Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa
File:                     3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa (raw, json)
Hash identifier:          iufvU9WXY20CdKMrsUSpd4+nw6980bHJpglMTJ1ciiA=
Subject key identifier:   7B:70:F0:57:C9:82:6E:D6:52:F7:4C:74:B0:F4:35:A8:9F:70:8C:FC
Certificate issuer:       /CN=569E00BE70FA71DE5510B7D81700C2EB98DAD8C6
Certificate serial:       70E3EC0010F2AB83300B1606E645470DD9256071
Authority key identifier: 56:9E:00:BE:70:FA:71:DE:55:10:B7:D8:17:00:C2:EB:98:DA:D8:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa
Signing time:             Tue 02 Jan 2024 00:00:04 +0000
ROA not before:           Mon 01 Jan 2024 23:55:04 +0000
ROA not after:            Tue 31 Dec 2024 00:00:04 +0000
asID:                     149374
IP address blocks:        103.180.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.crl
                          rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e3:ec:00:10:f2:ab:83:30:0b:16:06:e6:45:47:0d:d9:25:60:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569E00BE70FA71DE5510B7D81700C2EB98DAD8C6
        Validity
            Not Before: Jan  1 23:55:04 2024 GMT
            Not After : Dec 31 00:00:04 2024 GMT
        Subject: CN=7B70F057C9826ED652F74C74B0F435A89F708CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5a:05:e2:3f:16:8e:05:e6:04:86:4b:e8:53:
                    8d:93:70:26:78:cc:06:4a:ea:17:05:60:f7:3d:e5:
                    ae:eb:95:7a:1e:6a:d5:59:31:12:13:c0:d7:11:18:
                    5a:47:ad:be:91:e2:82:8d:91:9d:41:18:ae:60:a4:
                    1e:eb:35:85:05:63:69:47:80:ba:3a:34:73:f5:b0:
                    e0:b9:cc:46:d4:62:33:c0:2b:d1:02:84:d9:50:17:
                    1f:a3:10:21:9d:60:1a:69:7f:02:0e:14:ec:5a:1e:
                    bc:72:6b:ca:ea:87:ee:0c:7b:da:3b:bc:2f:d0:b7:
                    f0:52:e3:79:d6:ec:dc:e9:41:47:08:db:a8:5f:5c:
                    79:8d:38:76:3c:cf:fc:00:43:6a:ad:5d:dc:b6:50:
                    b9:d3:4f:e8:b6:62:b9:d7:c1:44:7a:11:3d:39:e2:
                    94:a3:a2:53:d4:01:0c:f3:94:34:b5:c4:11:64:58:
                    3f:4d:fa:6f:e3:cc:40:fb:bb:3b:be:1a:ef:da:0f:
                    f4:c6:a2:13:4a:ba:21:cd:b2:9c:25:8a:0a:de:ac:
                    34:86:3a:44:4a:30:30:57:09:fa:0b:c0:e3:9a:36:
                    61:0f:3c:64:4e:3c:22:aa:0e:41:bb:c3:14:fc:41:
                    1e:e5:e9:d3:bb:1f:06:cc:e1:b8:42:04:f5:c5:7a:
                    06:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:70:F0:57:C9:82:6E:D6:52:F7:4C:74:B0:F4:35:A8:9F:70:8C:FC
            X509v3 Authority Key Identifier:
                keyid:56:9E:00:BE:70:FA:71:DE:55:10:B7:D8:17:00:C2:EB:98:DA:D8:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:0f:2b:35:78:cf:c8:bd:75:9a:34:0f:77:7c:8f:ee:61:a8:
         cf:48:79:84:52:24:c5:42:a4:da:d8:62:46:38:45:d0:e3:9d:
         e2:4b:a2:86:2d:eb:d4:c7:d4:6e:30:b5:9e:bf:fc:bf:9e:45:
         08:d4:62:79:4d:25:ad:db:89:44:09:96:57:b5:de:fe:f9:23:
         3d:9e:95:3a:ef:e0:50:12:0b:1a:f6:49:d1:dd:e6:cc:f9:6f:
         23:f3:3f:e6:82:2c:a4:ea:ad:f1:bc:3c:48:cb:d8:8c:c6:ad:
         77:d5:e7:28:1d:dd:99:6d:67:33:c4:bb:3f:2e:35:12:55:5e:
         86:c6:45:9a:87:f0:4a:4a:53:12:cd:fe:f8:3c:79:d1:73:46:
         70:40:1b:e8:ab:b2:1a:7c:95:f2:88:56:42:e4:cf:4a:15:6f:
         9f:79:00:82:bd:f0:db:7f:dc:4a:7a:88:66:fd:10:44:9e:c0:
         7d:00:1d:86:aa:5d:ce:27:5a:32:58:64:c8:c8:5b:ed:38:5d:
         77:db:31:e7:0c:b4:92:1f:4c:89:1b:84:47:e1:50:09:f1:fd:
         f7:47:96:94:21:d4:01:81:f1:77:d3:31:d3:60:54:e3:28:1c:
         f1:e7:77:ee:1c:f8:71:46:8a:ff:42:ed:a0:12:63:97:e0:3e:
         b5:4e:80:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:21 2024 by rpki-client on console-fra.rpki-client.org