Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa
File:                     3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa (raw, json)
Hash identifier:          MN61Y/Ylz9y4hR4L15i6CxFhu266jbpudQN5I3FAXYw=
Subject key identifier:   C2:02:18:0B:C2:E8:60:5E:42:09:6E:1A:77:8F:4F:99:FD:20:9C:10
Certificate issuer:       /CN=03315D0E966A85B878EA9058B8CF03EAF2881889
Certificate serial:       0B8889544D15563C5CC0792BE04814CEB1565F5B
Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa
Signing time:             Mon 01 Jul 2024 01:04:37 +0000
ROA not before:           Mon 01 Jul 2024 00:59:37 +0000
ROA not after:            Mon 30 Jun 2025 01:04:37 +0000
asID:                     135448
IP address blocks:        103.117.82.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl
                          rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:88:89:54:4d:15:56:3c:5c:c0:79:2b:e0:48:14:ce:b1:56:5f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889
        Validity
            Not Before: Jul  1 00:59:37 2024 GMT
            Not After : Jun 30 01:04:37 2025 GMT
        Subject: CN=C202180BC2E8605E42096E1A778F4F99FD209C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ea:8c:94:09:50:43:0a:cf:9c:40:37:df:6e:
                    33:4f:7a:fc:51:c0:78:4a:da:4c:a0:85:97:f4:c6:
                    bd:5c:b0:81:b3:e8:9b:6d:f6:dd:49:33:a7:d4:18:
                    98:83:cc:57:98:33:1a:9a:a1:0d:54:5c:6d:7b:4c:
                    69:e3:09:af:f4:30:4a:e4:65:25:36:82:55:e8:f7:
                    5a:14:52:44:64:0a:62:b4:af:93:e3:03:ea:26:ab:
                    5e:7c:7a:86:85:21:6e:9b:1d:79:5c:34:a8:fd:ef:
                    22:22:0b:29:5a:02:d8:15:8b:59:f3:68:af:40:70:
                    2f:df:6e:85:83:55:02:e1:d2:64:28:0a:e2:e9:dc:
                    2a:86:56:47:c3:4d:77:4e:d5:c2:4b:08:55:b0:83:
                    fd:0f:3a:30:b5:18:c6:d0:16:e9:9d:97:0e:54:b3:
                    db:27:0a:03:c7:89:c8:c8:3b:f6:65:b8:22:23:5a:
                    ae:5b:f0:31:bf:8e:f6:a2:67:8f:e2:1c:bb:17:e0:
                    c0:a0:42:38:52:f5:27:2d:6e:4c:c8:89:c1:9c:16:
                    66:6e:54:43:6e:f4:a2:66:59:bf:80:3f:c7:79:de:
                    74:e6:be:08:ae:74:4c:91:26:3e:fb:84:f8:b3:fe:
                    03:f3:15:b8:4a:d6:36:f6:69:5a:44:75:b5:24:20:
                    cb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:02:18:0B:C2:E8:60:5E:42:09:6E:1A:77:8F:4F:99:FD:20:9C:10
            X509v3 Authority Key Identifier:
                keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:54:c7:36:99:e5:a8:e5:8d:ec:07:a7:a5:d2:63:5d:46:42:
         f9:a0:76:c7:e6:c8:3f:63:b3:8a:91:5c:c4:c9:ee:2b:9e:f3:
         0e:68:21:1b:83:ee:96:9c:db:d3:e1:b4:0a:96:12:cd:0a:9b:
         83:4c:04:4b:b2:eb:76:12:3d:e5:b3:2f:3b:f4:33:3c:0b:81:
         0b:94:bd:73:13:37:a2:74:ab:8a:15:0f:bc:cf:9c:14:6a:ef:
         2e:73:3f:51:c8:0a:28:d2:07:cb:9f:1e:fe:75:08:7c:37:50:
         d2:97:85:e8:d3:71:15:d2:a5:ff:ad:7a:2a:84:5a:1e:6e:02:
         3f:23:7e:5f:03:63:b5:75:76:8d:50:64:9d:3f:3e:0b:4c:19:
         5f:6a:b3:0d:7c:ec:eb:ab:d1:70:de:73:4d:48:ed:71:ae:2f:
         21:2c:ff:87:61:93:6d:50:c8:db:2c:0d:2a:23:ed:eb:58:cd:
         a2:c2:80:a4:1f:e1:f4:26:94:39:37:5c:d9:b4:0c:3c:6f:04:
         32:a8:be:ba:a3:40:e7:f5:ed:e5:bd:25:23:bf:81:54:a3:45:
         5e:f8:16:17:1b:1a:33:26:77:60:a6:4d:a9:a0:82:c1:7a:d1:
         ec:d8:0c:d8:6f:9e:bc:3f:e3:de:42:d8:f3:f6:11:dd:c2:e2:
         f5:fb:bd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:32 2024 by rpki-client on console-ams.rpki-client.org