Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/3130332e3132322e3230332e302f32342d3234203d3e20313338303733.roa
File:                     3130332e3132322e3230332e302f32342d3234203d3e20313338303733.roa (raw, json)
Hash identifier:          RMR/J+U6wcahA896S9QknALHdx+wxoacfHS59xM38GE=
Subject key identifier:   A4:C0:CA:9B:FA:7B:80:85:7A:AE:89:53:9B:02:30:81:84:20:3E:8A
Certificate issuer:       /CN=92602F1E83161157794444495C715B352240982F
Certificate serial:       01FFAC900526C241E525556FB81925A45FC695FB
Authority key identifier: 92:60:2F:1E:83:16:11:57:79:44:44:49:5C:71:5B:35:22:40:98:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92602F1E83161157794444495C715B352240982F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/3130332e3132322e3230332e302f32342d3234203d3e20313338303733.roa
Signing time:             Wed 02 Oct 2024 08:49:38 +0000
ROA not before:           Wed 02 Oct 2024 08:44:38 +0000
ROA not after:            Wed 01 Oct 2025 08:49:38 +0000
asID:                     138073
IP address blocks:        103.122.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/92602F1E83161157794444495C715B352240982F.crl
                          rsync://repo-rpki.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/92602F1E83161157794444495C715B352240982F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92602F1E83161157794444495C715B352240982F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ff:ac:90:05:26:c2:41:e5:25:55:6f:b8:19:25:a4:5f:c6:95:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92602F1E83161157794444495C715B352240982F
        Validity
            Not Before: Oct  2 08:44:38 2024 GMT
            Not After : Oct  1 08:49:38 2025 GMT
        Subject: CN=A4C0CA9BFA7B80857AAE89539B02308184203E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:59:78:b4:7d:c3:c1:42:ae:be:39:45:76:78:
                    a2:2d:0b:52:30:66:d3:d2:c9:31:b3:78:de:d1:12:
                    fd:3e:3e:49:07:fa:d4:15:ab:33:f9:c4:26:6b:f5:
                    47:cd:27:43:ec:d0:8e:5f:ac:35:a6:a2:07:f4:10:
                    4f:ff:13:31:a8:33:10:39:5d:d5:aa:ed:a7:f6:18:
                    3c:8a:65:14:e0:db:02:eb:4a:33:24:44:05:ca:4f:
                    f0:3c:05:7c:30:7a:51:07:09:8c:51:df:dc:d6:69:
                    a9:f9:98:fc:0b:ff:ca:54:62:51:d4:ea:d2:63:2b:
                    bc:69:0b:8c:4a:d9:85:ab:71:b2:d9:c2:ab:ab:3e:
                    5f:44:c6:89:d0:21:a6:7a:4b:18:ff:58:b6:70:06:
                    aa:26:2e:f1:00:0f:6e:7a:50:aa:1e:53:57:0c:78:
                    fa:4c:29:df:19:e3:23:b1:97:cb:39:6e:6f:32:c0:
                    c3:d1:b2:f5:f0:e7:cc:be:12:7d:c7:57:3c:34:dc:
                    a9:ab:54:86:1c:d4:84:3d:c2:b4:53:7b:ec:25:55:
                    7f:e2:42:a8:c4:0c:b7:22:7d:ba:52:c2:53:ef:ac:
                    a7:dc:9e:4c:63:fd:d8:5b:ba:f9:73:01:76:9d:77:
                    f2:ba:df:9d:33:3e:46:e2:97:ce:06:48:20:13:2e:
                    1c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C0:CA:9B:FA:7B:80:85:7A:AE:89:53:9B:02:30:81:84:20:3E:8A
            X509v3 Authority Key Identifier:
                keyid:92:60:2F:1E:83:16:11:57:79:44:44:49:5C:71:5B:35:22:40:98:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/92602F1E83161157794444495C715B352240982F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92602F1E83161157794444495C715B352240982F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d4f63e4-6fb3-4b03-b210-b5686cd5b397/0/3130332e3132322e3230332e302f32342d3234203d3e20313338303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:c1:d3:61:08:23:38:ef:ce:28:74:7f:46:a8:04:7a:48:dd:
         40:46:4c:14:25:55:80:1f:e4:6a:6e:f6:95:c8:1d:62:74:7e:
         4e:4a:c8:e3:9f:17:f7:92:5c:e4:fc:93:65:d5:fd:54:24:d2:
         18:4c:7a:9f:82:70:b6:b9:0c:d1:81:1e:a3:67:21:c6:6f:38:
         03:1b:46:c3:95:95:b2:4c:79:f2:2e:42:f9:d3:bc:75:45:4f:
         10:0e:e2:e7:11:25:47:d9:cb:5b:ea:1f:6e:fe:64:51:f5:c4:
         d9:44:51:d4:86:68:ff:24:bd:15:5d:3c:df:e6:40:8d:02:30:
         70:24:89:10:f1:c5:ef:ac:cd:00:28:c1:7b:9f:b6:ca:d9:6c:
         72:a7:99:4d:72:62:81:10:18:7b:b2:39:0a:53:72:69:a9:40:
         6e:69:d3:c2:a4:49:a7:09:18:19:41:bb:30:85:9f:00:53:75:
         0d:b5:5b:5f:24:2d:7b:66:cd:03:0e:1c:52:e8:4a:c3:75:04:
         95:0b:72:ee:94:d4:fa:60:8f:df:22:4c:73:09:e2:fd:fc:73:
         42:a3:fb:d3:c0:2e:3f:e3:9c:85:75:29:81:6b:da:f9:d1:dc:
         38:de:7d:e2:3b:aa:56:7f:24:71:24:ec:f3:a1:96:bd:1a:26:
         7f:a8:ac:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org