Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa
File:                     3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (raw, json)
Hash identifier:          V98kYcU8v569igqvltJ62ENZBRSZDERQept9pSJvYEE=
Subject key identifier:   A2:B7:43:FE:E7:BE:5E:A5:B5:12:CC:11:35:EE:B6:4D:D7:D5:31:16
Certificate issuer:       /CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7
Certificate serial:       5045245B7F0F45F8477D4552F6B42831730A6E3D
Authority key identifier: 7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa
Signing time:             Sun 11 Aug 2024 23:49:35 +0000
ROA not before:           Sun 11 Aug 2024 23:44:35 +0000
ROA not after:            Sun 10 Aug 2025 23:49:35 +0000
asID:                     151581
IP address blocks:        103.169.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl
                          rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:45:24:5b:7f:0f:45:f8:47:7d:45:52:f6:b4:28:31:73:0a:6e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7
        Validity
            Not Before: Aug 11 23:44:35 2024 GMT
            Not After : Aug 10 23:49:35 2025 GMT
        Subject: CN=A2B743FEE7BE5EA5B512CC1135EEB64DD7D53116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bc:40:93:77:17:70:ed:2f:cb:eb:1a:8b:ef:
                    61:3b:c1:b2:8c:2f:42:ef:15:21:63:58:ac:0b:06:
                    27:00:60:3b:77:33:b0:cd:6e:b2:39:82:34:24:ee:
                    1b:d2:8d:b4:02:c9:f6:cb:74:98:df:b2:f2:ba:82:
                    4b:4c:39:ab:45:7e:22:ac:0e:00:7f:d7:3a:09:22:
                    60:0e:dc:fe:05:2d:5e:d5:50:2f:11:92:3e:c3:fc:
                    8e:05:02:bd:2f:8b:d1:f1:96:1e:af:6d:5c:f7:c0:
                    58:17:ed:72:4a:d8:e5:87:9f:fd:80:55:19:5f:a5:
                    61:be:2d:12:c5:65:e4:c1:19:fb:c0:04:5e:05:ca:
                    78:32:7a:d8:5c:a3:65:5f:2b:fd:57:b7:c1:33:60:
                    c5:d4:9e:b8:a0:94:8e:c2:7d:a2:08:93:0b:02:76:
                    7b:79:65:bc:62:d4:ed:93:fb:f5:13:56:ab:fb:ff:
                    8d:3d:e6:a1:d9:25:f4:0c:4b:65:96:bb:5c:39:51:
                    3b:7f:35:49:4b:a0:77:b6:59:1f:78:17:fb:8f:a0:
                    ff:f5:36:3f:e3:7f:a8:14:71:d8:b4:0f:ab:4e:80:
                    7e:b9:58:2f:4c:3f:28:22:3e:d9:5f:5a:08:0b:a3:
                    43:f4:e3:a6:f7:ff:f9:f9:73:c6:b0:c9:4c:d9:a0:
                    5d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B7:43:FE:E7:BE:5E:A5:B5:12:CC:11:35:EE:B6:4D:D7:D5:31:16
            X509v3 Authority Key Identifier:
                keyid:7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:8a:30:16:ba:69:c5:9b:1c:72:2c:79:8e:8b:74:9c:a5:75:
         78:b4:69:9a:1a:16:b7:e7:f2:6a:2d:6b:5a:f9:b6:6b:ca:4f:
         53:2a:cd:c3:e1:98:a0:b3:df:fa:1b:b5:bd:ab:92:f1:23:97:
         33:f0:f2:a9:11:8b:d8:3c:2f:24:a9:67:b8:45:0f:bd:e2:3b:
         d9:71:dd:cb:7d:77:74:6b:51:12:4e:41:b5:05:bb:61:3b:c9:
         b5:25:ef:d4:d9:06:56:38:0c:63:56:bb:23:fa:5b:48:a2:39:
         39:86:e7:79:cc:97:37:85:2c:eb:79:18:e3:bd:8f:70:20:6f:
         af:ae:67:c4:13:a2:f3:05:a0:cc:52:99:5e:c5:db:9a:ec:18:
         78:6e:02:48:40:41:ca:e3:39:5c:55:06:f7:88:85:37:8c:a1:
         02:a8:d6:93:89:f8:48:b5:9f:b2:32:5d:4a:bf:23:fc:9d:2d:
         0f:6a:bc:49:bc:f3:c6:10:f1:1d:c1:95:aa:84:bb:97:a0:25:
         f2:4d:e0:a8:90:be:9d:22:db:f5:e4:b2:8d:7f:c7:38:4e:71:
         7e:f4:a7:e8:d2:da:82:8c:01:b6:20:db:e9:3b:f8:74:9f:9a:
         17:ba:53:7e:38:be:4c:e9:fe:de:4a:7f:78:4d:be:e1:e8:3a:
         8b:60:8e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:55 2024 by rpki-client on console-fra.rpki-client.org