Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa
File:                     3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (raw, json)
Hash identifier:          IZ8KmdFwK5i2F35Ti/yV73rwyTaK/R/VAzY82jFEZs8=
Subject key identifier:   1F:33:3E:41:42:0F:7C:8F:BB:E7:B8:F2:B7:F3:09:F2:42:18:48:AB
Certificate issuer:       /CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8
Certificate serial:       1A893334FC35110AF60F1F9F351218F79B4B2008
Authority key identifier: 6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa
Signing time:             Sat 12 Oct 2024 06:02:02 +0000
ROA not before:           Sat 12 Oct 2024 05:57:02 +0000
ROA not after:            Sat 11 Oct 2025 06:02:02 +0000
asID:                     138116
IP address blocks:        103.126.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl
                          rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:89:33:34:fc:35:11:0a:f6:0f:1f:9f:35:12:18:f7:9b:4b:20:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8
        Validity
            Not Before: Oct 12 05:57:02 2024 GMT
            Not After : Oct 11 06:02:02 2025 GMT
        Subject: CN=1F333E41420F7C8FBBE7B8F2B7F309F2421848AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1b:c3:41:d5:25:84:81:fb:a2:ef:69:3b:9a:
                    74:46:38:bc:23:d7:45:6b:74:a7:6a:85:0d:78:60:
                    f0:3b:19:da:c1:7e:eb:a4:56:c9:1b:ba:1f:bf:7a:
                    d2:14:4f:59:30:d1:88:2d:a3:89:63:91:5e:52:25:
                    29:64:6b:8c:53:6e:66:f4:0a:5d:24:48:83:ee:e4:
                    5e:9b:2f:40:2f:36:d5:78:9e:14:7a:7d:8d:96:43:
                    16:1d:f6:e1:1b:c6:e2:5e:ec:a7:68:39:a3:d6:50:
                    ce:6a:de:eb:4c:59:53:31:c4:00:64:bb:fd:c5:ca:
                    12:ad:e1:8c:2a:a2:0f:f9:a4:b8:bc:14:49:2f:f8:
                    44:cf:d0:1a:29:f1:4a:c5:d2:b7:17:33:b6:92:f8:
                    20:1d:31:24:8b:c5:90:8f:d6:24:9a:8e:2a:7a:e9:
                    92:7f:fc:2f:80:30:32:c9:61:86:98:0d:ad:b9:20:
                    2d:6b:9c:20:f7:f1:d6:67:2a:67:bd:28:cc:a0:b9:
                    45:25:4e:64:14:c5:ad:16:9b:ce:e8:94:31:80:dd:
                    c4:d3:56:23:83:2b:b4:02:c0:fa:b8:7f:a1:3f:49:
                    8c:8a:1e:fd:2c:9e:7c:0e:95:55:4f:a2:30:aa:a0:
                    99:88:e5:e8:ef:da:d6:5d:66:2b:52:3c:fa:b1:18:
                    1a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:33:3E:41:42:0F:7C:8F:BB:E7:B8:F2:B7:F3:09:F2:42:18:48:AB
            X509v3 Authority Key Identifier:
                keyid:6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:be:62:66:be:a8:7f:50:a1:af:ab:9b:ab:c2:43:db:1b:6e:
         f6:02:1c:ff:d6:d9:2c:03:82:77:8d:23:8b:99:3c:83:a0:c7:
         eb:4b:aa:ba:6d:54:ca:34:93:56:fc:69:df:ac:4f:fb:23:d0:
         ac:af:fd:4b:2f:ae:7b:40:51:13:8f:b2:be:41:a8:bc:6b:87:
         37:53:a9:d1:7c:48:a5:84:4a:9a:86:9b:0a:78:a8:e5:fc:01:
         d0:e2:03:09:c3:95:95:9f:2f:b7:0d:24:99:43:0d:0c:bc:b2:
         e7:ee:be:95:84:47:d5:7c:db:6e:1c:49:39:0a:96:d0:ca:31:
         e2:f3:ca:d4:51:41:a6:c5:7a:ed:64:83:8f:d9:09:51:d9:3e:
         5a:56:79:18:b9:58:5b:8a:3c:5a:99:c6:90:6e:52:8e:73:2e:
         05:b8:33:0c:07:5c:85:fe:7c:e1:86:ee:20:bc:68:e7:37:37:
         e1:b3:1e:8f:a0:0f:4e:9a:23:86:8f:ae:7d:68:94:d6:43:a4:
         ae:55:6c:b2:52:3a:34:66:46:bc:20:37:74:0d:ec:19:95:ff:
         77:d0:32:e6:99:52:20:d3:72:62:59:33:01:56:6c:5f:ea:f2:
         77:1a:30:16:93:65:06:c9:b3:dc:a9:df:4d:30:41:6b:bd:92:
         e6:3d:ab:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org