Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e392e302f32342d3234203d3e20313530393635.roa
File:                     3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (raw, json)
Hash identifier:          mo27uOzY/FcpJT0rYxA1H8eQD6doYAQUyzDjDzkFlO4=
Subject key identifier:   43:06:35:2D:A3:5E:AC:29:94:AD:D8:FD:80:74:42:93:1E:D8:36:2A
Certificate issuer:       /CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0
Certificate serial:       79D54EFB7891791BB08DAED8A554B60CF1C360B2
Authority key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e392e302f32342d3234203d3e20313530393635.roa
Signing time:             Sat 13 Jul 2024 02:00:01 +0000
ROA not before:           Sat 13 Jul 2024 01:55:01 +0000
ROA not after:            Sat 12 Jul 2025 02:00:01 +0000
asID:                     150965
IP address blocks:        103.122.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl
                          rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d5:4e:fb:78:91:79:1b:b0:8d:ae:d8:a5:54:b6:0c:f1:c3:60:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0
        Validity
            Not Before: Jul 13 01:55:01 2024 GMT
            Not After : Jul 12 02:00:01 2025 GMT
        Subject: CN=4306352DA35EAC2994ADD8FD807442931ED8362A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6e:01:c8:87:a8:22:90:77:9d:84:e7:8d:46:
                    89:d8:51:c3:2f:59:d4:02:12:c1:15:36:92:a1:be:
                    ab:a4:ca:c1:ee:07:8a:79:e5:e7:1b:e5:e6:f2:6e:
                    41:0e:12:db:23:67:7c:cd:a9:1a:51:c6:f5:62:bd:
                    c9:3d:8f:aa:ec:72:86:92:1b:3e:27:d6:c3:b0:d2:
                    fc:d5:2e:33:02:78:57:b8:d2:24:17:3c:17:e5:88:
                    ba:1c:88:22:81:0a:74:94:25:5f:3c:6d:d3:80:fb:
                    61:df:f7:c8:14:28:1c:22:10:a3:06:49:8c:78:86:
                    4e:ac:68:15:97:eb:3d:b2:4a:5a:34:96:bf:a1:99:
                    02:f6:6e:fa:34:5e:4b:44:de:fa:ef:1d:78:cc:c3:
                    1e:68:db:b7:05:8f:74:71:dd:6b:a2:c6:9e:9c:d2:
                    55:9e:27:76:b9:4a:c1:a1:37:c4:5e:53:3d:8f:49:
                    e2:16:bd:d5:ec:f8:e1:51:ce:74:d4:43:a7:d2:5f:
                    d1:ee:a4:6b:8e:2b:71:00:eb:28:05:2a:d6:eb:7d:
                    d5:3c:76:0b:0d:20:87:4f:89:27:2c:02:18:a1:3f:
                    f3:1d:c3:bd:2a:41:1a:7c:a2:c0:50:be:bb:c1:36:
                    5b:f2:bf:40:52:27:90:5a:67:04:42:b8:25:6f:4c:
                    09:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:06:35:2D:A3:5E:AC:29:94:AD:D8:FD:80:74:42:93:1E:D8:36:2A
            X509v3 Authority Key Identifier:
                keyid:8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e392e302f32342d3234203d3e20313530393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:1a:86:c0:3f:54:b1:63:91:b9:95:f5:d2:f8:2c:b2:7e:c7:
         20:78:9f:ba:78:34:52:1a:7e:31:07:6c:a7:79:19:4a:09:e5:
         5d:38:5d:8e:b4:da:78:28:38:9d:ed:3b:48:19:7d:7b:2a:4a:
         6c:a0:a4:e6:6f:1e:06:79:64:2a:16:91:1b:41:96:c3:31:dc:
         90:a0:0b:c3:74:41:37:3f:fa:6f:85:e5:03:94:98:0f:7b:8b:
         db:6c:f5:25:4b:76:0a:d5:20:f6:f7:52:38:a9:94:fa:34:d0:
         43:ce:d3:80:cc:96:9c:d3:6b:06:2d:8d:33:c3:cd:d8:b7:33:
         f1:e4:93:6a:9e:e2:90:d6:65:2b:6b:39:73:a1:4f:a6:41:8d:
         1a:df:d8:76:db:95:e4:5d:d3:23:a1:4a:07:01:89:84:9e:85:
         88:85:55:66:c1:36:55:80:99:5c:ae:c6:7c:cc:60:c3:11:cd:
         b8:90:a3:14:85:5a:54:75:57:67:da:1c:18:38:0e:ef:ee:7a:
         71:ee:04:c5:61:cb:33:24:30:f8:a1:08:33:71:3f:da:5f:22:
         31:28:5b:96:8a:88:fd:b8:41:a3:21:54:88:7b:25:31:bf:67:
         70:9d:17:29:11:5a:1e:a8:06:e4:92:be:eb:f9:6f:cc:67:99:
         8d:86:95:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org