Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa
File:                     3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (raw, json)
Hash identifier:          gnloxyzy+BjMMSb25i/9FjSca8hdqbTZ26gmHJTl0ic=
Subject key identifier:   9D:9F:18:B1:2E:36:08:06:00:4C:18:A1:47:09:E1:E4:D1:4E:75:3E
Certificate issuer:       /CN=A42F07BEA859C831526717AB1D092E11E7890BDD
Certificate serial:       668F9D3E71E6AE134F4709A3EE58B443A23B9355
Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa
Signing time:             Mon 26 Feb 2024 09:00:00 +0000
ROA not before:           Mon 26 Feb 2024 08:55:00 +0000
ROA not after:            Mon 24 Feb 2025 09:00:00 +0000
asID:                     137311
IP address blocks:        103.109.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl
                          rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 21:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8f:9d:3e:71:e6:ae:13:4f:47:09:a3:ee:58:b4:43:a2:3b:93:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD
        Validity
            Not Before: Feb 26 08:55:00 2024 GMT
            Not After : Feb 24 09:00:00 2025 GMT
        Subject: CN=9D9F18B12E360806004C18A14709E1E4D14E753E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:3d:78:f7:f6:30:61:50:4d:f6:44:50:86:c0:
                    50:3c:0f:6c:31:ba:1b:34:cb:ab:30:a3:00:6a:c0:
                    d2:65:bd:dc:ef:9c:38:3f:54:75:66:a2:2e:91:07:
                    11:98:73:60:66:22:09:5a:7e:ea:36:22:89:c9:b6:
                    76:b8:7c:3c:96:b2:ac:43:47:70:6f:0e:aa:aa:8d:
                    dd:b0:82:84:d9:cb:4f:f1:0c:14:f2:f4:87:49:16:
                    e3:94:96:4c:dc:98:68:25:56:4c:8e:72:30:ef:36:
                    fd:63:8b:c8:d5:57:9e:6a:73:20:f4:5a:7f:b6:74:
                    4c:37:17:e4:30:ec:61:86:b8:61:9e:d6:33:f1:82:
                    74:28:69:05:d1:8c:1f:b9:35:3e:34:fc:bb:e0:30:
                    fe:01:b4:a7:ab:c2:53:6a:ad:00:22:9a:6c:bd:b4:
                    d0:85:82:13:b7:d5:8d:06:9b:09:42:a7:52:a1:86:
                    7d:c5:e6:f0:1d:e9:51:69:d6:5d:d1:f8:14:19:f0:
                    69:bd:33:33:86:63:a5:76:25:1c:ac:8d:62:d0:22:
                    e2:e2:b3:21:af:3c:04:3c:15:6e:de:aa:4a:6d:18:
                    88:c4:7e:e2:43:f2:46:13:d4:9d:85:e8:4a:98:cb:
                    7b:ef:88:4a:26:fe:fb:00:5b:2c:be:c4:02:11:9b:
                    b8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9F:18:B1:2E:36:08:06:00:4C:18:A1:47:09:E1:E4:D1:4E:75:3E
            X509v3 Authority Key Identifier:
                keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:df:48:70:bb:99:66:42:01:ea:10:76:ed:26:a3:0d:19:5a:
         09:2a:b7:67:40:9e:49:a7:32:c9:72:ee:e4:75:61:b7:90:ee:
         f4:4a:28:36:01:4d:21:68:8c:b8:30:37:51:d4:20:1b:07:26:
         cb:39:40:a2:0c:fa:23:b0:9c:84:db:ca:ef:62:1e:88:8a:dc:
         d1:a4:28:db:8f:3a:6a:2e:82:39:21:ac:e7:ca:9f:e9:88:d5:
         6a:4a:fe:c7:72:ce:77:4c:31:5d:b4:17:df:ca:fc:c6:45:48:
         fd:a5:f9:bf:c1:a4:d0:b7:8a:25:2f:c5:54:5f:3a:dc:25:82:
         26:42:66:e0:85:06:02:d7:9f:36:4a:41:e8:e5:dc:8d:59:2d:
         b9:e3:96:4f:5d:3d:66:e6:25:af:d9:a1:05:70:5b:8b:dc:dc:
         da:eb:4d:ad:d5:a2:81:73:40:31:c2:6c:1f:77:a4:c9:4c:22:
         03:db:a0:4d:95:2c:3c:2f:14:1a:02:c8:07:28:b3:11:e1:49:
         dd:54:9e:b0:80:11:6e:74:89:1b:71:a6:6a:68:7e:46:3a:d6:
         cf:a6:97:62:8b:d9:18:29:89:c5:8b:4f:42:d8:e4:da:61:fb:
         be:cc:4b:9a:9a:b7:61:35:41:f2:dc:45:26:ed:0e:df:f2:3c:
         b6:9a:cd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 16:34:45 2024 by rpki-client on console-fra.rpki-client.org