Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/3130332e3138332e3130302e302f32332d3234203d3e20313439363730.roa
File:                     3130332e3138332e3130302e302f32332d3234203d3e20313439363730.roa (raw, json)
Hash identifier:          yiCed47rij8JKBeE3LnFg4bu0GswlQuJzHtNLOvn0lo=
Subject key identifier:   69:D1:9C:24:33:D5:26:7C:08:0F:7F:43:22:BC:B1:2A:8A:0C:56:2A
Certificate issuer:       /CN=7B9F50722EE5D5DB8DF552ED32CB8764B64FA902
Certificate serial:       7B6CA1B2D9C57712416C1BDB081C057EA87AC91A
Authority key identifier: 7B:9F:50:72:2E:E5:D5:DB:8D:F5:52:ED:32:CB:87:64:B6:4F:A9:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/3130332e3138332e3130302e302f32332d3234203d3e20313439363730.roa
Signing time:             Sun 03 Nov 2024 12:00:02 +0000
ROA not before:           Sun 03 Nov 2024 11:55:02 +0000
ROA not after:            Sun 02 Nov 2025 12:00:02 +0000
asID:                     149670
IP address blocks:        103.183.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl
                          rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:6c:a1:b2:d9:c5:77:12:41:6c:1b:db:08:1c:05:7e:a8:7a:c9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B9F50722EE5D5DB8DF552ED32CB8764B64FA902
        Validity
            Not Before: Nov  3 11:55:02 2024 GMT
            Not After : Nov  2 12:00:02 2025 GMT
        Subject: CN=69D19C2433D5267C080F7F4322BCB12A8A0C562A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0a:31:3e:98:c5:48:a4:6a:49:7f:89:6b:fe:
                    9b:34:67:96:d4:23:1d:09:36:e4:3f:a1:15:ae:c9:
                    09:18:00:a7:a3:dc:03:08:d1:81:da:c4:23:82:e2:
                    0b:82:76:05:32:e6:ce:c0:9f:d1:25:3c:61:57:b9:
                    19:a3:b2:dc:1e:11:53:71:a3:a2:7a:10:65:be:fe:
                    ad:a1:7a:6f:7a:4f:a0:8d:53:35:0d:4b:cf:c3:d4:
                    04:5d:a3:76:93:29:0d:66:8d:43:ec:ca:76:41:fb:
                    73:e8:0b:cd:0f:25:34:37:4b:3d:08:6b:35:59:fa:
                    23:04:84:93:5d:79:7a:4c:a9:8a:e7:1c:73:f9:77:
                    d6:e3:d1:f5:4e:f9:09:c7:77:ee:ae:6d:f9:5a:19:
                    12:0d:67:f8:5a:23:a8:e4:6d:d5:33:c3:31:dc:19:
                    a8:38:a5:cc:eb:49:fe:57:4d:80:fc:7f:97:ec:75:
                    b6:dd:8e:a5:50:68:82:b8:d5:5d:fd:9d:48:4d:ed:
                    40:7f:7a:bf:0a:c2:9e:1a:5c:f6:b5:c2:52:b2:c7:
                    f9:c2:47:e0:11:f6:e6:48:87:ae:bc:87:db:56:ee:
                    8a:dc:62:75:f1:f4:69:0d:92:a0:28:e7:c0:d0:c8:
                    5c:e6:2e:a5:ae:a1:34:92:44:d2:8d:ac:4b:fb:b4:
                    22:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D1:9C:24:33:D5:26:7C:08:0F:7F:43:22:BC:B1:2A:8A:0C:56:2A
            X509v3 Authority Key Identifier:
                keyid:7B:9F:50:72:2E:E5:D5:DB:8D:F5:52:ED:32:CB:87:64:B6:4F:A9:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/3130332e3138332e3130302e302f32332d3234203d3e20313439363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:9c:e5:a2:a2:16:45:b2:68:92:11:d1:8c:67:cf:9a:4c:ba:
         75:a4:72:c1:5c:4d:5a:27:48:c3:ae:5b:8b:5a:4f:d2:72:06:
         08:79:38:6c:c4:e4:67:40:28:d9:7b:e0:55:8f:f5:e0:7e:06:
         4d:7c:56:2e:30:05:66:60:ba:e4:dd:cc:54:bf:96:70:05:f4:
         bb:30:37:d6:64:d0:91:fb:8c:d4:e6:39:0a:ab:33:4b:60:cc:
         ae:6d:01:ab:10:46:a3:a5:02:79:60:cd:f8:19:b5:03:bf:0b:
         bc:9a:0b:ed:02:6b:45:88:ca:fe:ea:e9:d2:b9:39:66:c1:e0:
         04:ed:56:e6:8e:0b:05:49:fe:39:2b:31:e1:81:55:ea:2e:45:
         97:55:e1:25:39:a7:47:42:cd:50:9f:73:bb:3e:c1:f5:4e:5a:
         d7:de:ef:36:48:70:80:18:bf:08:fb:ea:7d:b1:3b:b7:72:b1:
         22:aa:2a:1a:87:9f:1e:85:13:21:50:95:c6:89:a0:14:9d:9b:
         ac:0a:9e:c7:63:1a:c4:6a:7a:54:41:0d:26:e4:2d:45:d6:6c:
         b3:4d:e8:ad:46:f1:e2:31:3d:ea:4b:2a:8c:ee:10:e7:2d:2b:
         b7:cf:0a:58:ed:6e:6b:1a:a3:51:b4:0d:87:e8:dc:bb:50:94:
         85:78:0b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org