Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/3130332e3136392e3133332e302f32342d3234203d3e20313432333431.roa
File:                     3130332e3136392e3133332e302f32342d3234203d3e20313432333431.roa (raw, json)
Hash identifier:          j4kPdYfgyBraDxUIOIX1rRESdoqShtU5fZw83PrS2Go=
Subject key identifier:   EC:C2:BA:25:E5:A9:8F:A9:ED:CC:10:A3:48:91:7B:78:3A:00:B1:94
Certificate issuer:       /CN=36E68E2A264E18BFD9F49E472D0D267EE49E8A17
Certificate serial:       4AEFAF611CC32BB678A77C786FF298BF1B8AB8E3
Authority key identifier: 36:E6:8E:2A:26:4E:18:BF:D9:F4:9E:47:2D:0D:26:7E:E4:9E:8A:17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/3130332e3136392e3133332e302f32342d3234203d3e20313432333431.roa
Signing time:             Mon 01 Jul 2024 18:00:00 +0000
ROA not before:           Mon 01 Jul 2024 17:55:00 +0000
ROA not after:            Mon 30 Jun 2025 18:00:00 +0000
asID:                     142341
IP address blocks:        103.169.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl
                          rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ef:af:61:1c:c3:2b:b6:78:a7:7c:78:6f:f2:98:bf:1b:8a:b8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E68E2A264E18BFD9F49E472D0D267EE49E8A17
        Validity
            Not Before: Jul  1 17:55:00 2024 GMT
            Not After : Jun 30 18:00:00 2025 GMT
        Subject: CN=ECC2BA25E5A98FA9EDCC10A348917B783A00B194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:e7:f5:57:35:cc:53:2a:19:3a:8d:31:49:
                    be:c0:3a:74:4d:1b:c1:db:51:5a:22:29:84:ad:2d:
                    fe:ac:0f:be:cc:00:5b:8b:ed:14:da:77:be:75:08:
                    db:0e:18:8f:ff:d9:5b:80:e7:ea:b3:fb:96:7f:26:
                    7c:87:e2:b6:8a:a0:0b:b6:ea:66:e3:50:da:fd:6b:
                    e2:8a:e8:b4:fc:70:ab:4b:32:6e:da:bf:59:05:77:
                    80:8a:a2:ff:1a:3c:53:27:b3:89:84:67:70:35:d5:
                    76:5c:98:bd:d4:7b:96:55:36:cc:3c:c9:79:ca:be:
                    e3:4b:50:8a:9f:99:66:0b:0c:a0:60:a9:50:c8:1d:
                    23:55:7c:99:73:a8:19:36:02:61:56:66:93:3c:a1:
                    5a:03:a7:c2:1f:a9:65:d3:5a:f6:f7:f8:5d:58:5e:
                    7b:65:db:b0:57:6d:b3:a0:e2:41:61:92:37:57:76:
                    37:c8:1e:33:89:35:75:6b:52:40:16:c3:0e:24:f9:
                    00:28:90:6c:0d:9d:8d:89:d2:5e:ce:33:77:00:96:
                    ef:a3:ee:72:14:a4:9b:15:b8:09:44:a1:0b:be:ed:
                    43:6f:3c:fd:fb:fa:d1:86:c6:c5:c8:29:79:ae:b0:
                    ef:84:a4:75:6b:c6:2b:bb:b2:c8:d2:cc:5a:9e:57:
                    9e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C2:BA:25:E5:A9:8F:A9:ED:CC:10:A3:48:91:7B:78:3A:00:B1:94
            X509v3 Authority Key Identifier:
                keyid:36:E6:8E:2A:26:4E:18:BF:D9:F4:9E:47:2D:0D:26:7E:E4:9E:8A:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/3130332e3136392e3133332e302f32342d3234203d3e20313432333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:5c:ed:34:77:9c:13:3a:4a:f7:35:e8:f4:2e:db:76:8a:55:
         f5:1e:e7:1e:96:16:50:07:54:91:25:c2:f7:c7:89:6b:21:3c:
         16:62:fc:4e:eb:0b:87:53:a0:f5:b1:3b:df:56:66:93:f1:62:
         d3:f0:be:fd:70:98:95:ba:4f:a5:01:b0:52:df:7f:e7:ef:68:
         cf:d1:7c:fe:5f:f6:bc:ec:b5:56:7a:46:72:de:7f:18:e7:7b:
         2a:c4:9f:5e:d9:0c:84:b6:65:9f:1f:50:49:cd:3b:44:d9:da:
         38:b9:4c:3b:b0:d4:ed:db:64:f8:ad:58:52:1f:2d:f1:2c:81:
         58:b2:c4:4d:76:8b:69:09:06:ef:59:3e:ca:73:ae:c6:0a:9d:
         99:8d:a2:0c:44:41:67:b4:a5:e5:0a:96:15:d3:05:95:a0:d6:
         c9:7f:81:a6:21:80:7c:11:19:fa:31:1e:fe:36:4d:46:be:67:
         58:80:32:d7:2f:31:45:d7:5c:d1:48:54:db:4d:30:33:93:c1:
         32:0f:43:53:bc:fc:75:d7:6a:58:45:c0:4e:39:af:f5:0a:9a:
         69:16:20:d5:b8:f2:ee:3c:3f:54:93:5e:1d:32:fd:30:bd:77:
         1b:44:ec:bf:71:82:af:92:b2:6a:c9:1b:b3:cf:ab:f3:4e:20:
         f2:6e:82:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:32 2024 by rpki-client on console-ams.rpki-client.org