Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa
File:                     3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (raw, json)
Hash identifier:          heu4e8sIQY0GrzrCMXaxDxeM2U05OsH3YIXr+Hp2kfg=
Subject key identifier:   AA:0A:92:F4:7A:01:1B:9D:63:7D:AF:02:F5:13:03:9B:AB:C9:21:74
Certificate issuer:       /CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7
Certificate serial:       3073EC63A32FB1C2B9CF790E84F227B2334CCDDA
Authority key identifier: 69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa
Signing time:             Fri 27 Sep 2024 03:00:02 +0000
ROA not before:           Fri 27 Sep 2024 02:55:02 +0000
ROA not after:            Fri 26 Sep 2025 03:00:02 +0000
asID:                     150211
IP address blocks:        103.196.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl
                          rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 00:41:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:73:ec:63:a3:2f:b1:c2:b9:cf:79:0e:84:f2:27:b2:33:4c:cd:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7
        Validity
            Not Before: Sep 27 02:55:02 2024 GMT
            Not After : Sep 26 03:00:02 2025 GMT
        Subject: CN=AA0A92F47A011B9D637DAF02F513039BABC92174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ff:ad:17:f0:01:0b:bb:e3:00:17:f6:a8:a2:
                    6b:15:a2:97:ec:6c:ba:28:e3:d4:7f:c2:4f:55:8a:
                    05:8f:6e:77:94:b5:14:3a:e2:b3:6f:61:c0:a4:fe:
                    b6:d3:7c:27:47:41:be:a3:eb:d3:4d:b1:8b:13:d8:
                    ee:4a:0a:a1:bf:fa:1a:d1:68:a1:d9:56:ef:80:9f:
                    9b:23:42:1a:a9:50:7f:10:93:07:b0:6a:06:20:75:
                    e1:09:d5:28:db:29:9b:37:3e:31:b8:2f:0c:0b:cb:
                    a3:a0:cb:11:b8:24:fb:e9:85:de:94:85:ca:cb:b0:
                    8b:be:37:0b:ee:02:c3:e3:41:39:f7:84:35:66:f6:
                    9f:57:09:30:83:80:67:c5:59:03:4a:75:a5:6c:46:
                    93:61:09:af:30:ff:8f:d5:34:da:18:e8:fb:65:97:
                    2d:2c:cb:03:48:bc:bb:bd:50:9c:59:30:a9:ff:87:
                    85:c9:0b:1d:37:82:e6:11:74:54:49:0f:be:66:49:
                    8b:d9:a8:44:5f:e8:c7:a2:97:09:90:cb:a3:66:49:
                    b7:e3:f4:30:b4:79:80:74:ee:93:34:50:9b:17:b4:
                    83:13:0d:97:37:9c:09:c5:ee:c2:b1:7c:e0:36:9b:
                    6c:aa:59:3e:29:56:8b:9f:c6:1e:76:bc:9d:d1:e9:
                    e4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0A:92:F4:7A:01:1B:9D:63:7D:AF:02:F5:13:03:9B:AB:C9:21:74
            X509v3 Authority Key Identifier:
                keyid:69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:a7:ed:b3:11:b3:f6:d8:b5:be:14:40:45:36:4e:31:0a:f4:
         af:cd:75:75:9b:b7:57:57:8c:ff:1d:6b:4c:02:ec:db:2a:cf:
         b5:7a:af:13:90:78:f7:51:1e:7e:e2:34:43:e0:14:87:f9:b2:
         6b:d0:42:1e:3f:1c:91:4e:de:26:32:04:a2:2a:2e:83:2f:87:
         03:97:dd:82:7d:ac:01:6e:45:34:19:4c:72:87:45:10:5d:58:
         16:c7:a3:f8:21:80:4c:11:55:8b:18:d8:52:a5:17:1c:62:ed:
         6c:5a:e1:4f:fc:de:22:54:b6:99:50:8c:dd:c4:58:21:70:d5:
         29:28:ea:2d:b9:90:bb:76:66:0d:09:78:fe:ca:56:d5:6c:f0:
         d3:09:bd:99:3d:32:cc:e4:3d:db:69:af:48:8c:6d:0f:5b:d1:
         9f:7c:40:7d:bb:a5:ca:4e:4d:32:1d:6f:19:e1:e9:97:60:89:
         97:9c:f0:ab:d2:41:ee:bb:8c:7d:de:d3:38:f8:85:74:8a:f6:
         9d:fe:c1:44:05:6d:fa:48:b7:75:61:59:0b:1f:dd:14:57:2c:
         8e:7f:14:ad:ee:54:af:85:26:e2:79:52:2a:0b:80:17:5e:28:
         6d:ea:d4:9e:78:08:30:1c:76:dc:99:ff:b7:cb:81:03:5b:00:
         bf:52:50:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:29 2025 by rpki-client