Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/3130332e3137352e3234312e302f32342d3234203d3e20313337333439.roa
File:                     3130332e3137352e3234312e302f32342d3234203d3e20313337333439.roa (raw, json)
Hash identifier:          qW0hR+s5UmCqTRd4fVDFaUTSoJC0FuMStO1ENVSuLOU=
Subject key identifier:   7D:2C:4A:FE:08:89:24:1A:DE:76:78:E2:D8:31:00:FE:05:4F:46:BB
Certificate issuer:       /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B
Certificate serial:       73048BF6C2816D804231E9922F3FB43A66D68120
Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/3130332e3137352e3234312e302f32342d3234203d3e20313337333439.roa
Signing time:             Tue 31 Oct 2023 07:15:37 +0000
ROA not before:           Tue 31 Oct 2023 07:10:37 +0000
ROA not after:            Tue 29 Oct 2024 07:15:37 +0000
asID:                     137349
IP address blocks:        103.175.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl
                          rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 15:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:04:8b:f6:c2:81:6d:80:42:31:e9:92:2f:3f:b4:3a:66:d6:81:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B
        Validity
            Not Before: Oct 31 07:10:37 2023 GMT
            Not After : Oct 29 07:15:37 2024 GMT
        Subject: CN=7D2C4AFE0889241ADE7678E2D83100FE054F46BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5f:32:71:f9:0e:ee:bb:f1:f5:95:6a:21:f9:
                    16:4a:d1:e5:bf:a1:d4:8b:62:58:b1:d4:82:67:33:
                    e6:7b:27:77:be:1c:c0:d1:6f:7e:6e:d6:e4:f7:12:
                    7f:78:26:50:ea:a2:6b:d3:73:07:41:52:f2:af:21:
                    c1:6b:9b:5c:57:1a:dc:34:a2:a5:19:d0:08:3f:a2:
                    4d:e9:61:0b:9c:56:22:bf:a6:61:a6:4d:a4:b2:f9:
                    d4:48:f6:37:68:93:06:b4:a1:27:be:ef:3c:35:f1:
                    54:b8:04:f7:ca:e8:21:99:b8:29:bb:35:7c:c0:6d:
                    59:b5:50:bd:dc:83:ac:56:ec:2e:9d:7c:ef:41:a5:
                    b9:af:86:d5:78:24:eb:6e:0b:94:05:cb:1e:1a:e7:
                    c1:eb:3f:84:b4:bf:54:12:c7:6a:25:8e:98:e3:33:
                    6e:1e:e2:5d:4b:e7:36:eb:6f:fc:4a:fa:23:14:cb:
                    c8:d5:b3:95:1c:9d:05:b2:79:52:4e:5c:2d:ba:be:
                    eb:0f:53:d5:be:9f:f1:84:53:de:db:fc:45:a5:86:
                    1d:47:a8:02:d0:de:0a:f0:9c:69:79:23:01:76:c9:
                    b8:60:07:75:56:5b:a5:67:dc:e3:d9:85:2e:a5:15:
                    75:e9:86:a8:cd:78:0c:56:97:40:e4:0e:e7:ee:02:
                    2b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2C:4A:FE:08:89:24:1A:DE:76:78:E2:D8:31:00:FE:05:4F:46:BB
            X509v3 Authority Key Identifier:
                keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/3130332e3137352e3234312e302f32342d3234203d3e20313337333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:d9:b4:19:e9:b3:ec:f5:a5:4c:6e:c8:1f:62:18:db:05:21:
         b8:ba:ad:07:37:4f:3d:51:6f:a8:a5:f0:4b:e5:2a:a3:ee:9e:
         44:26:a2:37:b3:f3:49:3c:8d:6d:d7:ed:6f:06:34:4f:9e:19:
         1f:75:17:6d:79:25:92:b7:d5:3e:43:95:b8:03:ca:e4:63:15:
         05:4a:41:ff:fa:80:89:84:55:b0:ba:d1:47:85:af:ad:8e:fe:
         5b:92:1c:d6:e0:b3:86:5e:c2:d7:fd:50:c6:05:c1:4c:2b:c8:
         5c:39:2f:4e:fe:cc:bb:43:67:f4:1f:5c:2c:7c:ac:2b:83:7d:
         32:45:fd:f8:77:2f:36:6c:16:6c:6b:8c:c3:48:3e:28:63:4c:
         83:d0:d9:88:92:e1:70:41:0e:b7:02:10:09:8d:71:23:3c:58:
         73:36:33:93:e2:35:5f:2f:c1:78:4d:cd:d3:52:8a:b7:c1:71:
         80:f7:4c:a2:8f:f3:1b:35:46:6f:b0:1c:61:6e:4f:fc:32:99:
         53:1a:68:da:a4:92:6d:82:79:6a:df:5c:44:e4:4d:51:de:49:
         af:2d:d5:de:3b:ea:26:41:dd:b0:c2:80:ec:b0:90:59:4a:5a:
         fb:38:bf:f2:71:d6:5e:00:60:15:83:99:18:0e:a9:99:78:5e:
         84:24:08:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:13:47 2024 by rpki-client on console-ams.rpki-client.org