Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/3130332e36332e32362e302f32342d3234203d3e20313338303839.roa
File:                     3130332e36332e32362e302f32342d3234203d3e20313338303839.roa (raw, json)
Hash identifier:          iJkAdWNXS6Yg4uaKiRclsSssCnAI0VPZiJAV61iWy2U=
Subject key identifier:   2F:CB:06:C4:50:BD:A3:78:84:A0:2E:2C:7F:D2:05:95:4C:32:BD:B6
Certificate issuer:       /CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728
Certificate serial:       2B067B41FD5183C8A48842A56143C26690AD16D4
Authority key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/3130332e36332e32362e302f32342d3234203d3e20313338303839.roa
Signing time:             Thu 04 Jan 2024 15:00:01 +0000
ROA not before:           Thu 04 Jan 2024 14:55:01 +0000
ROA not after:            Thu 02 Jan 2025 15:00:01 +0000
asID:                     138089
IP address blocks:        103.63.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl
                          rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 19:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:06:7b:41:fd:51:83:c8:a4:88:42:a5:61:43:c2:66:90:ad:16:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728
        Validity
            Not Before: Jan  4 14:55:01 2024 GMT
            Not After : Jan  2 15:00:01 2025 GMT
        Subject: CN=2FCB06C450BDA37884A02E2C7FD205954C32BDB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:de:40:22:df:b9:bc:3e:f9:76:4a:e3:61:
                    00:a5:93:9d:79:19:73:18:82:b1:b2:f9:a0:cf:a5:
                    76:c9:57:a2:18:7d:ba:44:ce:8c:b5:80:66:20:6b:
                    35:a1:45:c6:52:2a:e9:0c:20:6b:15:2e:77:4c:89:
                    f5:c5:5b:25:e9:57:9d:90:64:70:bb:a0:2e:25:b7:
                    17:2b:b4:25:2a:d7:34:ca:15:a6:d6:6e:16:61:9a:
                    90:b8:44:d4:6f:ec:b7:a1:e9:b3:28:a4:ba:fe:5f:
                    fd:36:6d:2e:11:65:04:95:17:3e:67:1a:49:ab:c0:
                    f7:92:4f:15:2e:03:a6:77:02:7e:3d:7a:e6:ab:10:
                    3b:dc:56:a3:1c:a5:9a:83:1a:39:97:21:07:a8:b2:
                    c9:a3:1d:81:b8:5e:82:60:42:b6:8a:b6:c9:8c:0c:
                    5f:3e:ae:f4:76:12:02:87:4a:66:7e:0e:29:7d:36:
                    7e:71:76:fc:f0:62:d0:15:d7:90:5b:6d:fb:cd:79:
                    3e:b9:e0:fc:bb:10:82:17:6d:52:56:ab:9f:6d:27:
                    f6:92:78:6e:df:77:f5:ac:c8:5c:8b:8f:6a:7f:89:
                    56:28:1b:cb:3b:03:a3:c8:c8:f0:bc:8d:1d:b9:68:
                    20:9e:b5:bf:38:7a:52:c9:26:6e:c8:a7:61:b3:a4:
                    c6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CB:06:C4:50:BD:A3:78:84:A0:2E:2C:7F:D2:05:95:4C:32:BD:B6
            X509v3 Authority Key Identifier:
                keyid:A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/3130332e36332e32362e302f32342d3234203d3e20313338303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.63.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:f7:97:d7:19:5a:e8:ea:7d:a4:95:18:1f:4f:3a:22:04:40:
         76:c5:6b:f4:75:6a:b0:28:e0:e0:88:af:f2:5a:04:52:17:bd:
         f0:fc:60:7e:fd:54:cf:49:1d:17:b7:f8:f0:6b:17:25:02:f0:
         01:43:88:a4:2e:a8:86:8a:cc:78:63:98:a5:45:93:d3:00:29:
         b3:b0:fd:5a:43:a2:82:3e:03:14:0f:fc:95:81:78:bb:4a:fc:
         b7:25:3d:6f:0a:af:de:cf:79:e0:26:7a:67:55:88:a1:d5:de:
         36:04:8e:d8:1d:7f:9f:ab:56:86:98:e0:30:a5:c9:22:c3:4a:
         ad:c4:88:48:b6:3d:d8:1a:d5:ab:08:b8:e8:e2:b0:91:d7:a4:
         74:13:1b:ac:e1:f4:0c:5e:b5:89:cc:e6:23:59:6e:1f:d2:4e:
         86:b5:87:09:fc:b6:a9:d2:35:22:ad:19:76:cb:20:e8:3b:40:
         68:14:1b:c1:85:46:eb:ef:3d:99:5c:17:75:55:51:d8:77:83:
         38:a9:3f:22:49:b0:80:b8:52:d5:d2:f8:e9:f5:75:ed:d7:3a:
         88:f2:e4:29:8e:38:1b:04:09:09:08:25:24:13:95:77:b8:3a:
         7d:01:04:49:94:30:83:76:ad:70:1f:0a:0a:32:f4:01:ef:41:
         c7:54:da:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:26 2024 by rpki-client on console-ams.rpki-client.org