Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa
File:                     3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa (raw, json)
Hash identifier:          IqwnxQbnL7sp6UNaVwUJcBMKNrpPF3aUV90FZkipT5U=
Subject key identifier:   9C:3A:88:DC:3A:63:73:6E:D1:51:2C:90:4F:DC:6B:BC:5C:CE:AF:87
Certificate issuer:       /CN=15B7AAB48355A98C761DD27A589DF602A4D38E3D
Certificate serial:       4F471063E8DADB5C83161774AD9F523928F1E3D5
Authority key identifier: 15:B7:AA:B4:83:55:A9:8C:76:1D:D2:7A:58:9D:F6:02:A4:D3:8E:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7AAB48355A98C761DD27A589DF602A4D38E3D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa
Signing time:             Fri 19 Apr 2024 04:02:05 +0000
ROA not before:           Fri 19 Apr 2024 03:57:05 +0000
ROA not after:            Fri 18 Apr 2025 04:02:05 +0000
asID:                     150526
IP address blocks:        103.149.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.crl
                          rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7AAB48355A98C761DD27A589DF602A4D38E3D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:47:10:63:e8:da:db:5c:83:16:17:74:ad:9f:52:39:28:f1:e3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15B7AAB48355A98C761DD27A589DF602A4D38E3D
        Validity
            Not Before: Apr 19 03:57:05 2024 GMT
            Not After : Apr 18 04:02:05 2025 GMT
        Subject: CN=9C3A88DC3A63736ED1512C904FDC6BBC5CCEAF87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b6:91:28:03:35:cb:93:36:3a:1e:15:7a:90:
                    4f:23:63:17:d9:05:de:44:5b:fb:55:1c:03:55:49:
                    43:c0:27:08:39:8e:7b:ef:3c:a9:f7:d4:5a:93:f1:
                    17:48:38:f7:d6:e5:d0:42:f2:91:36:de:3a:71:04:
                    06:f1:31:c4:72:fa:80:ba:a6:98:d6:35:3b:25:0b:
                    c1:77:1d:c1:58:08:fa:db:14:a4:68:16:21:62:fb:
                    f7:57:25:c5:4b:cd:46:da:45:34:79:23:b0:49:5a:
                    6d:9d:0c:51:1f:45:02:ae:01:6c:2c:22:6a:fe:42:
                    c5:cf:ab:09:c6:22:6d:cd:f2:f0:9b:b7:54:45:87:
                    32:3f:57:e2:c0:14:d0:e9:ec:62:f4:dd:08:a4:b8:
                    cd:14:e9:da:5d:e2:1f:06:64:d4:e4:67:c7:8e:21:
                    16:08:cf:6c:64:6e:5c:89:57:83:c5:d6:42:56:07:
                    d8:1b:24:42:4e:62:c1:fd:72:24:0e:d8:b2:00:dd:
                    ad:60:3c:af:17:a3:df:e0:bd:48:57:4e:a6:55:15:
                    d1:70:a5:ea:f3:d3:6d:4d:15:95:c1:fe:80:17:c8:
                    ab:05:e3:2b:92:16:e0:53:40:35:d1:ca:38:97:33:
                    73:1a:d1:f3:96:fb:28:ce:22:f9:b9:f3:cb:36:34:
                    bd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3A:88:DC:3A:63:73:6E:D1:51:2C:90:4F:DC:6B:BC:5C:CE:AF:87
            X509v3 Authority Key Identifier:
                keyid:15:B7:AA:B4:83:55:A9:8C:76:1D:D2:7A:58:9D:F6:02:A4:D3:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7AAB48355A98C761DD27A589DF602A4D38E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:42:64:1c:39:17:03:af:87:bb:50:0e:17:e3:33:99:8e:c4:
         17:75:2c:fa:3f:f5:a3:2e:20:00:a7:1a:9e:17:ac:4a:39:cb:
         34:d8:dc:ce:5a:d2:59:cc:61:d2:03:bc:eb:96:fb:23:7e:c0:
         ab:41:fc:5c:94:d4:ea:22:e0:48:6f:61:60:88:ca:b6:00:ea:
         63:ea:4e:4c:dd:2f:b8:14:e7:7e:cd:e0:02:25:58:c9:fc:dd:
         6f:5c:af:0e:b5:d8:26:b6:73:f0:1f:c0:f5:d2:74:b4:96:5f:
         c7:7c:8e:8c:c4:82:be:62:bb:33:02:7f:f1:ac:c4:7f:21:e4:
         40:ab:dc:b2:e4:1d:81:6e:01:c6:8d:b5:7c:9f:f4:09:30:df:
         52:8a:98:fd:b5:aa:6f:55:d7:fe:e0:e5:87:f2:20:7c:6b:79:
         eb:d4:94:0c:bc:17:23:73:73:4a:28:1b:f3:0c:76:cf:79:c7:
         7b:82:67:a8:7b:ad:23:64:56:ab:55:46:7e:56:bb:50:7c:74:
         ff:46:9d:74:13:36:e2:41:b0:83:d4:90:32:80:60:2b:34:98:
         19:77:16:0d:c8:fe:79:2c:89:5d:79:69:3e:5e:9c:20:74:ab:
         3d:72:c6:fd:75:bb:84:b2:23:ec:69:56:0d:f5:80:23:3d:8a:
         65:88:17:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:17 2024 by rpki-client on console-fra.rpki-client.org