Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa
File:                     3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          ABn4EeP/70yx9BuoqJ+te+eRTp86nUPy2fJ0XrEtsyY=
Subject key identifier:   72:D2:68:46:B1:E3:63:A6:0E:76:35:1D:33:B4:93:5E:43:4A:3F:AB
Certificate issuer:       /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
Certificate serial:       2F8BB31D9805C1DDD92972EF49464A86D9EA6FB4
Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa
Signing time:             Tue 09 Jul 2024 16:00:01 +0000
ROA not before:           Tue 09 Jul 2024 15:55:01 +0000
ROA not after:            Tue 08 Jul 2025 16:00:01 +0000
asID:                     131111
IP address blocks:        103.22.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl
                          rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 02:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8b:b3:1d:98:05:c1:dd:d9:29:72:ef:49:46:4a:86:d9:ea:6f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
        Validity
            Not Before: Jul  9 15:55:01 2024 GMT
            Not After : Jul  8 16:00:01 2025 GMT
        Subject: CN=72D26846B1E363A60E76351D33B4935E434A3FAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:8b:f1:c8:23:bb:f9:1f:68:b7:68:1e:a5:
                    e0:f6:51:58:ff:4b:1c:73:bc:a7:66:71:30:c2:24:
                    48:fd:60:7f:ce:2a:27:8a:b1:52:69:db:a3:5a:82:
                    a0:d7:27:6d:f3:31:34:d8:52:d9:02:9f:d4:58:4b:
                    a1:7e:b3:91:a2:1d:4b:5c:c3:d7:fe:5b:82:00:3f:
                    2d:cc:db:70:df:8a:87:8e:95:c5:fa:c5:9b:20:cd:
                    19:cf:8c:86:60:00:d6:17:f2:8d:08:1a:48:f6:89:
                    2b:04:f2:5f:b3:c2:e8:19:f9:ad:ef:84:f1:07:e1:
                    22:66:c6:5c:13:58:e6:ad:38:01:03:5e:95:cd:f8:
                    e4:ce:7a:8d:84:6c:60:d7:26:43:a2:7c:97:8f:82:
                    af:44:21:d1:b8:37:e2:04:46:c5:22:21:0b:e5:36:
                    e6:c6:87:05:52:1d:b8:6d:95:12:8f:fe:c4:58:b6:
                    47:5f:7e:b5:f4:c5:16:25:bd:2b:29:36:32:22:ca:
                    3e:22:ab:d8:e7:aa:6f:24:52:ea:53:9a:3a:5e:a8:
                    15:b3:73:25:7c:bb:3f:a9:db:16:77:47:95:b9:85:
                    4a:e3:9c:b2:9d:90:49:e9:d7:f9:fc:a9:43:af:b3:
                    0a:8a:de:6e:6a:92:a5:c2:d3:e4:94:5d:9d:38:83:
                    75:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D2:68:46:B1:E3:63:A6:0E:76:35:1D:33:B4:93:5E:43:4A:3F:AB
            X509v3 Authority Key Identifier:
                keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:ed:58:db:4b:2c:ca:3f:57:9a:cd:89:cb:31:92:40:fa:03:
         52:2d:4c:45:3d:7e:79:44:23:0e:5f:e3:cb:73:68:7d:d0:19:
         96:fd:1b:9b:88:b9:f0:94:4e:c3:17:8b:03:96:bb:00:81:e3:
         2b:ba:20:94:13:1b:09:29:ad:e8:73:24:c2:40:77:1a:fb:54:
         f2:9f:47:fd:c3:18:0e:b8:76:25:f5:46:7c:08:28:0e:50:11:
         43:48:cb:99:33:98:71:46:e9:2d:5f:1c:d3:99:58:d1:90:56:
         78:18:e0:99:fa:67:50:6b:c7:b2:5a:07:de:26:25:c3:ab:ec:
         b0:c2:0d:13:61:f4:40:14:05:5a:fe:39:fb:c1:e6:55:0f:ab:
         3c:4d:e1:5b:df:9c:e8:42:e2:44:cf:9e:8a:ea:97:32:0b:82:
         3f:52:53:0a:3b:10:95:c1:26:c2:af:64:a0:91:95:c4:71:0b:
         35:d5:00:5c:52:b2:be:9f:f7:03:14:3f:b7:19:39:78:08:e5:
         d8:bd:e5:7e:ba:de:a9:87:67:1b:66:e7:56:36:1b:ff:24:07:
         5c:d2:c7:6a:cb:72:83:7d:03:ff:7a:36:c7:97:a6:54:2d:18:
         6f:db:9e:35:8e:17:12:67:66:34:80:eb:e5:1a:dd:c7:7c:20:
         ca:fc:d8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:01 2024 by rpki-client on console-ams.rpki-client.org