Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/3130332e3231312e32372e302f32342d3234203d3e20313530313933.roa
File:                     3130332e3231312e32372e302f32342d3234203d3e20313530313933.roa (raw, json)
Hash identifier:          QHpKXZVuXG2f340QMscd0f+AGvxE5DXBqxwCG9DIRdI=
Subject key identifier:   D4:97:F8:BA:1F:69:01:93:13:B6:6A:CD:94:31:54:27:EB:D9:D2:4A
Certificate issuer:       /CN=69CE57F4984A7B332974000C0033734628A36A46
Certificate serial:       0D4A5F1B5C548FA4A10A7466C0079012A91A2E3F
Authority key identifier: 69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/3130332e3231312e32372e302f32342d3234203d3e20313530313933.roa
Signing time:             Thu 15 Aug 2024 18:00:02 +0000
ROA not before:           Thu 15 Aug 2024 17:55:02 +0000
ROA not after:            Thu 14 Aug 2025 18:00:02 +0000
asID:                     150193
IP address blocks:        103.211.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.crl
                          rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4a:5f:1b:5c:54:8f:a4:a1:0a:74:66:c0:07:90:12:a9:1a:2e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69CE57F4984A7B332974000C0033734628A36A46
        Validity
            Not Before: Aug 15 17:55:02 2024 GMT
            Not After : Aug 14 18:00:02 2025 GMT
        Subject: CN=D497F8BA1F69019313B66ACD94315427EBD9D24A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3b:e8:ab:60:aa:c2:f2:ee:6d:2e:6b:27:7c:
                    77:13:51:da:cc:ba:c1:83:16:a3:50:7d:e4:d6:f7:
                    0f:03:83:b0:de:e6:55:1d:0d:f0:d9:21:bb:86:b0:
                    00:c4:df:b6:a0:93:f6:d0:1d:41:9d:29:5c:f3:1d:
                    3f:d6:21:2b:cd:ee:80:9e:60:b5:2c:00:53:6f:a7:
                    55:8d:23:9f:d6:ad:c9:c3:5e:ec:1f:d6:1b:81:76:
                    1c:be:54:38:c3:8c:7c:45:5a:13:72:22:cb:7e:7e:
                    7a:23:3a:8a:a5:61:c3:1a:9c:f1:e3:79:f9:11:21:
                    bc:03:d7:f3:05:7a:fd:0c:4c:b0:0e:37:e6:3e:a2:
                    d2:13:ea:74:2d:ef:d4:0d:10:03:a0:ec:52:1b:c3:
                    8f:5d:69:fb:45:7d:9c:f1:b2:71:d8:b5:9e:33:d1:
                    5b:d9:66:bd:7f:3c:89:5f:ae:44:9b:ab:4c:c3:31:
                    b5:51:a8:96:a1:c9:d2:f7:47:ae:0f:31:a6:b6:a6:
                    88:bb:12:aa:9c:0a:ad:9e:f2:42:b0:31:74:e7:94:
                    e5:c4:5a:5d:40:0e:83:ff:aa:95:a5:76:5b:1b:23:
                    3a:d5:63:17:bd:2a:f4:5a:24:c9:9b:cd:e8:9b:14:
                    b0:fb:50:67:e7:69:83:07:9b:69:d1:44:f9:9f:8c:
                    56:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:97:F8:BA:1F:69:01:93:13:B6:6A:CD:94:31:54:27:EB:D9:D2:4A
            X509v3 Authority Key Identifier:
                keyid:69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/3130332e3231312e32372e302f32342d3234203d3e20313530313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:67:52:84:e0:d6:b4:92:ba:a4:59:06:a4:29:eb:20:3e:45:
         db:8a:9c:c7:8e:d3:9a:e8:2b:46:59:6e:a6:43:9d:ea:aa:8f:
         4a:23:50:41:05:57:e2:e4:51:aa:46:f0:74:81:2b:1f:3f:a0:
         df:13:8d:6e:96:2f:ee:8f:8f:2f:96:d9:a8:a6:07:ae:3d:e0:
         26:b8:a3:65:ef:11:b5:0f:9e:a2:54:17:cc:23:de:c2:e6:27:
         7c:6b:47:54:27:5a:14:d5:a2:7b:0b:40:7b:e6:c9:16:6f:a1:
         ba:32:3e:65:7d:45:4b:3d:a0:36:8b:3b:40:77:b9:2a:59:07:
         f8:11:c1:29:06:37:2d:33:af:69:d3:60:c4:53:6e:96:ea:88:
         06:e0:a9:1d:9e:66:e4:9b:f6:fe:20:dc:56:f6:88:6c:5a:88:
         84:c8:25:3b:37:6c:f1:69:83:89:f0:cf:88:0a:7f:e8:a4:07:
         d9:17:4a:95:3d:19:15:68:7c:8c:80:5f:d8:0a:5a:a8:30:1e:
         fc:7c:ed:92:6f:14:27:7c:12:41:4c:7f:7d:00:f8:a3:fa:de:
         9f:e6:a8:32:5f:94:6a:b5:22:9a:b6:e8:ec:52:22:f7:e0:12:
         7f:60:71:08:ae:f1:3c:f4:20:05:b0:90:b4:c6:db:d2:12:55:
         a3:59:ea:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:10 2024 by rpki-client on console-ams.rpki-client.org