Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa
File:                     3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (raw, json)
Hash identifier:          JbWzlg1lnWum+3WuBwswrM9CMw427j/ZXnbxFo3i/MI=
Subject key identifier:   3D:13:E9:25:03:97:CD:85:06:06:3A:71:7C:EA:72:56:A9:09:B5:5B
Certificate issuer:       /CN=F61D0A85B56D8F824658A8287BE8D4F659680324
Certificate serial:       417D9BA8F6D80391585C49279545E24C0AE9225B
Authority key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa
Signing time:             Wed 03 Apr 2024 01:16:36 +0000
ROA not before:           Wed 03 Apr 2024 01:11:36 +0000
ROA not after:            Wed 02 Apr 2025 01:16:36 +0000
asID:                     149693
IP address blocks:        103.186.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl
                          rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7d:9b:a8:f6:d8:03:91:58:5c:49:27:95:45:e2:4c:0a:e9:22:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61D0A85B56D8F824658A8287BE8D4F659680324
        Validity
            Not Before: Apr  3 01:11:36 2024 GMT
            Not After : Apr  2 01:16:36 2025 GMT
        Subject: CN=3D13E9250397CD8506063A717CEA7256A909B55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:21:11:82:e1:97:6e:91:ba:8b:3e:73:16:
                    49:c1:c4:47:b3:3b:1a:b1:52:00:75:39:22:e8:d4:
                    97:01:3d:7b:9b:da:9b:19:d4:01:34:f6:03:48:de:
                    09:f2:8d:61:f7:27:c0:e1:21:d3:88:07:b1:73:27:
                    2c:f2:3a:3a:0e:da:89:86:58:4f:42:38:12:8f:29:
                    9e:5c:16:95:3f:e0:3f:6c:01:21:4e:df:63:01:b6:
                    94:0c:10:f5:5b:24:59:4e:05:86:3d:f2:23:37:89:
                    b7:e8:6d:8b:4f:26:3f:cb:3f:ba:38:01:ae:25:9a:
                    b6:a0:01:59:86:aa:de:9c:a4:af:10:cf:0c:4b:aa:
                    7b:3a:5c:e0:89:ae:38:ad:d7:b9:56:69:45:0a:b7:
                    6f:cb:56:ca:f2:7b:23:b9:90:76:2b:37:fa:f0:ea:
                    a7:40:61:8d:c1:ae:29:f3:27:93:65:29:d4:82:03:
                    87:bc:71:6c:d5:eb:4a:74:a1:93:58:d8:cb:d1:22:
                    ff:f8:60:94:76:42:6c:99:4e:05:5f:a3:c0:5b:4e:
                    66:c6:13:80:18:a4:4e:d3:d0:76:a1:35:9e:8c:be:
                    40:a6:b0:9e:bd:24:91:92:cf:4f:06:3b:4b:d9:b4:
                    bb:cd:97:7e:e7:59:5b:17:bb:8e:81:cb:07:fb:60:
                    07:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:13:E9:25:03:97:CD:85:06:06:3A:71:7C:EA:72:56:A9:09:B5:5B
            X509v3 Authority Key Identifier:
                keyid:F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:a9:cc:f3:e2:87:a6:b7:ca:1b:a3:d6:48:b4:b1:ae:40:d4:
         f3:77:5c:b6:49:cc:5d:cb:c8:97:e8:e8:fb:84:82:41:3a:af:
         93:16:b8:9f:76:a1:2a:1e:b4:e7:fb:5e:1a:ee:a7:f3:3c:48:
         24:20:47:2b:a3:b9:9c:7e:f9:5e:55:59:7f:47:c3:f5:cf:5c:
         85:02:ce:3a:cd:8a:e3:17:61:0c:28:21:e1:a2:88:22:61:be:
         e9:e4:01:d6:07:32:2d:9e:51:b1:b6:1a:a5:4e:74:68:8b:97:
         b8:ad:3d:d3:ad:f4:9c:67:63:9b:93:fa:47:e8:e9:da:5b:28:
         a8:48:89:2c:4c:1e:c2:97:f9:fc:21:a3:6c:67:0c:aa:f5:e4:
         bd:12:53:83:85:43:40:e8:56:15:c1:e5:ea:fe:0a:f4:20:df:
         ee:89:a1:bf:e9:53:ac:d0:b1:de:f6:23:cc:ab:64:68:9c:8b:
         d7:38:6f:dd:91:d8:e8:56:ff:5d:94:5d:4d:23:84:ee:fd:66:
         df:76:82:7e:66:a8:b9:7b:4f:ca:49:88:74:32:9c:47:74:bd:
         72:a6:dc:f9:98:2a:f7:ec:49:54:d3:30:cf:ff:7e:6f:9c:c3:
         f1:d4:15:3b:7c:97:7f:ca:7c:61:84:81:b7:ee:6e:76:85:22:
         0c:96:27:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:34:09 2024 by rpki-client on console-fra.rpki-client.org