Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32332d3233203d3e20313530313835.roa
File:                     3130332e34312e3234382e302f32332d3233203d3e20313530313835.roa (raw, json)
Hash identifier:          yOggfaLQy1wCP6EJKYlVmjOsMKIKCDzmwTOVDFv19+I=
Subject key identifier:   A4:51:78:BF:44:47:8F:C9:34:E0:B3:85:87:87:2F:19:D5:1A:6D:A3
Certificate issuer:       /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
Certificate serial:       3CCFB77826D8445A6F52CE77B5E9587D19CC2B00
Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32332d3233203d3e20313530313835.roa
Signing time:             Tue 19 Nov 2024 23:51:59 +0000
ROA not before:           Tue 19 Nov 2024 23:46:59 +0000
ROA not after:            Tue 18 Nov 2025 23:51:59 +0000
asID:                     150185
IP address blocks:        103.41.248.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl
                          rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 10:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cf:b7:78:26:d8:44:5a:6f:52:ce:77:b5:e9:58:7d:19:cc:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
        Validity
            Not Before: Nov 19 23:46:59 2024 GMT
            Not After : Nov 18 23:51:59 2025 GMT
        Subject: CN=A45178BF44478FC934E0B38587872F19D51A6DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:61:fe:dd:c6:92:b3:6f:e3:74:ce:d1:17:27:
                    e7:d7:f2:dc:26:6b:6a:01:2f:8f:16:bb:e0:75:cd:
                    68:09:29:38:68:8d:d4:ab:3e:5b:8c:0e:2a:64:f6:
                    f2:67:ae:80:8d:a1:1b:2d:25:81:42:99:5a:12:4f:
                    19:99:4c:59:4b:f4:75:8c:eb:68:0c:88:6e:f2:69:
                    47:e2:b4:c2:18:91:52:56:99:c9:2b:ec:4d:27:e6:
                    15:73:3f:bb:bc:ad:6f:40:53:e1:ad:e6:eb:49:1d:
                    fc:e3:c9:ad:8c:d2:3a:b9:7e:35:ff:d8:6e:c7:bc:
                    55:4c:92:87:dd:63:b1:da:c7:23:b1:e8:c8:59:a8:
                    42:c0:6e:1c:2b:78:22:ba:58:50:c1:db:e8:61:61:
                    92:32:32:42:ae:b6:30:38:63:99:93:84:a9:ac:40:
                    d7:77:92:41:af:7f:06:d6:cf:21:47:2e:6c:4d:63:
                    59:32:e8:1b:d3:84:54:62:82:c3:bb:46:b4:d9:ac:
                    66:01:08:ac:4f:07:5a:5e:e7:58:30:72:38:89:33:
                    e9:b6:2c:29:18:dc:e5:fa:bc:71:ea:47:2e:0c:71:
                    25:eb:d6:de:f1:29:64:58:65:0d:43:11:28:ac:6f:
                    75:0c:fb:63:78:28:f1:6f:23:47:95:a9:e1:f6:e1:
                    9d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:51:78:BF:44:47:8F:C9:34:E0:B3:85:87:87:2F:19:D5:1A:6D:A3
            X509v3 Authority Key Identifier:
                keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32332d3233203d3e20313530313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:32:2d:18:05:bd:b6:57:23:d4:64:c8:74:2d:89:ee:9c:86:
         ad:18:60:ee:97:48:b9:73:7c:68:9d:bd:4d:9b:37:d0:64:fa:
         bc:95:88:f6:49:9e:ae:05:d8:2a:44:1e:7e:cc:10:46:d9:9f:
         46:53:41:db:8e:e2:76:80:ee:9c:20:dd:16:df:e7:8b:ec:82:
         3b:74:94:7a:62:dd:9f:98:6d:ac:19:e2:db:e4:36:02:d2:8a:
         33:dc:a2:e0:db:b9:92:1a:e9:6e:43:ff:11:be:7f:fd:fd:78:
         d1:c5:87:44:23:9c:c7:80:64:13:58:74:d7:c4:c7:47:71:aa:
         6e:df:ab:93:22:44:56:3b:bf:35:95:07:14:1a:c4:f2:e8:2f:
         a9:35:a4:52:77:0d:f8:d2:93:fc:9c:84:97:3a:d3:7a:3f:ff:
         f8:c3:e1:bc:f4:5e:4e:48:f0:61:8b:c7:ac:d7:c0:0b:c9:f2:
         f1:98:34:ee:14:4c:fc:db:a7:82:ef:71:27:aa:8d:40:64:f0:
         5b:82:b3:3b:9b:a2:8a:df:74:95:00:10:a6:f8:8d:09:c9:70:
         fa:7c:98:3c:ea:72:66:9a:c9:a8:70:7c:22:2a:ea:51:fe:37:
         cb:7a:1c:d6:b6:11:2f:3c:83:15:7a:e9:5c:29:90:60:de:fb:
         bd:6d:77:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org