Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/3130332e3133322e3136392e302f32342d3234203d3e20313339393830.roa
File:                     3130332e3133322e3136392e302f32342d3234203d3e20313339393830.roa (raw, json)
Hash identifier:          q+lqAfZ1AFJJBhtrlpE/T9+p7blI7DzXD2Sfy7vCSI8=
Subject key identifier:   7D:3C:0C:29:E7:85:CD:93:CC:48:09:EF:FA:98:F1:0D:B7:01:0F:A3
Certificate issuer:       /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
Certificate serial:       4DB670A885ABF7CA1A160A554128C346C735B72F
Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/3130332e3133322e3136392e302f32342d3234203d3e20313339393830.roa
Signing time:             Fri 29 Dec 2023 03:15:42 +0000
ROA not before:           Fri 29 Dec 2023 03:10:42 +0000
ROA not after:            Fri 27 Dec 2024 03:15:42 +0000
asID:                     139980
IP address blocks:        103.132.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl
                          rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 17:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b6:70:a8:85:ab:f7:ca:1a:16:0a:55:41:28:c3:46:c7:35:b7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
        Validity
            Not Before: Dec 29 03:10:42 2023 GMT
            Not After : Dec 27 03:15:42 2024 GMT
        Subject: CN=7D3C0C29E785CD93CC4809EFFA98F10DB7010FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9c:83:d3:0c:5b:53:da:bf:68:8d:ac:8c:04:
                    cc:ed:ce:49:8b:03:b8:2a:6c:f5:9b:b3:c9:38:91:
                    62:12:27:1d:dc:68:7a:cd:32:a9:c8:4b:3b:a9:80:
                    82:bd:8e:3f:5b:ca:c2:e7:43:de:54:14:d0:81:2b:
                    04:e0:05:ca:57:4c:42:03:9d:b6:d5:6f:ae:88:3b:
                    8c:09:ee:39:5c:80:dd:68:ac:4e:38:4d:ea:44:23:
                    33:d2:4f:f6:0c:8b:33:0e:7b:55:5b:e1:09:bd:e5:
                    d6:0a:a2:56:60:52:d0:1d:fa:27:92:1e:bb:6b:08:
                    6b:d0:9f:d1:ea:8a:a8:35:f6:34:b1:ba:cc:81:6e:
                    1a:2e:af:21:9c:98:2c:d5:26:cc:d8:de:f0:98:c0:
                    fe:c3:da:33:4a:a9:f7:ba:dd:06:5f:bd:ed:cb:33:
                    32:45:d2:87:28:a0:8a:0a:cc:b1:0d:bb:61:2f:2b:
                    ab:e5:c2:6a:13:b3:4a:e3:06:3d:f5:70:07:ec:5f:
                    de:f2:13:de:80:12:65:05:7e:ed:85:de:f9:f0:d6:
                    2a:e8:dc:43:5b:08:05:79:58:ef:69:de:57:b9:74:
                    f4:cb:ea:8e:8a:0c:c7:fa:7d:d4:a6:71:9e:16:c0:
                    48:6a:68:43:bb:d0:4f:77:4f:d3:2e:6d:83:5e:54:
                    84:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3C:0C:29:E7:85:CD:93:CC:48:09:EF:FA:98:F1:0D:B7:01:0F:A3
            X509v3 Authority Key Identifier:
                keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/3130332e3133322e3136392e302f32342d3234203d3e20313339393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:fa:2e:a9:31:88:18:7c:d4:6f:94:99:6c:69:9c:69:5f:b2:
         fe:d4:c7:14:f8:55:e1:2e:13:05:ca:ed:7e:38:40:4b:9b:7e:
         f7:ea:26:ba:22:e2:29:b4:fc:98:0a:9e:b5:51:12:1f:66:d0:
         39:88:4f:f4:cc:c1:49:40:57:3f:f4:19:e4:47:9b:67:74:8d:
         25:d8:23:77:41:69:39:cc:0e:ee:ac:ed:5d:d9:0b:69:aa:de:
         f9:e7:05:4f:33:56:f0:8b:0d:68:8f:1d:32:19:4e:40:37:14:
         4c:59:30:43:84:cd:9e:0f:1f:97:19:8c:4a:b1:5f:88:96:1b:
         90:78:ef:8b:75:d5:a5:85:31:8a:5c:cd:5b:f5:05:ee:dc:cb:
         14:78:7e:a1:b7:a5:e0:3a:29:01:90:76:6e:40:d3:74:05:24:
         6c:52:f1:ab:2a:d8:ae:40:85:d8:71:f4:ae:2e:8e:ed:ee:c9:
         cb:f3:a7:b6:a2:74:00:b5:d4:11:64:1a:48:29:88:3b:3f:10:
         f0:b3:a5:2f:1c:59:c1:6f:19:d9:dc:f1:20:2d:e9:16:fe:fa:
         5b:d8:a6:4f:51:13:0c:51:6c:99:08:48:0d:fc:50:f0:9a:3c:
         84:21:46:31:de:25:e4:f9:ab:a7:da:9c:6f:5a:90:3c:bd:7f:
         dd:82:99:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:27 2024 by rpki-client on console-ams.rpki-client.org