Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa
File:                     3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (raw, json)
Hash identifier:          1tVKx7/x8tjIRFdaPD/wHOMmvT+lZVERPE2ORa2vntU=
Subject key identifier:   7E:AC:0A:1B:A8:26:7C:82:EF:36:2C:EF:E3:5A:CF:83:F9:06:9F:2B
Certificate issuer:       /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70
Certificate serial:       30358E835364626F25E872555571F1655A07737F
Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa
Signing time:             Thu 14 Dec 2023 05:48:57 +0000
ROA not before:           Thu 14 Dec 2023 05:43:57 +0000
ROA not after:            Thu 12 Dec 2024 05:48:57 +0000
asID:                     151526
IP address blocks:        103.249.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl
                          rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:35:8e:83:53:64:62:6f:25:e8:72:55:55:71:f1:65:5a:07:73:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70
        Validity
            Not Before: Dec 14 05:43:57 2023 GMT
            Not After : Dec 12 05:48:57 2024 GMT
        Subject: CN=7EAC0A1BA8267C82EF362CEFE35ACF83F9069F2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:47:8b:9d:c8:c3:a4:a4:31:6d:db:13:01:cc:
                    41:07:db:12:25:4e:f8:29:75:81:7d:c8:68:0b:18:
                    90:82:21:68:35:84:53:c2:6b:d2:5a:d8:00:94:21:
                    de:80:3a:e3:76:69:af:1d:29:54:28:0c:d7:53:2a:
                    92:c2:a2:d4:16:49:c2:71:34:06:97:7d:81:2a:12:
                    1a:bb:01:eb:6b:06:fe:8c:53:18:de:fa:7c:13:0d:
                    26:a2:7d:85:98:13:df:27:4a:ca:b3:1e:14:bb:71:
                    ea:47:40:88:07:62:1b:0f:f0:f1:88:87:5c:41:9d:
                    78:b3:e9:03:5a:22:80:9e:7b:fe:11:4d:40:0e:23:
                    e7:1c:d6:e5:41:48:a7:5f:e5:06:57:f3:6c:48:6d:
                    e3:94:f9:a2:c1:ab:96:34:3f:b4:9e:af:05:b0:12:
                    01:74:7f:aa:ec:13:7b:ce:57:3e:d5:7f:30:ed:ff:
                    e4:dc:56:e6:89:b4:f0:d0:f4:a6:63:17:fd:34:a3:
                    73:c1:cc:84:6e:22:75:94:4d:d3:2e:60:cd:75:33:
                    13:de:87:c3:3a:f5:b4:48:53:a9:01:59:f7:b1:c5:
                    83:5a:27:3e:90:bb:60:94:fb:87:6a:7e:7e:39:09:
                    0f:e7:f4:ea:a6:bb:da:62:f6:ef:71:fe:70:ac:98:
                    a9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AC:0A:1B:A8:26:7C:82:EF:36:2C:EF:E3:5A:CF:83:F9:06:9F:2B
            X509v3 Authority Key Identifier:
                keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.249.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:31:d4:24:9e:f7:dc:cd:0a:79:3c:db:ed:48:dd:8f:29:4d:
         2c:74:26:d4:37:79:6c:61:28:57:5d:15:f8:ef:61:70:cd:38:
         75:50:d0:a8:55:ae:c3:71:8c:e7:51:56:91:0a:20:12:92:34:
         44:68:57:3e:b3:b3:8e:90:90:ee:4a:c0:90:79:77:52:43:e6:
         d5:c0:f3:e4:3c:18:e2:34:65:f5:fd:08:25:a2:23:bf:8a:62:
         68:a4:3a:69:0d:81:02:f4:a9:86:48:34:3e:49:15:b2:28:c3:
         19:a3:99:3b:a6:de:f1:64:88:69:36:03:ec:6c:76:4b:63:4b:
         8c:61:db:a0:dc:3f:3d:f9:31:7a:df:98:b1:b2:a0:0b:9c:93:
         c4:39:aa:a8:b5:0a:8e:d7:14:12:26:86:5a:7d:14:13:11:48:
         ed:15:7e:ee:fd:7c:b0:c4:f6:c4:f7:2d:f2:28:2c:a1:d9:98:
         5f:df:c6:8e:d8:a5:93:96:7c:12:dc:44:11:53:8b:3e:9c:d6:
         c9:1d:51:5c:74:a3:ef:57:99:5e:d9:df:ee:e7:e9:c9:c3:6f:
         2b:2b:1b:a3:34:5a:f1:bf:bb:d4:34:30:18:9b:71:6f:22:dc:
         4c:7d:cf:7b:2d:bb:e2:4f:0c:58:92:56:ec:d6:c3:04:ce:9e:
         d1:65:e9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:14:18 2024 by rpki-client on console-ams.rpki-client.org