Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa
File:                     3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa (raw, json)
Hash identifier:          o8PvJ8AMYKvkSxiHZFm3Ak0o0pEpkJQBsCIo8IhdcV8=
Subject key identifier:   68:F9:F6:11:15:0B:AA:D0:99:43:00:81:76:69:43:62:90:9D:32:4E
Certificate issuer:       /CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6
Certificate serial:       28A2201266B1C6283DEF10E9096714655DF66B79
Authority key identifier: 7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa
Signing time:             Tue 29 Oct 2024 06:00:00 +0000
ROA not before:           Tue 29 Oct 2024 05:55:00 +0000
ROA not after:            Tue 28 Oct 2025 06:00:00 +0000
asID:                     139369
IP address blocks:        103.142.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl
                          rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a2:20:12:66:b1:c6:28:3d:ef:10:e9:09:67:14:65:5d:f6:6b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6
        Validity
            Not Before: Oct 29 05:55:00 2024 GMT
            Not After : Oct 28 06:00:00 2025 GMT
        Subject: CN=68F9F611150BAAD09943008176694362909D324E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3f:23:f7:14:6a:c3:b0:ae:3a:35:87:d4:a4:
                    55:fe:2f:30:70:d7:fe:e3:f2:44:96:f3:70:45:c5:
                    e4:79:95:5e:68:93:91:f7:3d:6b:31:03:ca:1f:3c:
                    3c:3a:6d:b6:9a:07:2b:1d:d0:8b:c3:bc:53:a9:66:
                    37:bd:83:35:57:e4:00:02:2c:c9:4f:9d:eb:45:3e:
                    e3:0c:2c:cd:8a:6e:c0:6c:40:6f:d4:19:4d:42:74:
                    71:5a:81:88:9b:6c:8a:ee:b0:a4:d2:8c:3f:02:51:
                    46:1d:bc:4c:6a:0c:74:c9:f0:42:8d:c4:ac:ae:ab:
                    25:51:68:56:d6:fb:21:41:6b:34:02:97:b6:22:0d:
                    3a:b3:25:95:08:81:3c:c8:63:fc:eb:e3:72:14:96:
                    44:2c:ba:c0:ec:3b:d6:61:5e:37:a7:21:ea:79:96:
                    f6:be:75:61:ee:ce:85:38:8b:ae:ff:d4:4b:df:e1:
                    2f:52:57:c5:67:9e:04:54:ca:60:64:e4:f9:d7:61:
                    3b:55:97:68:6c:a7:b3:99:6e:ae:32:f4:29:83:43:
                    20:1c:6c:5f:3f:62:2f:84:f9:5d:8c:8b:77:50:81:
                    74:37:d4:79:89:d4:aa:24:9b:1a:5d:08:fa:36:5b:
                    bc:d7:15:3c:9a:bb:ae:2e:b8:f9:7e:98:89:5c:57:
                    af:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F9:F6:11:15:0B:AA:D0:99:43:00:81:76:69:43:62:90:9D:32:4E
            X509v3 Authority Key Identifier:
                keyid:7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:28:0f:f5:84:59:46:82:4b:cc:7d:9d:e2:7a:86:69:cd:19:
         bd:ea:47:82:2c:93:f2:54:6f:32:6a:96:ac:5c:89:51:3f:15:
         91:33:88:d0:89:c4:5b:5d:ee:61:6f:30:bb:a1:43:7f:a2:10:
         d6:73:ae:8e:c7:6c:89:5b:70:38:7c:8e:0d:75:d6:f6:b4:f6:
         a0:02:5a:2c:f8:17:ef:81:b5:6a:10:ae:e6:ac:a1:83:44:b8:
         be:06:6b:07:9b:aa:c8:4d:4a:09:45:7f:62:27:d7:0c:cf:16:
         03:8f:da:c4:1b:1f:f2:6d:01:08:9e:a2:6a:71:1f:6f:85:68:
         6f:dc:1e:0f:49:a6:f7:6e:04:4f:0a:10:c2:c8:68:61:cd:d1:
         e6:0b:b6:ba:97:7f:67:53:46:77:91:e8:e6:a7:1d:ed:07:30:
         fb:42:fd:db:60:d9:2f:dd:57:8d:b8:0a:27:91:12:98:5f:73:
         c7:00:c2:73:e9:2b:cf:9d:d2:cc:8c:9d:ac:5d:e3:b9:06:c3:
         1e:33:e9:7e:97:8e:ec:ae:91:55:8f:c1:b0:36:35:31:9a:ca:
         86:10:f7:0b:a8:61:a7:c6:a6:43:c1:f4:65:94:38:85:a7:01:
         a2:94:43:a5:f1:1d:82:c0:87:d8:14:19:9f:13:2e:7e:71:24:
         1e:42:c5:ac
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUKKIgEmaxxig97xDpCWcUZV32a3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ExRDE5MkQ2NUI3RUVBREM0NkFCNDQ1MjA4Q0MyMjRE
Q0U5NzRCNjAeFw0yNDEwMjkwNTU1MDBaFw0yNTEwMjgwNjAwMDBaMDMxMTAvBgNV
BAMTKDY4RjlGNjExMTUwQkFBRDA5OTQzMDA4MTc2Njk0MzYyOTA5RDMyNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiPyP3FGrDsK46NYfUpFX+LzBw
1/7j8kSW83BFxeR5lV5ok5H3PWsxA8ofPDw6bbaaBysd0IvDvFOpZje9gzVX5AAC
LMlPnetFPuMMLM2KbsBsQG/UGU1CdHFagYibbIrusKTSjD8CUUYdvExqDHTJ8EKN
xKyuqyVRaFbW+yFBazQCl7YiDTqzJZUIgTzIY/zr43IUlkQsusDsO9ZhXjenIep5
lva+dWHuzoU4i67/1Evf4S9SV8VnngRUymBk5PnXYTtVl2hsp7OZbq4y9CmDQyAc
bF8/Yi+E+V2Mi3dQgXQ31HmJ1KokmxpdCPo2W7zXFTyau64uuPl+mIlcV69lAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUaPn2ERULqtCZQwCBdmlDYpCdMk4wHwYDVR0j
BBgwFoAUeh0ZLWW37q3EarRFIIzCJNzpdLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NzFiZjk4MC0yNGRhLTQ4NjUtYTk4OS0yZDQ0ODllM2E1MDUvMC83QTFEMTkyRDY1
QjdFRUFEQzQ2QUI0NDUyMDhDQzIyNERDRTk3NEI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0ExRDE5MkQ2NUI3RUVBREM0NkFCNDQ1MjA4Q0MyMjREQ0U5
NzRCNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U3MWJmOTgwLTI0ZGEtNDg2NS1h
OTg5LTJkNDQ4OWUzYTUwNS8wLzMxMzAzMzJlMzEzNDMyMmUzNjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ449MA0GCSqG
SIb3DQEBCwUAA4IBAQBWKA/1hFlGgkvMfZ3ieoZpzRm96keCLJPyVG8yapasXIlR
PxWRM4jQicRbXe5hbzC7oUN/ohDWc66Ox2yJW3A4fI4Nddb2tPagAlos+BfvgbVq
EK7mrKGDRLi+BmsHm6rITUoJRX9iJ9cMzxYDj9rEGx/ybQEInqJqcR9vhWhv3B4P
Sab3bgRPChDCyGhhzdHmC7a6l39nU0Z3kejmpx3tBzD7Qv3bYNkv3VeNuAonkRKY
X3PHAMJz6SvPndLMjJ2sXeO5BsMeM+l+l47srpFVj8GwNjUxmsqGEPcLqGGnxqZD
wfRllDiFpwGilEOl8R2CwIfYFBmfEy5+cSQeQsWs
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:27 2024 by rpki-client on console-ams.rpki-client.org