Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa
File:                     3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (raw, json)
Hash identifier:          t9NUx3DtxecIaFZHSk+mCoxwNcnsYC+1/pLtEn9rLWQ=
Subject key identifier:   76:71:6B:EB:13:E1:BE:CB:A8:97:06:6B:E5:06:DA:62:46:AE:65:2A
Certificate issuer:       /CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39
Certificate serial:       71C22BC040F58F5D3ACA7EE7188DB5A6F1E2D0D6
Authority key identifier: AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa
Signing time:             Fri 30 Aug 2024 08:02:33 +0000
ROA not before:           Fri 30 Aug 2024 07:57:33 +0000
ROA not after:            Fri 29 Aug 2025 08:02:33 +0000
asID:                     138115
IP address blocks:        103.191.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl
                          rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c2:2b:c0:40:f5:8f:5d:3a:ca:7e:e7:18:8d:b5:a6:f1:e2:d0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39
        Validity
            Not Before: Aug 30 07:57:33 2024 GMT
            Not After : Aug 29 08:02:33 2025 GMT
        Subject: CN=76716BEB13E1BECBA897066BE506DA6246AE652A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:41:85:b8:a1:e2:7a:eb:e5:e1:40:74:2f:3a:
                    f5:d7:86:3d:aa:a4:1f:10:81:55:16:e1:57:06:6c:
                    d2:40:01:ae:b4:2d:e8:93:39:bb:dd:f5:9d:ae:b5:
                    d0:cd:42:20:7c:ee:80:f4:08:c0:a6:49:ca:d3:e0:
                    d0:97:de:d2:de:66:85:d5:d8:e0:03:eb:32:b1:aa:
                    f8:4e:f5:15:a2:61:c3:7c:00:87:ba:be:a3:db:e3:
                    aa:22:bb:c4:77:36:b0:e3:9d:e2:c4:01:1b:64:b9:
                    6f:3d:a0:87:77:4d:fe:d2:d0:61:a2:62:d9:65:86:
                    ab:5e:a6:de:32:0f:2b:11:94:94:02:ca:bd:ac:cf:
                    b6:55:f6:2c:4f:8c:fa:33:6f:1e:c9:98:e2:22:08:
                    08:47:dd:bb:4e:0f:d5:1b:8f:32:0f:84:1d:69:35:
                    2e:4c:a8:53:63:d8:fb:ff:54:f4:1f:c3:e1:8f:52:
                    38:b1:42:dd:67:d4:ab:2e:95:75:6d:e4:03:cd:27:
                    e4:1c:83:8a:22:88:c4:89:79:98:34:fd:53:08:f2:
                    05:4d:0d:83:a3:06:2c:20:1a:1a:77:f2:8a:6c:a1:
                    f1:75:0f:67:5e:bf:f8:35:9d:4e:97:02:6f:d7:64:
                    e1:b0:c2:e5:b0:9b:ff:f2:cb:ba:c2:fb:56:71:97:
                    13:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:71:6B:EB:13:E1:BE:CB:A8:97:06:6B:E5:06:DA:62:46:AE:65:2A
            X509v3 Authority Key Identifier:
                keyid:AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:35:88:77:e0:a7:c5:31:98:24:06:54:41:6d:23:08:7f:41:
         5a:a5:0f:80:89:e5:74:68:84:a8:4f:ec:66:1d:59:d8:31:ae:
         2c:28:be:cb:e8:3f:8e:0f:f9:d3:1a:22:7f:9d:23:a8:29:f3:
         04:ed:d9:95:91:91:3c:fb:c1:11:34:fe:21:72:7c:ed:96:68:
         61:ac:43:d2:05:fb:76:66:03:f2:90:d6:02:bc:d0:3c:32:7d:
         54:ab:26:82:3f:de:0e:8b:f4:a5:bc:8b:44:93:d0:81:51:a8:
         c1:7a:b5:be:9c:54:29:6f:47:7b:52:00:79:66:1a:2b:4f:a6:
         b3:ad:16:a3:23:0e:b6:c9:58:0b:9f:65:ff:6d:8d:57:25:8d:
         36:cc:d3:53:15:81:ca:db:93:bf:5d:92:ee:e8:b8:e3:39:1b:
         43:06:5e:7a:8d:0a:1b:e7:65:1c:d9:48:0d:2f:cf:77:d4:d3:
         e4:aa:01:86:cc:3b:ea:f8:8e:56:3c:59:d6:c5:50:ab:57:d6:
         5b:6b:b5:c2:c0:95:66:75:c3:7f:44:a4:da:f1:ef:7b:fb:5a:
         82:25:08:3c:9c:ae:3a:6d:71:ae:77:62:8a:1b:6b:bb:c4:ec:
         9c:d4:d6:a4:47:81:ee:ae:5c:79:96:53:88:ca:9f:a4:4a:47:
         03:fd:fa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:10 2024 by rpki-client on console-fra.rpki-client.org