Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/3130332e3134382e37392e302f32342d3234203d3e20313339393830.roa
File:                     3130332e3134382e37392e302f32342d3234203d3e20313339393830.roa (raw, json)
Hash identifier:          1bgjCxtih5NviKDqPJOqB+5FOGozsEa39HYVvcCY9KU=
Subject key identifier:   2D:FB:06:50:64:0E:5C:C5:56:A1:6C:B0:6B:19:F4:C0:31:FC:6E:B7
Certificate issuer:       /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
Certificate serial:       26BD2790D5EEC7E0FEC1DD12AF04F2DA7F222964
Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/3130332e3134382e37392e302f32342d3234203d3e20313339393830.roa
Signing time:             Fri 29 Dec 2023 03:15:04 +0000
ROA not before:           Fri 29 Dec 2023 03:10:04 +0000
ROA not after:            Fri 27 Dec 2024 03:15:04 +0000
asID:                     139980
IP address blocks:        103.148.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl
                          rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 14:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bd:27:90:d5:ee:c7:e0:fe:c1:dd:12:af:04:f2:da:7f:22:29:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
        Validity
            Not Before: Dec 29 03:10:04 2023 GMT
            Not After : Dec 27 03:15:04 2024 GMT
        Subject: CN=2DFB0650640E5CC556A16CB06B19F4C031FC6EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:13:ff:7d:e7:94:7a:f8:12:4f:46:11:f0:ee:
                    ab:79:46:07:96:2a:dc:ff:de:b5:21:e7:88:36:f6:
                    4d:b9:83:7f:19:5a:54:f7:c2:f2:97:20:96:88:51:
                    f3:96:49:ce:c5:cb:a1:ac:33:81:fe:2d:b7:85:7c:
                    b7:28:82:b9:ab:90:ae:8e:ae:83:a9:c0:68:5e:31:
                    d5:ee:de:48:81:97:9f:b3:2c:1f:a2:96:fa:82:4e:
                    f0:fb:05:89:e3:4e:12:a2:64:72:ed:7d:29:14:08:
                    55:0f:3d:20:30:17:8b:e0:dc:0d:77:78:c1:ca:98:
                    57:56:6f:ae:3b:55:00:f4:ab:1a:48:5f:16:ee:64:
                    05:d8:bf:89:35:37:7d:13:dc:a2:c0:c7:5d:93:40:
                    3b:83:2e:a7:65:97:94:ad:81:85:bc:e8:f5:fe:13:
                    d5:d5:f2:44:4a:19:78:a0:07:e1:6e:ab:1e:84:e4:
                    d5:91:83:d0:2e:49:fb:ac:32:8c:27:17:eb:fe:e5:
                    14:77:95:65:10:73:f5:92:a7:65:66:71:da:2b:3a:
                    f1:91:67:45:26:a7:e8:22:fe:50:90:d5:bb:a7:ea:
                    34:c1:72:76:e5:09:a8:29:25:3d:ab:73:33:12:87:
                    40:8f:e3:33:b3:ec:03:e4:e0:8a:33:4d:a5:b1:a3:
                    39:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FB:06:50:64:0E:5C:C5:56:A1:6C:B0:6B:19:F4:C0:31:FC:6E:B7
            X509v3 Authority Key Identifier:
                keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/3130332e3134382e37392e302f32342d3234203d3e20313339393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:67:93:46:07:60:ae:20:b4:68:40:92:a1:87:2e:20:2c:49:
         85:da:87:56:de:a8:3a:73:91:25:06:24:ca:d3:1f:15:a0:74:
         e9:56:c0:62:bb:87:f2:5c:a0:96:f0:e5:bb:ea:46:78:18:a3:
         6a:36:a5:7d:55:f6:6b:33:9a:13:86:67:a0:29:19:83:b0:b5:
         2b:c7:5e:c7:a6:27:59:ed:4d:7f:45:88:77:5b:29:2e:0d:8d:
         69:e5:81:49:b4:f9:3f:36:34:0d:3c:59:4f:bc:25:87:1d:1c:
         c0:49:f6:ea:49:35:bb:49:d4:47:68:c0:c9:a8:29:7e:35:c2:
         14:c0:46:b2:b1:d4:e9:f3:0c:2d:e0:16:0c:92:f7:7d:8c:76:
         9b:48:d9:f2:0e:2a:68:6b:cf:57:1d:45:a7:d4:95:5b:7a:36:
         eb:92:84:68:c5:8e:ae:9a:6f:0f:e3:ea:0b:38:7a:14:dd:ae:
         4e:42:8e:b9:c8:4d:2e:08:f3:0d:d6:9b:b7:32:bf:71:4c:7d:
         39:aa:43:3b:57:b7:d7:84:d4:01:04:a8:65:7b:f1:64:ac:f7:
         7b:37:e1:e2:25:f2:ab:52:2f:13:95:57:d9:61:9b:4e:31:9c:
         3e:61:d7:dc:b8:34:e2:b1:49:af:5d:80:ca:cf:e8:db:04:cd:
         8a:b3:bc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 18:47:41 2024 by rpki-client on console-fra.rpki-client.org