Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa
File:                     3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa (raw, json)
Hash identifier:          yu8z55+Tr/+kJKakk3Vmp/sSKFGPsRRjeFUSIw8Az4o=
Subject key identifier:   C3:01:D2:86:94:6D:CA:C1:BC:B8:C8:1B:05:1E:2C:EA:83:98:F5:57
Certificate issuer:       /CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE
Certificate serial:       14692C6AE8E503A60F739519EECFF969DB21ECB9
Authority key identifier: 42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa
Signing time:             Tue 17 Sep 2024 18:53:17 +0000
ROA not before:           Tue 17 Sep 2024 18:48:17 +0000
ROA not after:            Tue 16 Sep 2025 18:53:17 +0000
asID:                     141139
IP address blocks:        103.159.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl
                          rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:69:2c:6a:e8:e5:03:a6:0f:73:95:19:ee:cf:f9:69:db:21:ec:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE
        Validity
            Not Before: Sep 17 18:48:17 2024 GMT
            Not After : Sep 16 18:53:17 2025 GMT
        Subject: CN=C301D286946DCAC1BCB8C81B051E2CEA8398F557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a9:0d:24:d7:ab:12:7b:0c:b9:33:9c:3f:30:
                    13:e1:c9:12:d8:ad:a7:ad:53:9b:4a:fb:a2:b7:6d:
                    9d:70:51:fd:3d:56:6a:06:a8:27:e9:af:bd:ce:16:
                    a9:fb:19:59:b3:d0:3e:77:43:e3:c7:06:3d:a3:36:
                    4a:83:fc:9c:be:0f:5c:c4:0c:d6:8e:fb:ee:2a:f0:
                    b5:e4:03:55:b9:ab:37:32:b4:0b:00:80:a0:7f:cd:
                    2c:dd:81:d1:e5:1f:33:e1:bb:65:01:ee:59:ce:1b:
                    c7:c0:4d:66:bc:79:b2:13:6a:e7:3c:9c:52:2c:1e:
                    01:89:b8:12:49:17:78:1d:95:5e:2c:e8:e4:d5:1b:
                    ca:89:47:53:81:07:a3:95:32:a9:3e:d4:fb:8a:27:
                    e9:0c:0f:6b:be:61:41:fa:f5:a5:e5:f7:bf:fb:be:
                    41:74:31:41:6d:ec:2d:e1:f8:2e:a1:ea:87:e9:ed:
                    02:87:b7:d4:19:58:c3:30:b1:e9:79:6a:01:3c:7d:
                    8c:1e:77:35:46:cf:36:8b:37:19:59:d5:30:cb:e8:
                    c2:f0:bf:6a:15:91:07:81:9e:79:3b:08:f1:71:97:
                    e3:97:0f:ff:e0:03:69:94:c3:d3:05:9a:ac:11:d4:
                    fb:a8:ee:e8:18:af:60:c0:59:13:3c:89:b8:d3:6a:
                    07:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:01:D2:86:94:6D:CA:C1:BC:B8:C8:1B:05:1E:2C:EA:83:98:F5:57
            X509v3 Authority Key Identifier:
                keyid:42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:6b:6d:e1:10:93:61:94:99:c9:aa:9f:44:62:a0:f6:47:51:
         42:a0:49:93:46:7f:51:02:5e:b9:62:d1:4d:01:0a:d5:7e:90:
         7a:8f:ff:63:eb:d0:cf:1d:fa:a9:3e:8c:19:04:71:67:a6:66:
         60:d5:6f:02:e9:cb:56:00:69:8c:d5:07:84:5c:13:0a:8e:17:
         77:04:b4:a6:34:db:5a:e8:91:38:39:74:4d:30:a2:e4:2d:c2:
         b8:73:2e:3b:30:32:58:19:50:e8:5d:53:1d:f0:3b:a0:90:6c:
         cd:1c:1a:fe:b6:f7:78:37:f1:3f:d7:54:67:d7:5a:8f:8a:36:
         98:e4:ce:0b:2c:9c:e0:c1:77:08:5c:f4:f6:49:28:52:9d:85:
         8f:ae:9b:dc:64:66:07:4b:ce:b6:76:14:59:71:0d:b1:5e:f2:
         77:49:99:e2:e6:aa:dc:dd:2d:ea:4c:87:56:75:5a:c0:b6:ca:
         bd:ea:3a:69:4f:92:0e:8e:ed:dd:1e:64:da:c7:f4:4e:1a:4d:
         0f:0a:11:80:e5:6c:6e:a0:74:40:8d:6c:ae:2b:e1:0e:d5:c8:
         50:4f:33:53:40:32:f4:b0:15:40:88:05:b7:fa:dc:ae:30:e8:
         d1:e3:a7:57:ec:db:39:63:47:2d:43:26:01:a3:4d:11:5c:13:
         20:58:f3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org