Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa
File:                     3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (raw, json)
Hash identifier:          MoifL42JTELDVyEuGn1fvbQyggTFe2LY0cwYwsSQe5I=
Subject key identifier:   B5:E9:B0:93:86:FE:69:93:35:58:D8:98:70:20:53:5A:FF:68:12:89
Certificate issuer:       /CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD
Certificate serial:       130AC32A98142384C04E267CB12E2A1530D80CA6
Authority key identifier: 00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa
Signing time:             Thu 28 Dec 2023 08:00:00 +0000
ROA not before:           Thu 28 Dec 2023 07:55:00 +0000
ROA not after:            Thu 26 Dec 2024 08:00:00 +0000
asID:                     141934
IP address blocks:        103.166.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl
                          rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:0a:c3:2a:98:14:23:84:c0:4e:26:7c:b1:2e:2a:15:30:d8:0c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD
        Validity
            Not Before: Dec 28 07:55:00 2023 GMT
            Not After : Dec 26 08:00:00 2024 GMT
        Subject: CN=B5E9B09386FE69933558D8987020535AFF681289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6b:eb:1b:21:04:d5:61:8f:2e:d8:6d:27:ae:
                    d2:91:34:ce:fc:4a:42:14:19:bd:6b:b8:1d:62:50:
                    50:c6:fe:8e:cf:64:fe:36:ea:29:4d:82:b4:f6:6e:
                    0c:42:40:13:08:46:a0:b9:8a:65:e0:20:26:5f:7a:
                    7f:60:4d:64:1b:ad:8d:63:9a:26:b7:46:57:57:e6:
                    b0:c8:d1:3b:fd:ec:51:4f:f8:e8:13:ef:fc:9b:d5:
                    e0:78:f3:5c:88:73:06:69:32:00:31:1a:fd:62:8f:
                    d3:3f:7e:7d:b1:eb:f2:c9:8b:5b:4b:78:c0:bc:44:
                    01:25:2c:40:6c:13:c9:10:9b:de:89:00:3b:7a:bf:
                    52:b5:8c:03:1b:3b:04:51:47:ab:5b:72:2e:3d:6d:
                    95:34:5b:d3:c3:e7:da:d5:52:60:eb:37:20:65:35:
                    12:1b:c5:17:f4:1d:36:f2:8f:22:26:75:e8:14:8b:
                    5f:fb:55:3c:3d:f3:b5:d0:c2:33:4d:a4:80:08:cf:
                    d3:87:24:b5:0b:db:2c:ea:ea:09:ee:5f:67:1f:60:
                    24:9d:54:2b:bb:ed:51:72:9e:13:e9:5e:c1:8c:c7:
                    04:d0:2f:b6:72:59:0a:85:c2:4b:40:c8:a8:fa:80:
                    e0:26:5e:58:a0:e4:61:45:68:50:3a:76:07:fb:c8:
                    95:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E9:B0:93:86:FE:69:93:35:58:D8:98:70:20:53:5A:FF:68:12:89
            X509v3 Authority Key Identifier:
                keyid:00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:2f:87:ec:d4:b0:c6:f1:71:5d:d1:09:21:ac:2f:f3:14:af:
         cd:ce:2d:a5:a4:1b:ca:bd:e1:d6:73:09:f8:db:be:f4:65:d5:
         04:dd:fa:b4:97:2d:ba:be:bb:d8:f9:7f:85:b3:19:42:48:71:
         36:d6:5e:85:b6:85:12:48:8d:4e:8e:82:06:b6:93:9a:f3:0a:
         c1:98:ae:29:48:0f:77:79:de:27:03:9a:c8:c9:9b:fd:04:8e:
         80:cc:25:7e:d1:11:04:a4:46:15:a4:b1:3d:7b:a1:d7:9b:61:
         89:11:04:e4:99:6b:59:e1:a0:7c:14:a8:49:9d:69:bd:a7:80:
         81:ac:03:d1:c9:9a:75:13:76:35:a9:68:97:d9:50:aa:8b:93:
         48:85:32:9d:25:0c:98:84:78:cc:9b:06:55:f5:00:be:51:ee:
         b9:f4:6d:30:5b:3a:b9:06:be:a2:2f:2c:bc:dd:f6:93:64:a8:
         60:8c:65:21:b8:8a:f7:32:f3:67:cc:bc:30:9c:a8:64:d7:ae:
         1f:85:23:df:38:a3:df:19:2b:e9:e7:b2:10:ec:84:14:ce:e2:
         09:6d:03:77:e3:59:a4:13:d2:db:18:fb:ec:67:82:d6:97:83:
         ea:87:f3:c7:1b:d6:0e:b5:8c:2f:c0:a1:70:57:0f:f9:69:52:
         7c:de:24:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 23:38:11 2024 by rpki-client on console-fra.rpki-client.org