Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa
File:                     3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (raw, json)
Hash identifier:          tvYlBhnklEiw/TZsUy/XAKxHZ5SwpPC4Bkk7W+uYiRM=
Subject key identifier:   C9:40:B0:24:F1:1E:72:64:B6:68:F9:90:38:05:55:EE:0C:EF:02:13
Certificate issuer:       /CN=F23ACCA147720B423A9576F3E408691505B293A3
Certificate serial:       71951E4E238C1BBAF9F4DF80B65CA21045181796
Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa
Signing time:             Thu 12 Sep 2024 08:00:02 +0000
ROA not before:           Thu 12 Sep 2024 07:55:02 +0000
ROA not after:            Thu 11 Sep 2025 08:00:02 +0000
asID:                     149948
IP address blocks:        103.190.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl
                          rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:95:1e:4e:23:8c:1b:ba:f9:f4:df:80:b6:5c:a2:10:45:18:17:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3
        Validity
            Not Before: Sep 12 07:55:02 2024 GMT
            Not After : Sep 11 08:00:02 2025 GMT
        Subject: CN=C940B024F11E7264B668F990380555EE0CEF0213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8d:ec:ee:e2:96:36:25:d7:f9:93:57:8b:2a:
                    28:1c:72:16:77:4a:e8:38:2d:3d:48:18:25:fd:88:
                    1b:6b:9c:5a:7e:2b:06:47:47:7b:08:e3:67:d0:b4:
                    6e:df:f6:df:c0:33:7c:45:f7:ca:71:29:5f:54:54:
                    68:e7:70:fa:00:ef:b0:b8:f8:17:4a:7d:7e:dd:56:
                    22:4b:28:c5:d5:81:0a:be:c1:23:4b:d6:d4:79:d8:
                    14:93:d5:33:93:e5:56:80:95:73:43:cb:b5:1f:2d:
                    0d:b1:ee:18:eb:f2:9e:ba:74:69:ff:b7:c6:34:48:
                    09:ed:dc:23:06:5f:42:99:7e:93:87:fe:cc:38:ba:
                    d6:58:8e:7b:ea:4e:10:19:6a:55:52:1b:ee:5d:c3:
                    38:07:4e:74:dc:a0:9b:37:14:aa:ee:96:c9:a9:74:
                    dc:22:0a:4c:71:3c:88:b2:fe:f6:dc:75:eb:6f:0c:
                    b5:88:15:1f:d3:dc:85:b9:bc:c4:5d:53:55:52:7f:
                    7c:f8:6b:76:35:49:b3:d1:64:74:7f:76:d8:27:06:
                    c5:94:15:92:af:9e:f5:46:bd:ef:84:11:bd:a4:01:
                    6b:a1:03:88:e7:07:e3:c9:f9:c2:38:17:30:c8:da:
                    bb:ae:dd:5e:a9:cf:94:c3:14:33:3b:3f:0b:83:3f:
                    d0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:40:B0:24:F1:1E:72:64:B6:68:F9:90:38:05:55:EE:0C:EF:02:13
            X509v3 Authority Key Identifier:
                keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:a0:4d:c4:c4:6d:50:4f:0d:54:e8:d1:77:cc:f9:4c:15:53:
         48:d7:91:31:f8:26:7f:f3:31:0b:36:c1:1c:4a:d3:26:2e:94:
         f8:fe:50:c8:d8:f0:38:14:6e:dc:29:67:1f:06:e7:94:a4:ff:
         af:97:86:fa:35:46:6b:8d:01:b8:0c:ac:02:7a:7a:cf:9d:04:
         65:03:2e:4a:36:4a:20:e6:8a:19:31:11:61:2f:b1:28:ba:85:
         05:5d:71:6d:42:db:02:8e:bb:53:b2:fb:74:5f:f5:f7:d9:3b:
         85:04:b9:73:a9:ea:21:c7:10:cb:ba:83:0c:a5:d9:71:7b:5f:
         7f:b6:76:3b:89:b2:9b:fb:cd:3c:3a:7d:48:54:56:5e:d4:69:
         c5:b8:58:70:31:f0:d3:93:1e:89:5e:47:f5:6b:45:f5:d5:53:
         f9:1c:44:78:8b:fd:22:a5:4f:d6:cf:16:2f:38:b1:1c:ee:d1:
         2a:c1:1c:92:54:4a:11:6f:c8:2f:16:97:72:c6:5a:88:9e:60:
         c9:bc:35:5e:73:be:82:00:a1:be:d2:a9:a6:ca:f7:63:5f:6a:
         ff:fc:da:49:58:53:27:11:2c:97:ac:f0:25:1c:60:ef:1f:f8:
         65:58:52:90:4e:87:27:54:dc:7e:5c:5b:df:a6:c9:9f:32:20:
         b1:3c:d8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:22 2024 by rpki-client on console-ams.rpki-client.org