Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34362e302f32342d3234203d3e203137393935.roa
File:                     3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier:          aiqggAzdcdtm0B30Fkn6BPjIRWihb5Wkvu7iMkpkz24=
Subject key identifier:   5F:DD:BE:A1:24:5D:52:D6:26:5E:41:BE:1B:E2:57:FF:76:ED:02:7C
Certificate issuer:       /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799
Certificate serial:       5CF551D858253138C0A9E3FCF6785C258B9034E6
Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34362e302f32342d3234203d3e203137393935.roa
Signing time:             Sun 18 Aug 2024 10:00:56 +0000
ROA not before:           Sun 18 Aug 2024 09:55:56 +0000
ROA not after:            Sun 17 Aug 2025 10:00:56 +0000
asID:                     17995
IP address blocks:        103.139.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl
                          rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f5:51:d8:58:25:31:38:c0:a9:e3:fc:f6:78:5c:25:8b:90:34:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799
        Validity
            Not Before: Aug 18 09:55:56 2024 GMT
            Not After : Aug 17 10:00:56 2025 GMT
        Subject: CN=5FDDBEA1245D52D6265E41BE1BE257FF76ED027C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:14:26:d0:f9:d7:64:84:71:7e:4b:f3:7d:1a:
                    2c:8a:f4:02:83:8f:27:6a:86:0f:45:6d:53:eb:69:
                    93:36:ba:5f:66:ae:48:87:39:f9:44:a7:68:ea:68:
                    d0:5c:f4:c2:0f:cd:77:04:6e:5e:0a:e0:bc:44:b7:
                    ba:b9:7d:4f:7d:ff:52:6f:5d:e2:b2:bf:6c:55:5d:
                    da:d8:0d:fd:6d:55:1f:38:92:a4:ca:28:24:9b:93:
                    e3:e9:a0:ea:78:4b:8b:0e:21:47:d1:7f:db:e0:b2:
                    be:1f:84:13:ab:9a:75:69:bf:56:ef:c3:34:90:60:
                    90:19:1c:f7:27:fb:db:a9:b2:f0:39:55:0a:6b:da:
                    bc:ec:83:21:23:a2:d2:d0:e1:71:e0:1e:06:e4:39:
                    93:70:54:09:ca:fe:fb:48:78:9c:6f:01:cd:5f:8f:
                    d2:a5:16:bf:f8:13:c9:78:52:d9:da:e8:26:53:5f:
                    49:fe:ca:17:95:28:9c:bc:47:50:04:22:82:2e:c8:
                    3f:ea:53:60:0a:1a:4e:d6:40:d6:6f:35:ee:27:86:
                    8d:7e:0f:5b:34:f2:ce:5a:ad:07:fe:5f:23:a2:69:
                    b7:0e:39:79:4d:da:c1:7c:50:8f:12:80:e9:4f:f9:
                    4d:f6:8b:19:42:b4:51:83:bd:9d:b2:7f:1d:23:85:
                    d8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DD:BE:A1:24:5D:52:D6:26:5E:41:BE:1B:E2:57:FF:76:ED:02:7C
            X509v3 Authority Key Identifier:
                keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34362e302f32342d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:9d:64:95:50:52:9e:c3:21:e1:3b:8a:12:3d:fc:66:4d:2f:
         29:1c:39:52:94:85:e5:ca:1f:cb:4f:e5:79:27:90:b3:47:98:
         c1:b7:20:36:67:68:12:43:db:f2:33:21:d8:80:86:88:64:77:
         d1:c0:01:3c:52:8d:10:51:73:12:c6:53:47:d1:18:60:a4:d8:
         fe:6c:2e:1b:ae:a4:ef:8f:b3:7b:64:84:d3:e3:0d:fb:5b:18:
         1e:be:48:f0:ae:75:a0:b1:1e:1f:7b:56:e2:fe:a8:95:ab:f2:
         17:03:40:a8:9b:bf:10:93:e1:6f:4b:64:50:0a:fd:8e:3d:68:
         94:51:a0:69:7b:f4:c6:b8:f1:55:0a:85:d7:ec:38:04:8f:5e:
         a8:f0:28:c5:b5:5a:c1:0c:2c:63:3a:c6:1f:72:f2:59:cd:c5:
         50:94:c5:a4:66:c4:7b:e5:fc:db:3f:c9:9a:13:4f:25:20:2b:
         11:9c:a3:72:af:9e:c9:71:ac:0f:59:f8:b7:92:a7:7d:c9:dc:
         b1:38:17:e8:fa:61:d9:2f:7f:d4:90:8e:72:ea:0f:8a:2c:fd:
         c2:ca:41:79:1d:e2:6e:46:2b:f9:71:1d:06:9a:fd:1e:2f:28:
         b2:7f:50:27:58:b8:0f:56:4a:c8:2b:bd:f8:41:43:7f:df:56:
         4f:c8:2d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:20 2024 by rpki-client on console-fra.rpki-client.org