Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa
File:                     3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa (raw, json)
Hash identifier:          O1fqEI2/dxUhPnGgmsb3xk2y+JM4uUZ6GrE/FcQLL2o=
Subject key identifier:   DC:39:39:78:82:BD:1B:16:FE:B8:7E:18:E2:69:35:99:8F:41:20:87
Certificate issuer:       /CN=98906779AB8F30762B65B3E6AD7F48326A08605E
Certificate serial:       4083FD3F6629FE5289342AE672151E1F4B82578F
Authority key identifier: 98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa
Signing time:             Sat 13 Apr 2024 09:00:00 +0000
ROA not before:           Sat 13 Apr 2024 08:55:00 +0000
ROA not after:            Sat 12 Apr 2025 09:00:00 +0000
asID:                     150978
IP address blocks:        103.126.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl
                          rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 12:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:83:fd:3f:66:29:fe:52:89:34:2a:e6:72:15:1e:1f:4b:82:57:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98906779AB8F30762B65B3E6AD7F48326A08605E
        Validity
            Not Before: Apr 13 08:55:00 2024 GMT
            Not After : Apr 12 09:00:00 2025 GMT
        Subject: CN=DC39397882BD1B16FEB87E18E26935998F412087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:44:a4:c1:ef:83:40:19:cd:55:7b:a0:ab:3f:
                    6c:41:df:3c:6f:7c:d0:da:ba:c4:16:58:0c:c5:37:
                    ad:ba:86:06:c2:77:9e:6e:9e:9c:27:31:81:6e:b2:
                    28:bf:e1:7c:50:ca:e4:43:b0:ae:03:54:01:70:d0:
                    82:84:64:a0:e2:9c:9b:70:5c:75:c8:58:9e:72:a0:
                    d9:ab:25:18:0a:b2:a4:4d:44:ee:5e:8d:54:92:35:
                    cd:2f:5f:19:05:dd:ed:69:c9:fc:35:ca:ba:ca:bb:
                    5b:f3:af:3b:06:d5:32:fa:14:f5:2f:ba:cf:4b:f7:
                    94:10:ce:d9:a5:9b:02:6d:f4:f1:9f:38:96:d7:10:
                    d2:44:ea:9e:de:8f:c9:68:60:d3:35:77:65:b0:e7:
                    5a:6e:09:53:f4:96:67:2c:9f:b8:c0:03:22:3f:67:
                    4c:15:db:05:36:45:07:12:82:f8:ab:44:12:9f:fe:
                    fd:4a:b4:09:30:49:ca:10:13:41:f2:40:50:a3:1f:
                    d8:4d:db:9c:5f:f7:ac:cb:12:c9:f7:48:80:86:8b:
                    bc:4e:d3:c2:a5:e3:55:7a:aa:71:dd:13:59:62:bb:
                    84:f1:2e:89:1b:74:cc:ab:ae:8c:63:a9:2f:f9:67:
                    3b:1b:78:e0:51:8d:34:05:3c:91:07:1e:7d:d9:6f:
                    32:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:39:39:78:82:BD:1B:16:FE:B8:7E:18:E2:69:35:99:8F:41:20:87
            X509v3 Authority Key Identifier:
                keyid:98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:b2:aa:23:fe:66:b9:b8:74:28:da:e1:fb:86:09:97:ea:f3:
         55:ab:12:41:dc:6b:eb:39:d5:71:ae:51:a7:f5:9b:e1:cc:eb:
         a5:eb:b7:a1:a4:53:a6:4f:42:29:ef:40:78:d9:28:34:1d:04:
         f7:0f:09:a9:77:60:00:24:78:60:17:95:99:95:ad:58:06:5a:
         15:87:ff:f4:ec:f9:8a:61:d9:d6:07:56:bf:e6:25:b4:d3:c5:
         7a:a6:2d:57:34:80:29:e7:a0:b5:80:04:42:1e:18:ce:f1:52:
         3c:a3:1f:dc:9d:96:ac:80:b7:bd:0f:5d:6c:4f:8e:51:f2:e5:
         25:33:63:68:e0:d0:17:71:07:0d:28:a6:8b:70:16:51:2e:4b:
         8f:e6:32:16:53:0f:33:62:ce:cf:9e:f4:be:68:b3:10:e5:b3:
         13:73:95:b3:e2:7c:0c:80:82:83:c0:c4:9e:82:4b:0e:1c:33:
         cf:c8:00:bc:08:df:1b:53:75:1a:d6:89:3b:ee:35:fb:f2:45:
         d0:92:2e:85:fe:0f:a0:a9:73:97:4b:03:5a:4f:2a:7c:8d:ba:
         f2:96:3e:34:11:48:53:6f:5b:09:97:38:44:c1:d4:93:08:63:
         72:15:3b:2b:c5:7b:d7:2c:8e:10:da:80:98:64:51:c6:d4:8a:
         f6:3b:f1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:26:45 2024 by rpki-client on console-fra.rpki-client.org