Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa
File:                     3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa (raw, json)
Hash identifier:          7eWgB/28Z19DuctSJmo4Z/v3QQApxZoEJLdj3RY++xc=
Subject key identifier:   7A:27:62:BF:17:06:DC:2B:76:CE:7B:80:3E:BF:59:21:93:22:01:90
Certificate issuer:       /CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B
Certificate serial:       7DA824878AB12209378B2840D566D57C212E2CEB
Authority key identifier: 9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa
Signing time:             Fri 07 Jun 2024 03:00:00 +0000
ROA not before:           Fri 07 Jun 2024 02:55:00 +0000
ROA not after:            Fri 06 Jun 2025 03:00:00 +0000
asID:                     141669
IP address blocks:        103.162.238.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl
                          rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a8:24:87:8a:b1:22:09:37:8b:28:40:d5:66:d5:7c:21:2e:2c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B
        Validity
            Not Before: Jun  7 02:55:00 2024 GMT
            Not After : Jun  6 03:00:00 2025 GMT
        Subject: CN=7A2762BF1706DC2B76CE7B803EBF592193220190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:02:8e:a8:71:f9:dd:99:0c:2f:89:13:5c:a8:
                    a2:c4:37:2f:ee:24:71:bc:86:0b:b7:34:08:84:77:
                    07:a1:99:17:e1:2e:aa:38:e3:5d:84:ca:2c:96:b9:
                    06:36:e4:f7:e7:ef:24:b7:13:46:62:d0:58:37:d4:
                    31:32:e4:88:02:ad:c6:99:13:56:9f:fa:9d:e3:7f:
                    95:2a:7e:7d:0a:aa:8d:3c:e6:13:88:dd:f1:f4:58:
                    d6:0d:b8:36:cf:d5:de:8a:9e:c9:65:c5:f3:b8:47:
                    de:b0:13:40:1a:a5:90:df:cf:da:2d:5b:ac:6f:93:
                    0e:bd:f3:70:f6:1c:4c:18:e9:64:e5:5c:b4:82:85:
                    4f:df:f4:e4:ab:30:f2:83:2f:73:da:1d:ee:e7:3e:
                    5a:4e:91:f3:dd:90:8c:59:19:c2:50:1f:f9:48:01:
                    23:10:16:5b:32:c0:51:de:ec:ee:b1:26:36:bb:d0:
                    67:40:29:70:37:6f:18:c2:d9:9f:50:1f:de:3f:30:
                    66:bd:be:8e:cd:ae:1a:13:ff:fb:6c:b7:0d:1a:e7:
                    3a:7c:02:33:2c:62:c0:36:be:47:e9:1b:a6:a2:2f:
                    fe:76:2b:d0:cd:a2:55:76:0f:1d:ad:6a:f1:3d:d1:
                    43:63:de:61:d9:bb:31:7c:b4:6d:41:0b:85:9f:0b:
                    52:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:27:62:BF:17:06:DC:2B:76:CE:7B:80:3E:BF:59:21:93:22:01:90
            X509v3 Authority Key Identifier:
                keyid:9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:aa:17:58:c0:f2:a7:99:28:15:83:22:74:24:88:fc:4b:9f:
         a0:a1:bf:aa:9e:3e:22:fb:34:b4:25:8b:4c:17:3b:76:ee:01:
         92:7e:71:05:75:35:79:c3:ff:32:8f:08:d9:1f:69:33:4f:b4:
         fd:e0:e0:d5:6c:14:67:05:8c:c1:c6:a6:e0:e2:18:ff:72:10:
         ea:fe:69:50:91:50:a9:9d:14:3e:78:56:4d:b2:c0:e0:c6:ed:
         c0:ce:31:39:7d:ed:aa:23:33:13:3c:a1:c0:d9:9d:0a:c2:42:
         f3:c2:7c:27:a8:55:06:cf:fb:b2:2b:ba:de:eb:41:39:5f:51:
         dd:85:e7:7c:37:27:e3:e5:de:d2:5a:9e:54:72:bf:82:8b:22:
         dd:7e:dd:a9:e4:9f:42:6a:76:59:0b:bf:91:90:63:b0:23:19:
         7f:41:7f:76:01:b8:ff:1a:0c:ed:67:c0:c9:0d:81:e7:87:b1:
         bf:70:56:4c:4f:30:b7:c8:50:d2:95:41:55:21:26:97:2a:d1:
         4a:40:0b:04:d3:3d:bb:08:21:da:15:43:fa:e5:c4:5c:07:9f:
         02:41:b4:11:b9:1f:58:ad:5d:86:50:0d:7f:12:9d:a3:a6:52:
         c6:fb:3e:46:47:47:2e:0b:2e:e4:a2:52:60:17:ab:14:29:89:
         ad:96:fc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:18 2024 by rpki-client on console-ams.rpki-client.org