Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36332e302f32342d3234203d3e20313339393832.roa
File:                     3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (raw, json)
Hash identifier:          UUOYfIANelvEQMydr1JsVsIw/7HhzVESddIEljhzU2s=
Subject key identifier:   EC:42:F5:1E:1E:35:98:AF:DA:D7:FD:95:51:FE:B4:0B:74:FA:61:C5
Certificate issuer:       /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264
Certificate serial:       0C12D4EC50BF62AB5159430CF47935E37845479B
Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36332e302f32342d3234203d3e20313339393832.roa
Signing time:             Tue 27 Aug 2024 13:18:13 +0000
ROA not before:           Tue 27 Aug 2024 13:13:13 +0000
ROA not after:            Tue 26 Aug 2025 13:18:13 +0000
asID:                     139982
IP address blocks:        103.66.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl
                          rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:12:d4:ec:50:bf:62:ab:51:59:43:0c:f4:79:35:e3:78:45:47:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264
        Validity
            Not Before: Aug 27 13:13:13 2024 GMT
            Not After : Aug 26 13:18:13 2025 GMT
        Subject: CN=EC42F51E1E3598AFDAD7FD9551FEB40B74FA61C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5d:ba:5a:98:9a:da:ac:b7:62:d7:28:35:0a:
                    12:2f:a7:d9:18:f9:ad:bc:f1:e6:b3:05:2c:6e:2a:
                    9c:e2:ff:0f:21:9a:11:f8:72:4e:9c:d5:58:c0:65:
                    f4:38:f8:de:e2:28:35:2b:93:29:fd:9b:97:6f:60:
                    b7:e6:41:35:5d:dc:6e:74:4f:f1:9d:8c:f1:33:28:
                    17:8d:09:f4:13:ee:41:2c:0d:11:b2:61:13:5c:34:
                    4d:9c:da:aa:f6:0a:f2:b8:15:10:f3:3d:37:0d:7a:
                    69:27:3a:b8:cc:3b:5e:c1:3d:47:06:13:1f:bb:8e:
                    c4:98:2f:aa:bc:6a:68:fc:70:8b:71:c4:e4:e3:df:
                    1f:e2:09:14:a4:c3:05:64:a4:15:fb:c0:0f:ce:b9:
                    00:c2:cc:08:10:fc:06:00:c6:a0:ef:6b:8c:56:a8:
                    f3:2a:a0:72:51:c1:f2:d8:03:a1:73:0f:13:fc:cb:
                    d7:69:a8:6c:68:c1:fa:40:55:b4:03:e0:35:fd:07:
                    16:5b:99:2b:15:ab:9f:bc:e0:0b:32:11:30:21:b5:
                    e2:9b:d0:c5:d1:7b:43:6e:ae:d6:8b:b5:5c:b9:8a:
                    73:17:58:af:16:6f:b4:9c:bb:46:97:57:39:47:18:
                    2c:d8:0e:46:aa:8a:2f:d7:8e:32:85:d4:14:81:83:
                    2e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:42:F5:1E:1E:35:98:AF:DA:D7:FD:95:51:FE:B4:0B:74:FA:61:C5
            X509v3 Authority Key Identifier:
                keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36332e302f32342d3234203d3e20313339393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:ee:88:14:c7:bc:bb:b2:bc:ee:68:4a:dd:4c:ec:c1:8e:ed:
         34:76:7f:e0:9a:21:f5:39:a4:e2:1b:f6:17:7f:08:b0:0f:7c:
         14:b1:66:1a:e4:a7:c2:94:a6:ca:e8:1e:f6:9e:cd:e8:8c:de:
         e5:6b:ad:26:80:c1:7d:bb:02:ee:78:14:29:fd:c3:7c:d2:e5:
         6c:c3:7c:13:e0:04:46:65:fd:98:b7:cc:e4:75:83:87:48:98:
         55:36:13:0e:90:2c:e7:ba:96:80:eb:28:0d:3a:9c:1a:76:b7:
         13:d0:48:46:f1:ed:1a:fa:12:50:c9:f0:dc:d8:08:9a:fb:dd:
         83:77:90:04:e9:ce:bd:5f:04:3d:57:47:db:71:01:51:be:27:
         b8:61:07:37:80:a4:7b:15:2b:d5:fb:7d:e0:13:d5:fc:28:a4:
         3a:ce:e0:00:72:f0:8a:1a:9d:8f:59:3c:55:d3:8c:a0:1b:fc:
         da:d7:4f:1f:0f:b8:a9:13:2b:e5:d1:cc:1b:be:6b:ca:c1:38:
         bb:dc:77:bd:76:ad:fe:f6:fd:8b:32:09:b3:40:68:18:23:85:
         56:16:19:58:6b:59:d9:65:40:5b:41:82:5f:2a:99:64:6f:35:
         52:39:24:3d:54:9d:42:ca:ce:e1:7c:24:5a:8b:29:2d:7d:99:
         69:26:24:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org