nov 28 21:15:15 2024 by rpki-client on console-ams.rpki-client.org