Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa
File:                     3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (raw, json)
Hash identifier:          mdcoyjfXTj5zKlqt2+BARpB8Ne7nSF/K9FFaPhv5anY=
Subject key identifier:   74:C2:49:DA:66:71:3B:14:9D:E4:0B:40:7C:69:57:7B:20:93:FC:4D
Certificate issuer:       /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF
Certificate serial:       07A56AA13ECCF2210B0E9D92FF499CD948EC1036
Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa
Signing time:             Thu 02 May 2024 12:00:02 +0000
ROA not before:           Thu 02 May 2024 11:55:02 +0000
ROA not after:            Thu 01 May 2025 12:00:02 +0000
asID:                     142356
IP address blocks:        103.169.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl
                          rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a5:6a:a1:3e:cc:f2:21:0b:0e:9d:92:ff:49:9c:d9:48:ec:10:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF
        Validity
            Not Before: May  2 11:55:02 2024 GMT
            Not After : May  1 12:00:02 2025 GMT
        Subject: CN=74C249DA66713B149DE40B407C69577B2093FC4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:89:75:30:d3:a3:d5:a5:40:94:c4:74:01:4d:
                    96:6c:1f:38:36:b0:6b:7e:cf:e7:c5:1e:cc:87:4c:
                    72:35:ee:90:7f:fb:1c:13:eb:9a:88:1d:1f:34:63:
                    77:bb:fb:f8:d4:20:61:13:d2:b8:0a:23:63:89:97:
                    f2:0a:03:c9:1e:99:a5:c8:3e:5b:24:10:78:e7:29:
                    24:8a:68:55:99:97:3a:c9:df:c8:78:dc:8d:e5:54:
                    55:fd:7c:96:22:7a:93:b3:f1:2f:ea:44:a3:66:44:
                    d6:4e:97:0a:c8:d4:2b:dd:dd:8e:0a:e9:f2:87:75:
                    34:60:35:05:4d:73:16:7a:b7:93:85:a0:75:aa:88:
                    c1:1a:f4:5b:a9:ca:d5:ae:16:ff:c6:3c:af:41:c8:
                    88:30:db:7a:a2:a1:fe:a1:ef:5e:15:5c:de:46:6b:
                    11:a2:60:dd:52:a8:1e:bf:fc:44:59:ec:ba:e1:f1:
                    7c:55:ce:4b:5a:81:fc:61:1d:9a:ae:04:fb:86:93:
                    ea:d5:34:6a:f5:55:68:a8:75:94:d4:4d:d5:21:5c:
                    db:1a:f9:35:ec:08:25:f5:b0:30:b0:dd:cf:9d:dc:
                    09:c2:16:06:8a:9d:98:e8:c4:89:80:bd:82:36:a8:
                    ff:63:5c:a6:d6:9a:32:ce:f0:89:19:99:62:96:dc:
                    ac:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C2:49:DA:66:71:3B:14:9D:E4:0B:40:7C:69:57:7B:20:93:FC:4D
            X509v3 Authority Key Identifier:
                keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:73:01:50:be:03:2e:bf:61:41:13:70:ee:ec:ba:d1:e2:c2:
         ee:54:40:23:06:4e:f9:a9:58:aa:20:d0:c1:e8:f3:1f:37:47:
         9f:ef:23:18:0e:bc:7e:f9:54:55:24:a2:38:ac:c4:af:10:ad:
         00:e4:b4:be:56:d1:05:0b:10:c5:fe:d7:ce:ad:08:a4:a9:80:
         39:89:06:4d:2e:64:c0:f4:16:39:06:8d:3f:eb:c1:72:d9:34:
         13:6d:f0:da:fa:6b:dc:87:3f:b6:3b:2f:52:12:b1:c5:d4:4e:
         2b:4c:77:eb:03:56:39:a0:4e:bb:34:a7:34:3f:4f:a7:58:f6:
         cc:30:fa:4c:ce:e3:5a:1f:d8:c6:59:8d:08:05:9a:6a:eb:19:
         66:90:0a:7a:21:fe:15:03:c1:57:6c:7e:7a:b4:16:f5:24:9a:
         26:d2:a6:da:54:12:96:17:cb:f4:dc:4d:79:8b:15:24:d1:83:
         28:d8:1e:88:5f:2c:97:bc:10:a8:f7:99:b5:79:70:fe:18:d8:
         49:22:2e:c3:50:dd:74:59:37:68:fc:ef:de:b9:74:fe:9c:dc:
         bb:72:cc:ae:20:b2:9b:b0:83:7c:d9:8b:e4:ed:81:8c:8d:3f:
         df:e9:11:f7:a0:49:81:2e:f9:77:90:8f:24:0d:bd:8c:c6:1e:
         1b:e8:5b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:51 2024 by rpki-client on console-fra.rpki-client.org