Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31332e302f32342d3234203d3e203633383237.roa
File:                     3130332e33392e31332e302f32342d3234203d3e203633383237.roa (raw, json)
Hash identifier:          /D3htYcNVrrEJ44Gsh1PBU0SluiOMx+CBDTNL77PNSc=
Subject key identifier:   60:65:26:6C:9D:20:81:54:62:F8:EC:DD:B2:36:0D:EF:68:82:B8:66
Certificate issuer:       /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial:       69BDB33068CEDDB4F3A226DF9C629BA496640F64
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31332e302f32342d3234203d3e203633383237.roa
Signing time:             Wed 20 Dec 2023 07:00:48 +0000
ROA not before:           Wed 20 Dec 2023 06:55:48 +0000
ROA not after:            Wed 18 Dec 2024 07:00:48 +0000
asID:                     63827
IP address blocks:        103.39.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
                          rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 20:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:bd:b3:30:68:ce:dd:b4:f3:a2:26:df:9c:62:9b:a4:96:64:0f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
        Validity
            Not Before: Dec 20 06:55:48 2023 GMT
            Not After : Dec 18 07:00:48 2024 GMT
        Subject: CN=6065266C9D20815462F8ECDDB2360DEF6882B866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ff:a9:33:5a:c3:25:df:ff:92:be:dd:ed:da:
                    6e:4f:9b:6f:cd:d6:7e:b6:ff:79:3d:03:a4:8d:c4:
                    4a:4a:50:6c:0f:36:12:5a:e1:03:c5:3a:72:87:ab:
                    a0:d7:8e:c9:ca:d4:47:91:71:f0:17:f3:91:60:12:
                    51:61:3b:10:e1:b4:21:75:ac:22:04:e9:5f:b1:6d:
                    b9:ae:6d:cd:e2:69:57:28:8b:3d:e0:7b:b8:75:d1:
                    85:e3:83:d2:5b:78:7b:1a:8c:48:c4:80:d3:c1:00:
                    19:9d:10:7a:6a:70:49:75:5b:9a:9d:28:f3:65:4a:
                    3e:a2:96:fb:cb:ef:51:63:d4:8e:33:cf:2d:a0:06:
                    7b:70:48:c3:c1:81:f5:b2:65:49:ae:9e:06:2d:94:
                    9b:e6:11:62:7e:01:42:f4:9e:25:c3:96:cb:e2:5e:
                    a4:b1:9a:e6:a5:6f:cf:05:90:d7:44:23:9d:19:99:
                    5d:58:12:18:16:8f:b6:23:4d:9c:83:43:55:93:82:
                    7c:d8:44:07:a5:93:7b:7a:8b:e7:a5:76:77:1b:35:
                    41:27:4e:10:d8:8a:5e:9e:5d:e5:d0:99:cb:79:9e:
                    ff:46:43:0b:15:4a:74:14:63:72:aa:9b:3e:a3:16:
                    2e:d1:29:b1:44:11:1a:61:86:ea:70:b0:cb:32:15:
                    dd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:65:26:6C:9D:20:81:54:62:F8:EC:DD:B2:36:0D:EF:68:82:B8:66
            X509v3 Authority Key Identifier:
                keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31332e302f32342d3234203d3e203633383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:78:07:8b:72:bc:1d:24:a7:35:83:ec:14:b2:df:46:57:dc:
         6b:2e:30:6e:b6:e8:94:ec:54:d7:7d:a9:05:58:b9:ee:28:32:
         ad:d6:41:95:29:3b:f8:69:19:ed:16:3a:05:d8:8a:e9:ac:40:
         59:3e:00:f0:88:16:87:5b:30:67:6d:d3:6e:b1:8c:46:22:b6:
         32:3e:fb:73:d9:43:b4:de:0c:25:0a:98:bd:bd:a2:35:04:5f:
         75:cb:cf:6b:4e:e2:44:b7:33:22:18:59:97:20:f5:2f:e9:56:
         75:a7:33:1d:b4:16:65:74:e3:dd:7c:8f:37:88:43:cf:34:5e:
         fd:81:62:7d:19:44:a9:c2:0c:28:39:66:4c:73:e1:d2:ab:98:
         0f:1a:ff:03:a8:10:4f:19:a4:d1:de:2e:b6:ba:fa:98:ef:00:
         fc:4f:be:85:29:c8:c6:d0:55:12:80:7d:bf:cc:ed:ec:c2:9d:
         40:9a:43:1f:a6:d4:1b:29:13:46:4c:62:1a:c1:fc:56:1b:db:
         77:ed:f5:e5:b0:3f:9c:37:de:72:32:06:6a:6f:50:08:85:31:
         eb:4b:f7:9d:59:98:6f:55:4e:1f:b5:02:f6:24:c6:96:a5:9c:
         4d:ac:10:d6:36:1d:e7:5a:a8:2b:5e:52:e1:fc:a8:1b:bf:a7:
         9b:ae:f7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 17:47:54 2024 by rpki-client on console-fra.rpki-client.org