Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa
File:                     3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa (raw, json)
Hash identifier:          2T3B+WlxteLj6OogHAOLwZBUdlPJwilxf6sGLSkZU2M=
Subject key identifier:   FE:60:9F:A1:9D:2E:0F:10:13:33:90:D5:07:07:EF:EB:15:BB:C0:15
Certificate issuer:       /CN=9F93097BE8B711227435ABF870C332F631C8D769
Certificate serial:       282D61149E86D6794DEC6E17BFBA50C3B897B543
Authority key identifier: 9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa
Signing time:             Mon 19 Aug 2024 10:18:25 +0000
ROA not before:           Mon 19 Aug 2024 10:13:25 +0000
ROA not after:            Mon 18 Aug 2025 10:18:25 +0000
asID:                     151010
IP address blocks:        103.215.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl
                          rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2d:61:14:9e:86:d6:79:4d:ec:6e:17:bf:ba:50:c3:b8:97:b5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F93097BE8B711227435ABF870C332F631C8D769
        Validity
            Not Before: Aug 19 10:13:25 2024 GMT
            Not After : Aug 18 10:18:25 2025 GMT
        Subject: CN=FE609FA19D2E0F10133390D50707EFEB15BBC015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dc:f0:6a:2f:be:2e:68:60:cd:7a:ac:e4:7f:
                    30:4a:64:b7:52:df:9b:89:d9:ff:fe:ff:db:59:77:
                    df:a1:55:4d:0a:f1:3b:e8:cd:3a:9d:86:36:ae:94:
                    bd:12:5f:ce:de:e2:a8:b1:ac:89:6d:28:0d:f8:1f:
                    12:80:11:4c:8e:52:06:20:c3:be:74:a5:72:99:00:
                    5f:38:8a:33:26:f0:39:e0:a9:99:bc:b6:7c:c1:1b:
                    d6:34:ba:fc:f0:32:76:fa:21:85:69:f7:20:09:ac:
                    c6:69:83:50:f0:fc:6e:ae:2b:8d:9d:ea:7b:3c:b2:
                    2e:3f:8e:e6:e3:55:42:5c:89:df:18:06:a5:b8:11:
                    2e:f6:19:d6:9e:6f:5a:54:9c:7f:d6:7e:e9:9d:c2:
                    ec:ee:d7:a3:b7:25:df:31:9c:d9:53:67:4d:73:88:
                    9c:41:ce:98:a5:19:05:a2:54:8a:fa:0e:a5:53:b6:
                    14:25:51:46:90:71:de:09:09:7e:0e:59:b9:d7:d1:
                    60:64:14:47:be:6e:e3:7e:42:db:f6:21:f0:b2:60:
                    fb:61:ae:ad:e0:56:15:8d:89:9e:98:ef:13:81:c0:
                    bb:6a:96:ed:64:f8:c9:82:45:58:c2:ad:a7:ed:a8:
                    9a:c3:9d:68:08:4a:34:9a:1a:d9:c1:45:08:89:0a:
                    15:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:60:9F:A1:9D:2E:0F:10:13:33:90:D5:07:07:EF:EB:15:BB:C0:15
            X509v3 Authority Key Identifier:
                keyid:9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:1e:39:a2:8a:54:f2:0b:c7:e5:b1:ed:21:42:7f:c9:34:7f:
         92:c3:fc:41:e2:a3:85:60:93:fa:02:44:79:f1:d3:95:4a:4d:
         5b:a6:e6:59:33:bc:02:78:22:af:1f:1b:50:1e:d6:82:28:d5:
         f4:76:a9:29:4e:64:da:28:a6:b8:bc:9e:7c:e6:24:82:4f:ce:
         4f:7c:55:4f:36:81:53:17:a6:91:cf:68:5f:3d:f6:fa:ff:01:
         bc:c9:9a:57:b8:c9:65:cc:b4:61:b7:56:3b:7a:66:97:26:7d:
         df:14:20:a7:10:b5:21:2f:d5:6a:41:20:3d:70:b0:55:6b:5a:
         2f:23:2e:77:9b:0c:fc:0d:ab:31:27:98:f3:ab:71:e4:76:51:
         49:77:57:b9:5c:8f:10:81:bb:29:1e:81:b4:0a:53:d4:cc:ed:
         38:46:62:a9:80:a5:c8:88:bc:80:17:4a:21:1b:ed:ce:ec:78:
         c4:0c:d4:80:fa:e7:2e:70:2b:d2:a0:6e:92:23:2d:88:f7:e8:
         39:35:c5:55:c6:20:1a:fa:f4:07:09:37:28:29:a4:27:51:14:
         2d:52:d4:12:08:0c:0f:8a:93:c5:92:69:c8:7c:a1:10:de:ad:
         f6:0f:16:bc:19:64:ae:9b:f6:5f:72:80:ed:b6:38:f9:7c:39:
         99:c1:08:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:43:11 2024 by rpki-client on console-ams.rpki-client.org