Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36312e302f32342d3234203d3e203338373538.roa
File:                     3130332e31302e36312e302f32342d3234203d3e203338373538.roa (raw, json)
Hash identifier:          f3iCk3LjLjEMoJPF3LFNtbgYp3UzsumaaaJ0MXf+xdI=
Subject key identifier:   90:21:FE:1E:19:0D:EF:6B:57:B4:87:D9:2D:91:7C:E2:4B:39:1E:23
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       2BF318741B8598F093B1BA3CEB98FA0242AB9D44
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36312e302f32342d3234203d3e203338373538.roa
Signing time:             Mon 01 Jul 2024 00:02:13 +0000
ROA not before:           Sun 30 Jun 2024 23:57:13 +0000
ROA not after:            Mon 30 Jun 2025 00:02:13 +0000
asID:                     38758
IP address blocks:        103.10.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 04:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f3:18:74:1b:85:98:f0:93:b1:ba:3c:eb:98:fa:02:42:ab:9d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: Jun 30 23:57:13 2024 GMT
            Not After : Jun 30 00:02:13 2025 GMT
        Subject: CN=9021FE1E190DEF6B57B487D92D917CE24B391E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:85:a8:b7:bb:25:b2:c6:02:62:61:69:8e:
                    a1:00:55:d8:90:dd:8b:c9:57:07:0c:f2:79:12:a8:
                    56:7b:51:01:33:c1:6d:46:c4:7b:c3:e5:79:57:12:
                    e3:f9:01:21:04:bb:24:17:d5:d6:7d:9b:d9:43:05:
                    7c:f0:40:0a:e2:30:e3:b0:4f:8e:16:d7:7b:25:45:
                    9f:78:2e:10:87:f4:3e:ec:85:b7:e3:16:84:4b:20:
                    8a:d5:b6:da:71:57:98:6c:1d:ba:ae:0f:fa:44:cc:
                    2a:d3:5c:93:7c:20:a3:aa:66:41:9c:82:e6:90:df:
                    5c:2d:ab:c7:65:cc:98:d2:0d:43:ff:8e:8a:3d:cb:
                    a0:a2:fc:6f:19:6e:b8:77:ff:72:10:ef:84:3e:1e:
                    63:be:c7:77:1d:c1:22:8c:b7:92:0a:a7:c1:1e:ee:
                    2a:36:99:9c:45:cd:7a:b9:49:d4:2b:16:fd:44:e1:
                    99:ce:5e:4b:e6:cd:06:e1:1a:b2:67:21:ed:46:4d:
                    2f:29:43:7a:d1:56:0f:b4:06:6d:e9:7a:0c:98:8c:
                    0d:8a:2d:3b:09:1e:8f:f2:8d:22:6f:8f:14:09:7a:
                    a0:83:32:db:ab:8e:4e:b4:f6:e2:09:2d:f7:f0:4f:
                    ba:8a:89:44:a2:e7:43:b5:11:db:5b:8c:a2:c8:b6:
                    e1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:21:FE:1E:19:0D:EF:6B:57:B4:87:D9:2D:91:7C:E2:4B:39:1E:23
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36312e302f32342d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:75:21:87:a7:f1:4a:7d:dc:ff:03:2e:96:46:17:94:62:f5:
         87:59:f5:04:56:7a:72:d2:c3:50:a9:db:4b:98:45:2d:51:44:
         8a:7e:e6:b8:e1:e9:84:6d:4d:1a:98:1d:e3:d7:fa:de:b4:11:
         5b:08:68:ab:32:7b:0d:a1:d6:fe:c7:80:8c:ae:61:27:2e:0f:
         00:e4:a3:b6:db:ee:50:9c:22:c8:52:46:97:ca:78:5a:5e:5a:
         5a:2c:0c:58:02:c8:ca:9b:ed:4a:39:5c:8c:ce:e5:34:5c:d7:
         e7:3e:5f:88:75:bc:ad:e9:c5:70:42:c4:d8:ab:13:c5:88:5b:
         6b:ac:c0:5f:33:ef:ab:e6:01:5d:0a:12:b1:b4:47:23:be:d5:
         6e:7b:a1:ba:3b:61:10:b7:c7:07:2a:28:70:31:d1:0d:df:7d:
         00:7d:f3:fd:05:58:83:00:08:25:53:93:4c:73:4b:0d:49:54:
         8a:1b:6b:c8:d5:2c:e8:59:b9:76:8e:84:fe:77:3e:7d:ca:3f:
         20:c6:7a:3d:03:e5:12:dc:19:aa:8b:66:de:32:b8:d3:29:0c:
         aa:b8:a3:0a:fc:3c:ce:78:55:e0:9e:52:da:89:d2:0e:ab:f9:
         28:d3:e3:80:b4:fd:b2:d8:68:3d:92:7a:18:83:6d:2e:56:f1:
         57:6b:fb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:05 2024 by rpki-client on console-ams.rpki-client.org