Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/3130332e3137332e3133332e302f32342d3234203d3e203438343635.roa
File:                     3130332e3137332e3133332e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          VONDB0sjMvNA9R0KzuDTxHk2C5/253xi9WC/ikSH9oo=
Subject key identifier:   95:4E:A5:97:67:D6:DC:69:E6:30:C7:DD:85:0E:E3:2A:57:83:DE:9B
Certificate issuer:       /CN=26AE16DF2BF0FD5184FEC655250D244739FA9FC4
Certificate serial:       07E4E3793B2E60E228F4325B71FF51EC49990032
Authority key identifier: 26:AE:16:DF:2B:F0:FD:51:84:FE:C6:55:25:0D:24:47:39:FA:9F:C4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/3130332e3137332e3133332e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 15 Jul 2024 02:58:37 +0000
ROA not before:           Mon 15 Jul 2024 02:53:37 +0000
ROA not after:            Mon 14 Jul 2025 02:58:37 +0000
asID:                     48465
IP address blocks:        103.173.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.crl
                          rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e4:e3:79:3b:2e:60:e2:28:f4:32:5b:71:ff:51:ec:49:99:00:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26AE16DF2BF0FD5184FEC655250D244739FA9FC4
        Validity
            Not Before: Jul 15 02:53:37 2024 GMT
            Not After : Jul 14 02:58:37 2025 GMT
        Subject: CN=954EA59767D6DC69E630C7DD850EE32A5783DE9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:e2:d1:77:72:a9:ff:35:01:00:56:a6:fd:
                    74:03:43:84:cb:74:5b:d7:07:a8:5f:0b:e7:d0:01:
                    b6:0e:e1:f5:2f:f2:61:a6:f5:b9:1f:c1:eb:51:b7:
                    98:e5:89:71:fe:87:64:37:5d:01:72:fc:51:d9:37:
                    02:8f:86:ca:9f:d2:d3:b9:3d:2e:6e:e3:02:e2:b9:
                    19:74:9f:2b:14:28:1e:07:e0:76:c9:2c:dd:e4:6a:
                    ec:10:0e:ce:49:ae:b3:44:ba:bf:30:8c:b8:13:d2:
                    f3:77:81:96:3d:24:9a:90:62:4c:aa:6e:b5:2c:ea:
                    9b:5a:21:50:91:82:e6:d1:51:c1:f2:7a:2c:52:4b:
                    03:d9:85:a5:4a:8c:e1:2d:ad:48:5f:d7:2e:47:90:
                    ea:c8:58:ec:21:85:91:74:ab:60:ef:43:69:b5:d8:
                    a3:b7:26:02:75:1a:0c:0a:f3:e2:e3:c4:10:5a:b7:
                    ad:95:9f:f8:c9:c1:d7:4b:d7:38:4e:2f:44:3a:c8:
                    e6:e2:80:e8:00:71:d6:5a:95:86:4f:6e:f3:72:73:
                    5a:fb:75:b3:90:22:b6:2d:46:f9:dc:50:bb:3d:cb:
                    7a:83:65:0d:8c:be:e1:3b:68:7f:49:11:ad:b5:74:
                    d2:47:54:0f:0f:4e:b0:a4:60:4c:ab:a6:21:28:a1:
                    e3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4E:A5:97:67:D6:DC:69:E6:30:C7:DD:85:0E:E3:2A:57:83:DE:9B
            X509v3 Authority Key Identifier:
                keyid:26:AE:16:DF:2B:F0:FD:51:84:FE:C6:55:25:0D:24:47:39:FA:9F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/3130332e3137332e3133332e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:05:d0:6c:18:f0:7c:ec:73:d7:81:b0:e9:1f:4d:e3:3a:b0:
         27:51:a1:fa:34:3a:a3:53:f1:46:79:bb:53:0e:7b:84:47:7b:
         cd:96:44:ce:e4:e2:27:2f:e6:38:2b:25:fd:52:10:3c:24:7a:
         e9:eb:2e:89:ab:43:60:6d:05:5b:4c:ed:14:1b:5a:dc:05:fb:
         17:11:70:1d:0c:30:a1:50:9e:98:9a:8a:0e:13:b6:f3:2c:85:
         f9:35:e3:b1:0b:73:c7:90:b7:e2:ee:b3:d6:5f:98:6e:4b:06:
         4d:a3:0d:9f:19:48:68:98:c6:4e:07:88:90:1f:94:0f:ad:cf:
         aa:4a:42:ed:1a:3f:7f:97:84:bf:75:59:a6:14:09:3b:da:49:
         88:a6:c8:0a:3d:81:30:97:04:0f:1d:86:90:78:07:45:97:ad:
         11:23:67:5b:9e:78:b7:ff:f7:97:a6:db:88:2f:2b:ea:81:0a:
         73:a6:1c:64:78:ab:eb:1e:ea:cd:7c:a9:9f:54:43:0a:27:14:
         76:cb:8f:56:e0:53:0c:cc:00:4b:5f:17:97:79:7e:04:52:15:
         61:e9:2d:ae:6f:72:1c:30:a7:8c:ee:41:bc:58:34:c8:a8:36:
         8a:f6:13:58:e5:a3:45:37:20:f6:c6:22:7e:14:66:e0:43:5f:
         fe:2d:d6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org