Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/3130332e39392e32372e302f32342d3234203d3e20313530323739.roa
File:                     3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (raw, json)
Hash identifier:          TWS3+LY0KLUKqYv2VTeRoqleEWrW1ZAEwoPUrLw8C6g=
Subject key identifier:   DA:54:5B:17:9A:44:84:FE:FB:A6:83:FE:DF:13:98:CE:A5:3D:09:71
Certificate issuer:       /CN=E4C33FFA425046D044E7F503AC8065468BAF739E
Certificate serial:       48BDCE239B2762E00836CCE5BE7CDFCABDB94FB8
Authority key identifier: E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/3130332e39392e32372e302f32342d3234203d3e20313530323739.roa
Signing time:             Mon 20 Nov 2023 02:00:02 +0000
ROA not before:           Mon 20 Nov 2023 01:55:02 +0000
ROA not after:            Mon 18 Nov 2024 02:00:02 +0000
asID:                     150279
IP address blocks:        103.99.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl
                          rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 13:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:bd:ce:23:9b:27:62:e0:08:36:cc:e5:be:7c:df:ca:bd:b9:4f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C33FFA425046D044E7F503AC8065468BAF739E
        Validity
            Not Before: Nov 20 01:55:02 2023 GMT
            Not After : Nov 18 02:00:02 2024 GMT
        Subject: CN=DA545B179A4484FEFBA683FEDF1398CEA53D0971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:fd:c4:b0:2d:67:01:5f:25:32:a8:8d:41:
                    91:6b:08:71:57:bc:62:31:a0:51:cb:36:ac:af:84:
                    c8:fa:19:7a:e5:5d:ef:9c:60:62:9c:1d:37:a0:83:
                    9c:7a:a2:86:17:21:a5:1f:3f:e1:94:88:5c:fe:29:
                    e5:47:e0:c0:64:cd:cf:d1:59:0c:97:78:8a:1c:41:
                    03:3c:1e:5f:39:2d:2a:00:fa:08:88:0d:9e:73:ef:
                    fd:a2:3d:31:a2:50:da:2a:a5:fd:a6:43:22:92:9f:
                    d8:40:fa:be:a0:18:7f:18:2a:02:2e:5a:50:e8:37:
                    37:1a:07:d3:b3:f9:1d:7b:69:6a:b5:15:40:32:3b:
                    71:46:30:3c:77:28:ef:c0:8b:35:bc:43:50:28:43:
                    67:03:af:86:64:4d:3b:10:60:a1:2e:08:28:8d:7d:
                    be:47:15:3a:fc:18:4c:02:7c:9e:05:a0:85:ac:fd:
                    d5:c9:ed:79:2c:c7:8b:3c:ee:04:7c:72:6f:16:79:
                    39:a0:09:d0:61:3d:c6:88:e0:01:36:0d:a9:79:d6:
                    e6:2b:98:98:5d:41:62:f9:6a:84:69:79:33:20:db:
                    4c:c5:41:a0:7a:4f:89:ba:5f:ec:e3:b0:82:82:41:
                    62:1d:1d:2c:88:48:b2:f8:c6:46:64:9a:11:53:28:
                    0b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:54:5B:17:9A:44:84:FE:FB:A6:83:FE:DF:13:98:CE:A5:3D:09:71
            X509v3 Authority Key Identifier:
                keyid:E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/3130332e39392e32372e302f32342d3234203d3e20313530323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:e0:1f:d3:1e:ec:52:e5:40:43:18:d0:6b:4f:e7:d6:b7:25:
         2e:7c:51:a7:a3:b9:8c:11:cf:64:a5:02:06:a4:14:af:71:49:
         61:8b:3a:33:d8:5f:9c:13:ea:a3:96:66:9e:dc:45:dd:ba:73:
         a4:44:e9:d8:f6:fb:af:e5:f2:64:b8:28:68:9a:f9:1f:12:13:
         96:8f:0c:cb:95:1d:5b:16:c8:a5:87:f2:2b:33:e5:36:fc:05:
         7c:88:61:48:21:fe:aa:63:a1:c3:31:3c:fd:66:65:d9:78:28:
         71:c9:29:db:e6:fa:7c:6e:12:f6:80:e0:f7:d3:7c:ff:9b:5f:
         a3:3c:54:07:49:29:03:b6:53:db:74:4e:68:df:7a:e0:68:9c:
         c9:28:9a:38:66:22:8c:c5:77:7b:0d:64:0f:31:5d:7b:77:80:
         27:39:99:96:4c:d2:ae:ff:40:aa:20:6b:1e:fa:97:6e:9f:ee:
         bf:ef:30:fb:27:9d:3e:38:53:24:61:29:aa:81:b5:75:8b:f8:
         07:e1:8d:e8:bc:11:fc:b8:83:82:74:b9:df:eb:18:51:cf:3a:
         b2:e1:38:b8:e1:31:1f:07:de:ac:df:1a:12:e4:03:cf:04:a3:
         87:c6:fa:12:56:3a:84:25:69:48:ea:52:8b:73:1c:51:47:46:
         14:85:28:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 11:44:11 2024 by rpki-client on console-fra.rpki-client.org