Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/3130332e3134372e3234372e302f32342d3234203d3e20313339393732.roa
File:                     3130332e3134372e3234372e302f32342d3234203d3e20313339393732.roa (raw, json)
Hash identifier:          X1txzEkKQJDYZzsUWh4lIkDHM5i/eLwoFi8Vuhkz66I=
Subject key identifier:   0A:1F:74:FF:75:A8:18:18:5B:D5:F1:BE:DE:6E:18:E0:0F:EA:5B:DF
Certificate issuer:       /CN=6969B3009665224541D322068C9E3444C78F90F9
Certificate serial:       459426FA2D49A20883DFB7D93B7A0A3981E6D6DC
Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/3130332e3134372e3234372e302f32342d3234203d3e20313339393732.roa
Signing time:             Sun 05 Nov 2023 08:00:00 +0000
ROA not before:           Sun 05 Nov 2023 07:55:00 +0000
ROA not after:            Sun 03 Nov 2024 08:00:00 +0000
asID:                     139972
IP address blocks:        103.147.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl
                          rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:94:26:fa:2d:49:a2:08:83:df:b7:d9:3b:7a:0a:39:81:e6:d6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9
        Validity
            Not Before: Nov  5 07:55:00 2023 GMT
            Not After : Nov  3 08:00:00 2024 GMT
        Subject: CN=0A1F74FF75A818185BD5F1BEDE6E18E00FEA5BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:1c:11:0c:b7:7c:d2:03:e2:ef:3e:16:89:
                    9c:c0:03:85:b9:81:19:5a:77:41:fd:80:57:37:49:
                    06:6c:61:c2:83:f9:3d:b4:73:c4:db:17:33:5e:01:
                    c8:76:a2:ee:b1:1f:e3:4b:67:3b:2e:d7:20:04:a6:
                    41:13:70:e6:6e:7e:68:29:a5:c5:56:27:3b:76:31:
                    eb:f0:af:51:ba:a0:a6:c6:2f:29:fd:38:08:b6:c4:
                    33:8d:2a:e7:fb:ba:ba:ed:10:cf:f0:96:0d:0c:0a:
                    37:d8:29:1e:e6:4c:f5:f6:88:ca:e8:b4:d6:6d:bc:
                    83:10:0f:88:66:99:16:77:48:e6:b4:a9:d5:42:96:
                    04:75:f5:8c:b7:ec:42:fb:ed:71:fd:58:fc:8a:e1:
                    9f:51:48:b6:4f:e6:47:14:eb:6a:a0:3b:e2:c7:dc:
                    5b:58:47:7e:9a:55:e7:b5:0e:38:28:2f:bd:4d:9a:
                    7a:9b:f0:ee:b5:aa:30:85:52:26:d2:05:d4:5c:fa:
                    ad:a4:ec:34:16:89:83:d6:66:60:3f:08:91:82:76:
                    b2:fa:cf:67:e3:89:66:00:1e:02:07:ec:de:cd:df:
                    e6:fd:a4:2f:8f:29:64:08:c5:9c:f4:3e:d2:d4:b2:
                    43:93:c2:2d:da:2a:32:b2:74:53:2d:2a:17:c6:82:
                    2a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1F:74:FF:75:A8:18:18:5B:D5:F1:BE:DE:6E:18:E0:0F:EA:5B:DF
            X509v3 Authority Key Identifier:
                keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/3130332e3134372e3234372e302f32342d3234203d3e20313339393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:89:44:dd:e2:c7:8d:a2:6a:03:05:89:38:ac:58:5b:f0:6f:
         a8:b3:ba:5b:97:0c:92:93:21:2f:31:d2:4b:e3:77:01:ca:f4:
         a8:c9:77:86:1d:d8:3e:46:4f:37:ff:a2:e5:ca:b8:a8:23:28:
         6d:e7:f3:a0:7c:cd:8c:00:a7:06:d3:66:e1:cc:37:f8:be:b5:
         14:57:a9:7c:d5:69:84:cc:53:1c:c2:97:48:79:c5:ac:1e:74:
         bc:e6:35:0a:e9:c6:46:4e:a2:49:98:b4:84:f6:d1:d4:f1:1b:
         28:00:fd:3b:50:97:a6:2a:7e:38:0f:01:c9:ce:d8:f9:68:f1:
         6b:e3:6a:57:23:6f:1d:ba:b3:1a:20:7d:a9:bb:9d:c9:ac:d4:
         ac:32:1f:03:92:3c:09:32:0a:1f:c8:1a:1b:7f:b1:0e:4c:0d:
         fb:ee:96:db:08:15:e5:b7:33:e3:7e:9d:29:4b:13:66:83:7a:
         4c:7d:31:15:8b:fb:59:a7:66:9d:12:d9:5f:20:89:4b:7e:38:
         90:94:01:0f:00:df:69:f1:f7:1b:60:86:0f:6d:65:16:c6:61:
         62:e2:99:d6:59:07:39:d5:42:60:d1:7f:6d:4d:54:95:99:0f:
         e3:0a:bb:c3:20:37:b8:53:84:c3:f7:70:bf:1e:c5:cc:30:73:
         6f:d6:79:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:09 2024 by rpki-client on console-fra.rpki-client.org