Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/3130332e3134372e3234362e302f32332d3233203d3e20313339393732.roa
File:                     3130332e3134372e3234362e302f32332d3233203d3e20313339393732.roa (raw, json)
Hash identifier:          CQRFmpyeLwdKWRirc+BLjBhpFlEJ5p0g8n5VLDM/9tQ=
Subject key identifier:   63:0E:74:E1:01:A1:E8:82:91:AB:02:F7:25:86:02:E9:52:2B:3E:FE
Certificate issuer:       /CN=6969B3009665224541D322068C9E3444C78F90F9
Certificate serial:       3FDD8A989976C9FBA48333C007B4129488A716D3
Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/3130332e3134372e3234362e302f32332d3233203d3e20313339393732.roa
Signing time:             Sat 10 Aug 2024 07:00:01 +0000
ROA not before:           Sat 10 Aug 2024 06:55:01 +0000
ROA not after:            Sat 09 Aug 2025 07:00:01 +0000
asID:                     139972
IP address blocks:        103.147.246.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl
                          rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:dd:8a:98:99:76:c9:fb:a4:83:33:c0:07:b4:12:94:88:a7:16:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9
        Validity
            Not Before: Aug 10 06:55:01 2024 GMT
            Not After : Aug  9 07:00:01 2025 GMT
        Subject: CN=630E74E101A1E88291AB02F7258602E9522B3EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:68:b4:57:2b:76:04:03:3e:3d:62:66:ec:89:
                    2a:60:1d:36:19:93:94:01:99:a3:fd:36:c8:92:f3:
                    de:ce:99:74:35:59:e2:70:ab:a7:a7:54:c7:d6:c8:
                    0d:bc:49:4c:4e:f7:6b:a2:90:36:1c:dd:fb:1b:a1:
                    cd:55:a8:e7:7d:0a:79:87:a7:94:0e:e6:55:73:56:
                    d4:92:71:6c:b4:70:ad:d8:23:f5:d4:bc:a5:d5:01:
                    dd:bb:d3:6e:65:16:65:f0:9c:7e:0e:30:87:d4:39:
                    cb:de:ec:3d:33:09:6b:a5:3c:9b:d8:58:37:7c:c7:
                    c0:37:6d:5e:db:14:b3:62:0e:7a:33:c7:6d:8e:29:
                    73:36:3e:4d:36:87:07:c0:9a:fd:e2:82:58:41:0b:
                    be:b8:eb:ee:85:30:eb:dc:00:8c:28:3f:ac:7e:a9:
                    8a:c1:51:62:0d:63:a1:9b:49:07:d2:c1:2d:b5:d8:
                    68:fa:48:f0:64:b9:8a:7d:83:96:c8:2b:c6:a7:a3:
                    31:1a:d2:c5:52:98:ae:79:47:6b:2c:37:bc:e5:84:
                    2e:34:dd:a7:fa:58:95:26:41:c3:3a:ae:8d:fe:82:
                    25:23:25:38:3f:a9:86:16:7d:e5:26:c9:1e:da:c5:
                    f0:ec:12:eb:7f:6a:b6:87:6c:13:d0:00:b2:61:68:
                    89:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0E:74:E1:01:A1:E8:82:91:AB:02:F7:25:86:02:E9:52:2B:3E:FE
            X509v3 Authority Key Identifier:
                keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/3130332e3134372e3234362e302f32332d3233203d3e20313339393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:07:69:f6:c2:39:51:73:b1:4a:23:1b:ae:d7:5e:82:e6:95:
         14:b9:07:e6:54:39:e9:f4:1b:28:1f:df:2e:cc:cd:ba:3c:cb:
         6a:41:f5:b7:c9:95:c0:bd:2f:cc:3c:6b:23:4c:5b:5f:03:e4:
         51:ff:7a:c3:f1:06:39:27:9a:86:3d:73:5c:7d:b7:9f:2a:fc:
         67:6b:1f:74:5c:c5:97:5c:71:ae:45:28:a9:cd:12:a0:97:5c:
         48:34:79:f8:bc:e2:9f:ee:8c:43:53:f7:f8:62:4c:f6:87:dd:
         ae:a6:02:fd:d9:f4:17:99:90:1e:c1:d0:42:c2:6b:da:e2:91:
         74:a2:04:f8:11:92:28:fe:da:f4:22:cb:d2:00:fa:37:03:9d:
         5e:4a:93:31:04:fa:93:58:ab:47:42:06:48:6d:11:44:73:25:
         57:ee:36:c4:56:c6:83:ad:2d:9d:b7:7f:1b:6e:31:83:54:ec:
         27:f4:dd:4d:7a:ff:eb:27:ba:9d:1c:a3:71:1c:31:f4:7d:8d:
         0a:1b:03:5a:fb:9d:13:ba:1b:95:46:32:6a:c7:05:3f:1f:94:
         59:f4:1d:db:62:e7:20:b6:d7:8f:42:e9:b6:4b:ac:d1:a6:f0:
         bd:e6:60:3a:20:bc:0c:3f:1d:26:e3:53:d7:b1:dc:76:3e:f5:
         8d:cc:10:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:55 2024 by rpki-client on console-fra.rpki-client.org