Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa
File:                     3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (raw, json)
Hash identifier:          I1BzIeH5TgjjkepGwFPfH7I1fofG2qp61me/WguQhvg=
Subject key identifier:   9D:D7:48:6E:89:09:98:C5:F6:C4:6E:BE:ED:37:AA:FB:39:54:BE:82
Certificate issuer:       /CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5
Certificate serial:       756D7FDD8775A8E2BF41B91452CEE3A312A55462
Authority key identifier: A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa
Signing time:             Mon 19 Feb 2024 08:01:05 +0000
ROA not before:           Mon 19 Feb 2024 07:56:05 +0000
ROA not after:            Mon 17 Feb 2025 08:01:05 +0000
asID:                     150513
IP address blocks:        103.195.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl
                          rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6d:7f:dd:87:75:a8:e2:bf:41:b9:14:52:ce:e3:a3:12:a5:54:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5
        Validity
            Not Before: Feb 19 07:56:05 2024 GMT
            Not After : Feb 17 08:01:05 2025 GMT
        Subject: CN=9DD7486E890998C5F6C46EBEED37AAFB3954BE82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ac:ad:81:e5:be:2f:3f:7c:0d:fa:6c:41:c8:
                    0e:cd:55:93:f7:76:3c:da:e0:30:36:9a:e4:da:3c:
                    ac:a0:70:c4:09:01:09:8c:af:e4:62:1c:8d:9c:63:
                    c0:ae:82:b8:ba:0f:92:44:68:d2:bc:31:a0:53:4c:
                    0a:ef:e7:01:fe:43:89:73:2a:40:b5:44:0b:4c:a1:
                    3a:4a:d0:6a:b5:68:3b:d5:e8:72:80:dc:43:15:ea:
                    04:07:d3:9b:70:fb:28:66:73:50:76:3d:c9:39:ac:
                    4c:76:b5:2b:6e:de:a8:7c:89:8a:1e:75:7d:b6:c0:
                    3c:3f:97:dc:79:73:69:1f:bb:23:7f:fb:d3:10:c2:
                    46:00:ed:7b:14:54:95:29:7a:17:2d:dc:eb:23:15:
                    f4:57:0a:1e:a8:5b:e5:37:9d:cb:d3:e6:68:57:c8:
                    f0:9b:ae:7e:49:3b:04:b4:d7:40:85:ca:e9:bf:82:
                    3b:1a:47:6f:bd:12:e6:90:ac:79:50:37:7e:ff:a1:
                    29:0f:8a:70:cb:32:78:1c:22:e2:15:d1:11:6a:bd:
                    ed:ab:99:fa:38:5b:22:77:2e:90:2c:63:a5:ae:06:
                    28:0d:d6:49:5d:83:46:36:a1:68:2c:93:bc:92:2f:
                    3f:30:2c:1f:a2:52:66:82:aa:a4:e7:26:46:c8:54:
                    89:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D7:48:6E:89:09:98:C5:F6:C4:6E:BE:ED:37:AA:FB:39:54:BE:82
            X509v3 Authority Key Identifier:
                keyid:A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:c9:7d:77:52:ee:51:1d:ce:10:eb:9e:60:d7:15:2c:f7:6d:
         57:00:e5:72:e8:16:b4:c7:d2:e3:7a:19:4c:74:f1:fb:6a:89:
         06:84:0e:ac:17:e3:35:7c:8d:96:05:83:95:98:6d:62:03:9c:
         bb:4a:38:c4:75:d7:e2:5c:5f:4d:3e:4b:f6:5d:68:55:a4:4f:
         ec:0c:e8:7a:78:d2:b3:d0:4a:d7:3c:95:b9:1b:f0:10:bc:63:
         50:85:02:47:10:b7:10:35:1c:45:c4:b8:fc:6a:e3:c4:cf:ce:
         50:91:9e:45:41:09:2e:da:80:d0:fe:4e:82:f1:44:e4:ff:8d:
         35:f6:0d:98:f7:ab:bf:69:b3:b8:6e:1a:45:b1:5c:9b:33:a1:
         bb:6c:ad:87:89:28:40:79:33:f1:20:27:bd:33:e0:a7:51:15:
         ab:e1:2c:da:85:b9:83:26:e5:1b:39:fd:00:0c:9f:b2:a3:6a:
         6e:36:c2:5b:9f:e7:9c:66:af:ac:c4:74:f4:72:52:63:1c:98:
         00:68:af:e5:7f:8e:f9:89:c9:62:1f:80:13:d6:1b:7f:34:91:
         6a:f8:85:9d:f6:78:b5:a5:17:1e:40:4b:f5:e8:4c:59:49:58:
         89:cf:44:4d:77:ed:d9:c2:a9:53:0d:cd:73:8d:0f:ba:86:a0:
         d5:b1:f7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:00 2024 by rpki-client on console-fra.rpki-client.org