Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa
File:                     3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa (raw, json)
Hash identifier:          i+70UhGPlwhi4hekXfmpQHW2bnLIqD2RJNIB7BgwdAE=
Subject key identifier:   A6:1E:05:9D:87:E2:90:B1:D2:3D:E8:6C:3A:3D:1D:6F:A1:BD:A8:4E
Certificate issuer:       /CN=98906779AB8F30762B65B3E6AD7F48326A08605E
Certificate serial:       478C213549228E4A9C83169AC42B375E67AF10B6
Authority key identifier: 98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa
Signing time:             Sat 13 Apr 2024 09:00:00 +0000
ROA not before:           Sat 13 Apr 2024 08:55:00 +0000
ROA not after:            Sat 12 Apr 2025 09:00:00 +0000
asID:                     150978
IP address blocks:        103.126.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl
                          rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 12:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8c:21:35:49:22:8e:4a:9c:83:16:9a:c4:2b:37:5e:67:af:10:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98906779AB8F30762B65B3E6AD7F48326A08605E
        Validity
            Not Before: Apr 13 08:55:00 2024 GMT
            Not After : Apr 12 09:00:00 2025 GMT
        Subject: CN=A61E059D87E290B1D23DE86C3A3D1D6FA1BDA84E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5a:43:af:e3:5e:8b:84:f7:58:41:fe:dc:36:
                    e5:7b:c9:b1:9d:38:67:d8:21:eb:51:5b:f3:a9:01:
                    32:95:31:12:b9:eb:ae:dd:e1:84:1b:b9:c0:bf:1b:
                    11:2c:44:5a:4e:94:38:5c:3c:48:2c:72:4a:b4:56:
                    8c:22:9d:b4:ab:93:8a:a3:de:9e:3d:11:d4:7d:d7:
                    e2:15:f6:3c:36:0b:9f:fb:31:00:4d:62:eb:50:46:
                    42:07:fb:07:14:4d:43:35:af:ad:95:8a:e2:da:3d:
                    81:21:1a:c8:c4:38:2f:4f:d2:e5:d6:b2:d7:b7:5e:
                    c0:34:8b:5d:c1:7e:b5:b5:82:6c:62:f3:36:4e:5f:
                    25:f9:6a:ed:d4:64:4c:a4:7c:cb:f5:e1:ea:31:29:
                    fa:c5:0b:5c:e9:ee:1d:6b:a0:03:3d:70:ce:0f:74:
                    18:b2:9f:8e:74:df:34:66:d5:42:4c:9b:2c:0e:d4:
                    d6:a7:09:b5:5a:22:27:1f:d1:aa:2f:2c:d3:1e:c4:
                    bc:fc:00:f5:33:11:f8:76:71:16:43:72:d6:97:77:
                    00:63:a7:40:27:e1:24:75:df:fc:bb:e2:0f:da:03:
                    ee:f7:20:04:a6:0a:3e:02:d5:4b:39:0a:0a:29:4d:
                    d7:25:17:71:51:9f:2f:36:7c:4e:cf:7a:2b:d2:5c:
                    f2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1E:05:9D:87:E2:90:B1:D2:3D:E8:6C:3A:3D:1D:6F:A1:BD:A8:4E
            X509v3 Authority Key Identifier:
                keyid:98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:ac:da:a7:88:8f:94:f7:ca:fd:02:75:ed:b1:e3:2b:f0:d6:
         b1:3f:57:3d:15:d7:fb:d5:c4:0b:1f:91:1e:76:4c:6b:ad:7f:
         15:8a:e1:d2:2e:40:6d:0d:b4:20:91:c6:67:6f:75:ef:4a:b6:
         25:5b:ec:90:c7:9d:fc:39:c8:59:00:63:bc:83:dd:88:4d:a0:
         a0:2d:b6:db:45:83:85:78:85:ee:39:ab:60:22:d8:6b:53:3e:
         2c:59:52:c7:7d:d0:9d:10:49:16:fe:76:e9:2f:c2:a9:dc:42:
         75:ff:2a:af:65:62:6d:86:70:3f:42:31:69:0a:fa:25:05:4c:
         1d:1e:c6:4b:27:ce:d6:5a:fe:42:5a:36:ec:de:b9:68:15:3a:
         ec:b3:f3:4a:88:0e:eb:21:d9:e8:53:09:74:86:6a:97:03:60:
         fb:2b:b3:f3:f6:33:9d:b9:28:96:b0:66:ac:59:6f:da:53:3d:
         d0:2b:b1:22:f9:e0:c5:ab:17:cf:d7:b1:61:b9:20:b6:89:f6:
         e5:38:5a:47:dc:fe:8a:ae:78:63:d7:64:fe:fe:47:cc:c3:a3:
         d7:1c:96:78:ff:e4:21:07:09:7d:a4:e0:24:ab:b2:32:44:52:
         12:54:96:06:d5:a9:cd:68:e5:1e:f8:7e:bc:a1:f7:c3:99:10:
         50:71:26:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:26:45 2024 by rpki-client on console-fra.rpki-client.org