Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa
File:                     3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa (raw, json)
Hash identifier:          BmedSLLZ/Ar+kKVmJ8+lQwWqOCXWS7bTElyxdgv4frU=
Subject key identifier:   F1:8E:D0:0D:9A:35:96:E0:15:49:CE:04:E0:90:B6:BB:82:A3:1A:BB
Certificate issuer:       /CN=9F93097BE8B711227435ABF870C332F631C8D769
Certificate serial:       46890D88C6059BE9E9261356E9B532B5595BCFF8
Authority key identifier: 9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa
Signing time:             Mon 19 Aug 2024 10:18:42 +0000
ROA not before:           Mon 19 Aug 2024 10:13:42 +0000
ROA not after:            Mon 18 Aug 2025 10:18:42 +0000
asID:                     151010
IP address blocks:        103.215.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl
                          rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:89:0d:88:c6:05:9b:e9:e9:26:13:56:e9:b5:32:b5:59:5b:cf:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F93097BE8B711227435ABF870C332F631C8D769
        Validity
            Not Before: Aug 19 10:13:42 2024 GMT
            Not After : Aug 18 10:18:42 2025 GMT
        Subject: CN=F18ED00D9A3596E01549CE04E090B6BB82A31ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f2:91:79:66:e4:fd:f8:bf:ad:d0:fd:67:03:
                    2d:f5:e5:f3:d9:d1:46:59:ba:d3:02:3f:18:aa:8d:
                    79:00:19:ac:f6:8b:b8:21:14:22:95:0e:85:be:b2:
                    a2:36:36:a1:d1:1b:3f:41:16:26:6d:5c:55:06:b9:
                    3b:c2:28:6f:b6:ba:4f:8d:25:d3:5c:f7:5e:d4:97:
                    57:0b:10:a9:3f:df:ec:58:c0:c2:df:a8:5b:5d:5d:
                    c8:d1:85:9c:a2:d5:ae:ec:26:08:c1:b3:77:c9:e6:
                    ca:b3:53:34:37:70:b7:5f:95:ab:d7:b7:e0:72:38:
                    e6:4f:ee:da:bb:11:02:02:df:65:bd:e0:97:5a:7a:
                    d7:10:17:fe:7d:36:33:29:cf:4c:07:46:3d:c1:d4:
                    60:6d:49:0c:a6:b3:98:e8:07:ba:8d:a8:2b:bf:2e:
                    9e:c7:e5:56:04:b6:92:9e:20:73:15:16:78:0e:f8:
                    c4:84:1a:92:d4:17:02:85:04:b2:8a:81:2b:28:2c:
                    df:13:df:3f:16:40:fb:fd:e3:e4:11:a6:0b:81:01:
                    9a:07:db:75:f2:ca:30:88:9a:ff:8e:f7:73:79:8f:
                    18:ac:c0:b9:5d:bd:59:ff:08:fa:f4:8b:67:65:8d:
                    f4:dc:9b:8c:5c:10:08:87:6f:00:a6:8a:5d:ee:83:
                    00:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8E:D0:0D:9A:35:96:E0:15:49:CE:04:E0:90:B6:BB:82:A3:1A:BB
            X509v3 Authority Key Identifier:
                keyid:9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:c9:7d:a9:ba:bc:15:a4:26:cb:92:b5:10:54:4b:2c:47:ac:
         0e:38:a2:1b:e7:76:c6:48:2a:f2:5f:73:de:55:20:0b:2f:4b:
         b2:2e:20:9d:f2:0b:5b:71:75:9d:39:fc:13:74:9b:87:0c:68:
         89:56:ec:6b:0a:cf:df:49:f3:38:57:72:d9:f0:ed:0e:e1:90:
         fe:2a:26:06:2d:23:aa:dd:73:b0:90:f9:54:37:a8:ae:68:59:
         29:7d:34:72:8c:de:88:0d:2b:d3:73:8d:42:f2:cf:45:4f:53:
         22:06:44:d8:fc:8a:ff:ab:65:84:35:fb:43:77:3d:a5:70:b7:
         e5:13:ee:fb:fb:8c:ae:ab:fe:28:0a:4a:2c:23:8f:28:d8:b6:
         96:58:c9:4f:7d:30:4a:b2:b4:9f:7a:b5:64:0f:e0:84:16:e7:
         44:ab:39:b3:7b:2c:f5:10:d4:e5:b7:72:d8:68:4b:ad:ad:81:
         6e:27:7e:65:22:6c:98:9d:ba:0e:a0:a4:23:28:a3:48:15:51:
         22:78:be:e1:88:16:9c:b7:a9:da:05:95:b6:d0:2e:e0:b4:e4:
         5a:a1:83:3e:98:9f:51:2a:4e:eb:99:94:02:11:9b:ec:ad:fd:
         aa:c0:22:53:be:9d:64:11:76:89:a5:20:4d:25:57:3e:4f:14:
         13:3a:32:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:57:50 2024 by rpki-client on console-fra.rpki-client.org