Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa
File:                     3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (raw, json)
Hash identifier:          OSsyybAUMPUEKNEvDuD5IZwkifGl3d3mlIDqjGe2c5s=
Subject key identifier:   71:50:DB:A1:E8:DA:2E:E7:D4:A8:30:06:B2:46:DA:E8:6F:01:9C:60
Certificate issuer:       /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7
Certificate serial:       3B2A925F03C9D1052BFA523D6FDBE0051A5076B3
Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa
Signing time:             Fri 19 Apr 2024 07:01:56 +0000
ROA not before:           Fri 19 Apr 2024 06:56:56 +0000
ROA not after:            Fri 18 Apr 2025 07:01:56 +0000
asID:                     58820
IP address blocks:        103.169.210.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl
                          rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2a:92:5f:03:c9:d1:05:2b:fa:52:3d:6f:db:e0:05:1a:50:76:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7
        Validity
            Not Before: Apr 19 06:56:56 2024 GMT
            Not After : Apr 18 07:01:56 2025 GMT
        Subject: CN=7150DBA1E8DA2EE7D4A83006B246DAE86F019C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:6e:cf:63:b2:26:69:55:1e:79:6a:e0:d4:
                    92:cf:fb:f8:12:f8:63:2a:11:87:e8:0d:0d:16:d0:
                    3e:ff:ce:35:ab:84:f8:db:7c:4f:89:f5:fb:ff:a9:
                    f4:91:d2:d0:4e:f3:2e:1c:37:87:0c:e4:53:02:6e:
                    3e:ed:ee:45:4f:44:c7:65:35:fb:9d:01:3d:11:f1:
                    0b:9a:da:a9:0c:78:d4:fd:6c:60:4b:b1:9c:ce:04:
                    f7:a9:ed:fe:4e:3f:47:0b:85:c3:b0:3e:1b:c7:53:
                    ac:f8:73:7d:58:8b:9c:6a:91:4c:9f:54:85:98:be:
                    41:2b:97:85:16:c4:61:77:6d:8a:a4:6c:63:d1:4b:
                    55:d3:9b:ea:4c:36:5f:66:bf:93:eb:95:e8:fe:ad:
                    fb:58:5c:a4:52:d3:ed:12:b2:09:ef:95:b1:ce:a3:
                    4a:25:9a:8e:c3:d6:6e:e6:42:16:6e:de:1d:22:8c:
                    00:b1:3a:a5:03:28:d8:18:a0:bb:00:82:36:87:6f:
                    56:86:e1:48:9a:08:7e:46:8b:b1:b6:ae:1c:8d:7d:
                    15:5b:61:29:f4:ae:3c:1a:5c:ad:f7:7a:29:86:9c:
                    da:09:b5:67:f7:50:16:58:aa:7b:77:b9:1f:f0:69:
                    bf:a6:70:c5:94:b1:e6:04:b2:04:de:66:f1:66:0a:
                    ab:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:50:DB:A1:E8:DA:2E:E7:D4:A8:30:06:B2:46:DA:E8:6F:01:9C:60
            X509v3 Authority Key Identifier:
                keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:86:66:cb:8b:9d:e3:67:d0:78:38:de:75:68:8c:92:06:77:
         bf:d8:76:5e:78:da:dd:88:7c:3c:f4:05:24:4b:d0:5e:53:12:
         85:2c:94:62:ed:8b:7f:fd:ec:52:1d:e2:4a:bb:9b:2c:c6:d7:
         69:16:56:6f:56:17:53:22:42:cc:21:e6:45:ad:64:fa:76:f5:
         1b:c1:9f:ba:41:5c:18:ab:82:fd:c3:dd:ba:91:cb:f4:94:0d:
         7d:b9:72:cb:bd:6d:18:41:35:04:d2:f5:81:4f:ee:e6:96:8f:
         cf:6c:db:90:ba:de:78:c3:b5:0b:9d:d5:08:13:93:cf:c0:b4:
         6b:ba:e6:f9:44:6a:43:be:b1:d5:51:3e:56:29:a8:62:fb:7c:
         e4:e6:ec:9d:29:c1:1e:84:42:be:3a:ac:f7:1a:26:fc:ad:5d:
         0e:71:f5:38:a6:aa:24:af:9f:b0:70:ae:11:f3:8f:fe:3a:1d:
         ae:44:94:93:80:13:29:7d:bc:6c:50:bf:03:b5:73:4b:90:b1:
         a3:18:c9:30:d5:d7:78:4a:21:c0:dd:8b:de:d7:92:37:ad:58:
         ee:90:55:a1:68:4f:c4:85:bf:7f:a0:d9:10:49:98:8a:bf:01:
         7e:9b:59:ae:e2:a7:26:cd:b5:3b:de:66:fe:f7:17:1b:5b:98:
         1d:9e:e1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:09 2024 by rpki-client on console-ams.rpki-client.org