Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134382e302f32342d3234203d3e20313530393139.roa
File:                     3130332e39312e3134382e302f32342d3234203d3e20313530393139.roa (raw, json)
Hash identifier:          nunMV42j/Obz09f7FJP+WfHQO9NIMjfH6RVmrZU1XLI=
Subject key identifier:   66:BB:F2:18:DE:2B:43:45:DB:29:84:F9:64:A6:BA:A3:D4:85:0E:3E
Certificate issuer:       /CN=781285AE1A8C595D354913D0B93F6982FCDFD898
Certificate serial:       0A7CDBE3AB0A6B191295ED8F8462D047927CFA3D
Authority key identifier: 78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134382e302f32342d3234203d3e20313530393139.roa
Signing time:             Fri 01 Mar 2024 05:01:49 +0000
ROA not before:           Fri 01 Mar 2024 04:56:49 +0000
ROA not after:            Fri 28 Feb 2025 05:01:49 +0000
asID:                     150919
IP address blocks:        103.91.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl
                          rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7c:db:e3:ab:0a:6b:19:12:95:ed:8f:84:62:d0:47:92:7c:fa:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781285AE1A8C595D354913D0B93F6982FCDFD898
        Validity
            Not Before: Mar  1 04:56:49 2024 GMT
            Not After : Feb 28 05:01:49 2025 GMT
        Subject: CN=66BBF218DE2B4345DB2984F964A6BAA3D4850E3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:42:44:d1:24:19:d9:e8:d3:b1:ea:f6:90:
                    b0:39:c7:ff:6c:5f:14:fa:ac:fd:b6:6f:0a:a8:53:
                    32:47:bd:6f:63:55:51:67:19:c1:ac:47:e7:b8:ab:
                    c1:e3:13:2a:5e:36:05:a5:30:da:d4:8a:08:08:67:
                    d5:26:8b:86:43:84:12:21:e0:ec:74:32:89:e4:fa:
                    79:04:da:a1:6e:d3:3a:d9:ff:e3:e6:14:23:69:ec:
                    1a:20:e7:5c:ff:04:c0:22:a4:f3:19:ea:66:fe:ff:
                    7a:ca:38:8b:68:d5:fb:27:97:c9:cb:76:fe:0a:f8:
                    e1:82:cd:48:70:47:bd:ed:b5:66:bc:26:9b:da:3e:
                    26:68:ed:03:b3:82:57:2b:17:a0:df:f4:44:09:46:
                    5d:84:32:b4:66:a6:d7:f1:b4:75:ff:06:dc:9e:8d:
                    8a:ee:0c:e4:31:e1:ca:18:b7:b0:3a:c2:4f:f7:ba:
                    2e:39:45:77:79:3c:a8:32:c2:b1:fd:c2:15:6e:c2:
                    2b:a8:fb:0b:2c:4f:11:ed:1e:5c:fd:14:d8:35:85:
                    42:42:de:f6:3d:36:1a:37:e4:43:76:4d:8c:84:5c:
                    39:77:ea:ee:a7:13:f5:5d:b1:22:6b:f2:f1:2f:05:
                    c6:d3:a1:e6:98:a8:e7:17:f0:4b:b5:95:a0:12:62:
                    d1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BB:F2:18:DE:2B:43:45:DB:29:84:F9:64:A6:BA:A3:D4:85:0E:3E
            X509v3 Authority Key Identifier:
                keyid:78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134382e302f32342d3234203d3e20313530393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:1a:07:ff:95:23:12:88:20:bc:84:d7:6f:6a:fa:1e:7b:e6:
         42:ff:e9:b4:e9:09:51:14:d8:c0:c6:7f:04:43:e9:e3:3c:6f:
         e8:08:3b:5c:4f:df:dd:ec:58:10:f5:49:27:fc:16:8d:59:ba:
         66:6a:51:05:54:16:80:ec:f3:65:b9:a9:e0:ea:8a:0f:74:2c:
         64:82:2f:4a:ae:7e:cf:1c:c4:0f:aa:d8:17:6d:5f:7a:a0:41:
         02:2f:aa:73:e6:fa:b1:88:f4:30:b6:d4:21:40:38:a7:62:82:
         32:af:9d:ea:2a:1e:60:4e:e1:08:af:6f:e2:fc:6c:33:42:ee:
         54:1d:1e:08:95:df:b2:01:65:df:39:84:44:92:9e:2b:e0:52:
         97:3c:34:70:94:dd:df:5e:fe:bd:d1:93:bb:ee:f4:8b:c3:37:
         bb:a6:87:27:a7:1e:27:dc:e2:40:bf:3b:35:cf:b8:cc:47:3f:
         25:9a:e7:4a:e1:9b:ae:c9:78:c6:f8:18:04:a8:94:f5:3a:c9:
         38:21:1f:9e:a8:b0:2d:43:1d:6a:a5:b2:dd:9b:30:d3:49:74:
         0b:51:b1:83:b3:b7:6b:a2:17:84:eb:98:30:15:ac:a5:8e:ed:
         59:6b:1b:6d:8c:23:c6:e3:9f:b5:55:a6:ed:08:c3:fc:52:49:
         93:df:65:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 10:58:26 2024 by rpki-client on console-fra.rpki-client.org