Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa
File:                     3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (raw, json)
Hash identifier:          k338Lmr2nBFKtOYrTW3s+aTUS4KKRTx1cKwMsZkav7w=
Subject key identifier:   B0:15:47:A5:2F:A9:7A:3E:F4:E8:96:47:7C:BF:51:4A:AC:5F:95:F0
Certificate issuer:       /CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7
Certificate serial:       58BC657676064E59E130AC4A9EE515814DEFD77D
Authority key identifier: 69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa
Signing time:             Fri 27 Sep 2024 03:00:03 +0000
ROA not before:           Fri 27 Sep 2024 02:55:03 +0000
ROA not after:            Fri 26 Sep 2025 03:00:03 +0000
asID:                     150211
IP address blocks:        103.196.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl
                          rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:bc:65:76:76:06:4e:59:e1:30:ac:4a:9e:e5:15:81:4d:ef:d7:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7
        Validity
            Not Before: Sep 27 02:55:03 2024 GMT
            Not After : Sep 26 03:00:03 2025 GMT
        Subject: CN=B01547A52FA97A3EF4E896477CBF514AAC5F95F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:83:37:8d:7d:a6:d1:62:36:94:26:88:8f:c8:
                    82:ee:72:34:1a:97:56:cd:3c:2b:c1:eb:65:5f:13:
                    1e:50:5b:c6:73:38:88:6b:db:65:43:17:6a:40:93:
                    51:6e:b8:88:da:7c:94:62:81:15:74:f4:cf:38:25:
                    21:bd:fd:f2:5b:89:16:f0:0b:7e:e4:eb:54:0d:fe:
                    56:aa:3e:e4:4b:ae:f9:b6:08:7b:e9:5f:d8:63:da:
                    41:18:72:ae:1d:9e:0c:84:6c:a7:68:98:6f:62:ec:
                    e4:49:2e:c7:8e:de:31:dc:1b:71:a6:09:b4:35:dc:
                    b2:b9:00:ad:86:50:9a:de:a1:e7:2a:a1:26:ad:e3:
                    47:2e:ce:97:e4:5d:57:4d:44:1d:5c:86:84:c2:21:
                    f3:3e:71:fa:ca:8a:c5:5d:e5:f0:30:a3:43:07:9c:
                    92:1e:ed:68:31:d8:78:bc:86:e0:71:aa:b1:fe:e1:
                    6d:01:de:18:39:55:82:56:f6:41:16:70:cd:33:03:
                    0b:a6:2d:6c:53:a6:b7:f4:82:31:58:e3:9e:f2:e2:
                    1f:b6:dd:7c:52:3f:35:d3:29:c7:d3:e2:91:ee:59:
                    0f:ad:da:63:66:08:e1:90:00:b7:c0:8a:7e:13:dc:
                    3c:70:40:02:4a:b8:38:5a:83:fe:f2:8d:6d:a0:f8:
                    a8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:15:47:A5:2F:A9:7A:3E:F4:E8:96:47:7C:BF:51:4A:AC:5F:95:F0
            X509v3 Authority Key Identifier:
                keyid:69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:d0:d4:49:45:d1:d5:f5:c3:26:f5:78:ef:50:97:f6:a7:ca:
         cd:56:a0:85:e1:95:10:c3:4e:99:e6:d2:f8:14:71:56:a6:f6:
         a2:34:8e:40:e7:04:ec:98:17:be:c7:c1:19:9d:72:f8:fe:c8:
         fd:15:0b:31:87:1c:69:03:33:5e:33:82:b3:c4:d2:95:0b:93:
         6a:0c:50:ac:f6:c0:bf:2c:7a:d7:cc:20:3b:32:0c:2a:18:f2:
         11:44:3a:6f:9a:2c:47:3e:ef:98:b6:bd:a0:8a:b7:32:ff:52:
         e8:8d:e2:10:b1:39:39:f3:6e:aa:fa:70:e4:3c:d5:80:d3:5e:
         48:6d:20:5a:4a:10:1a:50:bb:4b:1c:c0:2a:a1:92:e0:14:9a:
         5a:a7:c2:c3:ec:b6:ea:2b:d1:43:69:41:cd:d2:f6:83:8c:43:
         68:a4:de:36:4b:b0:ab:c3:07:48:ed:0f:92:26:f8:ba:d3:f3:
         40:2e:c5:54:18:4b:df:9e:75:70:50:93:96:31:8b:02:ab:b9:
         2c:72:ab:e6:d5:f8:d5:f9:e5:0c:68:c1:4e:8d:1b:fe:61:d0:
         28:07:72:c6:7b:ea:06:a2:b9:45:20:ff:1d:40:d9:03:83:45:
         8d:39:9a:08:3f:e8:9a:31:b9:ec:2e:18:ee:c1:0d:6b:6e:ff:
         46:1e:20:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:26:10 2024 by rpki-client on console-ams.rpki-client.org