Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa
File:                     3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (raw, json)
Hash identifier:          BITrYKnWZJgNzxKxBZHGB0Gt44gXAvyXNCG3Kynqo94=
Subject key identifier:   FB:86:A6:1B:9C:2C:49:31:19:0A:E4:3A:68:EC:E8:D5:22:D4:E7:23
Certificate issuer:       /CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B
Certificate serial:       3B08EF6CE4E320EBC503B7C13BBB2C019A51FCBF
Authority key identifier: 9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa
Signing time:             Thu 07 Nov 2024 11:00:39 +0000
ROA not before:           Thu 07 Nov 2024 10:55:39 +0000
ROA not after:            Thu 06 Nov 2025 11:00:39 +0000
asID:                     141669
IP address blocks:        103.162.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl
                          rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:08:ef:6c:e4:e3:20:eb:c5:03:b7:c1:3b:bb:2c:01:9a:51:fc:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B
        Validity
            Not Before: Nov  7 10:55:39 2024 GMT
            Not After : Nov  6 11:00:39 2025 GMT
        Subject: CN=FB86A61B9C2C4931190AE43A68ECE8D522D4E723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:a0:ee:b5:58:a2:79:77:96:bc:f7:b8:77:
                    d2:92:27:46:02:60:e9:c5:fa:d4:4b:88:d3:0b:1d:
                    1c:ad:f1:aa:ae:dd:46:f4:11:24:80:3f:e4:e0:94:
                    36:e6:af:64:69:23:0d:19:5d:d8:b8:54:e6:41:0f:
                    1d:91:8f:f4:06:df:83:f6:17:e2:43:e5:5e:97:7c:
                    21:4f:b5:56:8c:3c:df:d2:d4:41:47:f5:c5:cd:b9:
                    74:98:ec:eb:88:38:f5:e3:3b:8c:43:3f:48:93:69:
                    7b:f0:5c:56:6e:bd:10:22:44:5c:fc:fe:f8:4f:b0:
                    05:bc:d1:31:e7:db:41:16:4f:53:77:44:fc:80:46:
                    be:d7:69:f5:86:82:73:dd:21:a8:2f:0f:4b:50:98:
                    a4:69:8b:3e:94:75:f1:94:73:96:fc:30:91:b5:11:
                    f6:0d:51:ec:ba:d6:e0:94:60:21:5e:41:52:8b:12:
                    72:41:7c:a6:44:17:1f:d4:7c:2a:b9:3b:ed:9d:5a:
                    6b:8c:10:3f:4f:d3:50:b1:a9:3e:4b:07:be:d3:ff:
                    09:2e:fb:2d:d2:21:fd:cf:e3:1a:02:9d:10:54:18:
                    45:08:b8:d2:f5:e1:5e:13:8e:e0:bf:33:f5:34:c4:
                    e4:30:15:d0:0d:f7:4d:01:26:18:cf:d5:5c:09:9e:
                    66:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:86:A6:1B:9C:2C:49:31:19:0A:E4:3A:68:EC:E8:D5:22:D4:E7:23
            X509v3 Authority Key Identifier:
                keyid:9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:e1:39:45:f1:cf:d9:c4:32:4c:39:62:2b:7a:40:be:72:81:
         d7:7e:dc:35:ed:96:db:7c:47:65:38:dd:4c:93:88:0a:08:6f:
         87:c2:39:c2:ae:a9:6a:a1:f0:9e:04:06:95:88:81:83:67:64:
         9b:72:63:fb:88:be:14:b6:e1:e4:12:5d:3f:e3:92:aa:7d:69:
         a7:63:f8:24:3b:82:1c:58:c8:1d:28:ed:71:2e:a7:3d:11:46:
         a0:e1:fd:a7:07:12:f5:b3:a9:e1:d4:3d:c8:f5:50:fe:fd:24:
         50:50:98:8e:5a:26:62:27:af:b9:8a:39:61:ae:bd:72:e2:1e:
         d7:c0:8e:11:92:49:9a:27:32:8b:c5:43:d6:d2:4e:85:f9:c6:
         51:10:ce:ca:45:2c:d0:d2:1a:30:d7:57:47:b4:9f:44:4e:96:
         bb:1c:68:d1:2c:3f:28:b6:af:7a:f1:6a:11:20:1f:22:08:0b:
         f3:57:32:f9:9d:14:d7:b2:80:49:54:f1:04:4d:64:63:ac:33:
         54:7f:08:af:c5:79:04:3a:63:d5:87:0d:a7:2c:bc:7a:bd:80:
         45:48:fa:f0:5e:76:a4:75:ea:fc:89:b8:f4:b9:96:d3:ec:00:
         f3:7a:b1:d4:b9:4f:f7:0d:df:f4:73:da:c3:22:56:a5:9d:d2:
         e9:a4:ab:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:51 2024 by rpki-client on console-fra.rpki-client.org