Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa
File:                     3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (raw, json)
Hash identifier:          BJOYnvd1kI93LqXvD5Dizkqb0Y5tIFm/8WJ0xqjG4RE=
Subject key identifier:   93:B2:ED:01:8B:59:95:33:BC:6D:79:61:83:FC:C2:46:DC:15:01:FF
Certificate issuer:       /CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E
Certificate serial:       4662A2FC1F011F7AEEDE95012E95FA073953AE91
Authority key identifier: A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa
Signing time:             Mon 20 May 2024 07:00:01 +0000
ROA not before:           Mon 20 May 2024 06:55:01 +0000
ROA not after:            Mon 19 May 2025 07:00:01 +0000
asID:                     149412
IP address blocks:        103.191.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl
                          rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:62:a2:fc:1f:01:1f:7a:ee:de:95:01:2e:95:fa:07:39:53:ae:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E
        Validity
            Not Before: May 20 06:55:01 2024 GMT
            Not After : May 19 07:00:01 2025 GMT
        Subject: CN=93B2ED018B599533BC6D796183FCC246DC1501FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:64:3a:c2:a2:06:d1:39:8b:f9:8e:94:fb:88:
                    02:60:9c:f2:54:28:51:9a:92:f6:c1:0f:ad:5a:6a:
                    fb:49:e4:a4:96:dc:18:d3:01:82:39:94:67:10:d3:
                    76:fe:9f:18:18:e8:69:4e:2d:72:98:1b:b0:3f:91:
                    12:3c:ce:c5:90:a4:b0:e0:5a:a3:af:4a:3c:4e:d4:
                    72:5d:cd:1b:8c:bb:7c:f3:89:b5:6b:85:65:9e:6f:
                    9c:a5:fb:bd:a6:f5:20:a7:8c:9f:f6:0b:02:de:7b:
                    46:fa:18:04:6c:bc:44:d8:6a:ab:c8:2c:95:42:4e:
                    49:5a:94:e1:c6:26:d7:dd:d7:3a:93:76:86:7e:a8:
                    ca:a6:88:ec:ba:50:83:f6:03:71:fb:53:0f:0e:80:
                    48:2d:e1:0e:15:71:50:a5:42:a3:35:7c:e1:b9:9a:
                    7f:4a:96:71:07:57:06:b8:5c:b1:c9:9e:97:5f:b6:
                    39:1c:40:30:ed:b1:0e:6f:63:02:fa:c6:9a:88:f3:
                    aa:ae:a1:8e:55:f7:fa:46:db:85:51:31:bf:e0:03:
                    71:17:69:f6:38:6d:9b:0b:bb:55:60:30:c1:70:b6:
                    6d:11:73:f8:a0:e9:59:00:a8:55:eb:f3:93:a4:ce:
                    7b:35:83:b9:58:c5:0a:c2:4f:e9:05:bf:21:d3:92:
                    c9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B2:ED:01:8B:59:95:33:BC:6D:79:61:83:FC:C2:46:DC:15:01:FF
            X509v3 Authority Key Identifier:
                keyid:A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:bc:7f:8e:23:e6:56:53:0a:01:36:63:c9:ed:d2:09:ee:00:
         f6:ed:41:89:c9:f6:ff:45:42:99:65:a8:69:56:1b:e1:3c:f8:
         34:fd:19:b9:64:4c:c8:78:3a:1c:ed:cc:a2:76:3d:d4:17:02:
         9a:fe:cc:4d:8d:68:bb:09:1f:32:94:4b:41:93:ee:0f:ef:a9:
         cc:81:5e:0c:6a:cd:2a:2e:0c:25:f4:27:24:ea:59:bc:0e:d6:
         36:bd:f3:bd:86:05:f1:98:63:0a:ee:d2:52:e6:84:89:3c:60:
         0c:ba:08:e7:0d:01:e7:16:ba:01:7c:08:f5:d8:36:07:a9:f4:
         b7:e3:fb:94:72:41:44:e4:b7:3c:5b:c6:cf:25:90:e1:13:84:
         d1:14:9e:a8:ae:d5:51:29:2c:29:84:37:8f:83:58:2f:9f:dd:
         ef:b8:07:e9:e1:ca:22:34:71:11:3a:74:c9:93:d8:e5:f1:18:
         45:14:44:5a:db:d8:3a:4d:8e:d1:e8:d0:a3:f3:33:61:4f:52:
         e1:3a:a3:3d:c1:99:05:e9:ff:28:0e:88:07:8e:f3:09:99:97:
         52:1d:ca:06:33:d3:d3:e7:dc:d3:10:76:ff:47:59:1a:14:8d:
         f7:58:cc:2c:d3:e5:a3:a3:1d:43:a5:97:54:76:70:19:bb:93:
         95:b8:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:52:56 2024 by rpki-client on console-ams.rpki-client.org