Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa
File:                     3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (raw, json)
Hash identifier:          2bEsYY+M/a6h66329zvhWc5tPmskLFx7J4PCIWERGEs=
Subject key identifier:   48:D5:A1:F8:87:8F:67:33:C0:08:A7:A9:DF:86:2D:6F:07:09:70:1D
Certificate issuer:       /CN=A5BB79678DB1239CD393222080CAAF085BEE737F
Certificate serial:       44BA36734AF8A8F26BAD0CDB64D4C7919AEAED21
Authority key identifier: A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa
Signing time:             Sun 16 Jun 2024 17:00:00 +0000
ROA not before:           Sun 16 Jun 2024 16:55:00 +0000
ROA not after:            Sun 15 Jun 2025 17:00:00 +0000
asID:                     150923
IP address blocks:        103.97.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl
                          rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ba:36:73:4a:f8:a8:f2:6b:ad:0c:db:64:d4:c7:91:9a:ea:ed:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5BB79678DB1239CD393222080CAAF085BEE737F
        Validity
            Not Before: Jun 16 16:55:00 2024 GMT
            Not After : Jun 15 17:00:00 2025 GMT
        Subject: CN=48D5A1F8878F6733C008A7A9DF862D6F0709701D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9d:6f:c4:4a:ff:84:f8:3f:15:24:f0:88:2f:
                    12:c1:e7:54:de:1b:fc:1c:60:66:d3:92:34:13:da:
                    96:62:22:d5:13:24:8b:56:1a:4b:f8:10:8c:f9:9e:
                    fa:62:3a:23:77:42:7b:2e:3c:17:b8:6b:0f:02:5c:
                    6d:f2:6d:d3:cc:93:e8:f6:c5:58:c7:17:c4:1c:32:
                    64:48:7e:b0:c9:a1:a4:91:c1:25:9e:1c:8e:04:a7:
                    96:8e:81:4f:fa:51:06:85:6f:c3:e2:5e:c0:52:d1:
                    2f:38:ec:01:32:53:9a:6a:46:d3:be:65:3f:c9:c6:
                    44:56:30:f8:62:d1:1b:74:70:5f:bf:b9:4d:0a:63:
                    67:c1:da:26:6d:92:fa:3f:05:31:c8:1e:47:0e:54:
                    b2:56:2a:a6:21:8a:14:db:b5:6c:df:c5:7d:0b:78:
                    66:f0:ca:29:8b:a3:17:af:d8:56:a7:38:6f:51:cc:
                    47:8f:d9:b2:7d:88:00:50:f8:00:79:cf:e9:42:d0:
                    86:fd:ac:1a:94:e8:13:49:0b:ee:eb:c6:a2:86:71:
                    9d:d9:3a:2e:7a:4a:0d:7b:99:be:80:d1:5e:ec:c4:
                    58:b2:80:37:7f:2a:d4:19:6b:7e:99:b6:be:ed:44:
                    f7:81:45:8d:27:31:27:48:df:cc:69:31:07:d7:44:
                    bc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D5:A1:F8:87:8F:67:33:C0:08:A7:A9:DF:86:2D:6F:07:09:70:1D
            X509v3 Authority Key Identifier:
                keyid:A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:a9:c9:8b:51:c1:ec:f9:f5:e7:e9:b5:0f:ba:3d:41:0f:46:
         be:34:72:15:23:0d:02:6e:8f:47:31:89:56:32:25:cf:d9:c1:
         ad:e9:15:3a:25:53:12:0e:b4:fb:68:fa:34:20:e2:27:70:2c:
         b6:c0:e8:41:6f:42:54:8f:dc:76:54:fc:39:f2:28:65:ea:2d:
         cd:e6:1a:6f:c7:46:78:4f:3d:55:53:15:f3:c6:71:57:91:f8:
         d7:a1:16:59:7e:24:d4:48:d4:91:3f:2b:e0:8f:c1:ba:7f:c4:
         e1:4e:d2:e1:ac:a9:22:e7:c9:fe:59:e3:8b:ae:88:e2:67:98:
         96:0d:07:ee:47:d7:75:ff:ed:7d:b1:54:76:20:df:11:ec:62:
         6f:37:e2:5d:cc:7b:7b:9b:d2:4f:7f:a3:4d:f2:34:19:f4:68:
         cf:b6:fe:dc:3f:89:ab:2b:97:01:fa:d5:dc:2a:24:60:35:9f:
         8d:98:3a:da:c8:2c:f4:f2:38:0e:b2:4f:6b:8e:a8:5d:70:ba:
         fe:33:ec:c9:1f:a3:d9:af:39:fb:b1:71:f1:ae:45:d3:1a:59:
         5d:ab:10:dc:d7:e7:fe:fa:cd:b0:2a:97:3e:dc:10:1a:25:2a:
         99:1d:a1:a8:25:9a:7a:c4:40:b0:ac:14:bd:e0:45:a9:0d:fa:
         4f:29:04:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:02 2024 by rpki-client on console-ams.rpki-client.org