Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36332e302f32342d3234203d3e203338373538.roa
File:                     3130332e31302e36332e302f32342d3234203d3e203338373538.roa (raw, json)
Hash identifier:          4fgr8pnAQyhzmUnk9mguo5zm84SrVO1dIjnC4wxY3dM=
Subject key identifier:   0E:28:3D:7B:34:6E:70:A9:CE:FE:B1:6E:37:D8:E9:6C:E0:7A:28:95
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       55E5BD3BA4FF0932C0F7510CF6E87DFE2F4E61E9
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36332e302f32342d3234203d3e203338373538.roa
Signing time:             Mon 01 Jul 2024 00:02:13 +0000
ROA not before:           Sun 30 Jun 2024 23:57:13 +0000
ROA not after:            Mon 30 Jun 2025 00:02:13 +0000
asID:                     38758
IP address blocks:        103.10.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 04:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e5:bd:3b:a4:ff:09:32:c0:f7:51:0c:f6:e8:7d:fe:2f:4e:61:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: Jun 30 23:57:13 2024 GMT
            Not After : Jun 30 00:02:13 2025 GMT
        Subject: CN=0E283D7B346E70A9CEFEB16E37D8E96CE07A2895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:df:32:30:e4:2e:cb:0d:80:6b:b8:a4:75:
                    46:0b:fd:76:aa:1a:89:98:24:4e:74:f7:c0:47:40:
                    da:36:5d:41:ad:bb:b3:2d:2c:82:72:6a:2b:eb:e2:
                    18:f0:d2:6a:34:59:88:af:d0:a6:b0:87:d5:34:32:
                    21:db:a3:12:8d:14:69:2a:37:2c:9e:58:bd:4e:ee:
                    46:3a:6d:a7:92:4c:51:59:54:e8:9a:4a:7f:7f:76:
                    8c:dc:61:a6:55:93:07:0d:6b:8b:b6:db:4c:66:2e:
                    5f:a5:86:2e:2c:1e:8a:1b:d0:d8:44:0c:e2:d5:bc:
                    3f:c5:e9:ac:68:1e:8b:ab:03:31:6a:af:8a:eb:24:
                    fa:2e:05:bc:ce:7b:f2:c7:49:d9:0c:2f:cc:69:73:
                    f5:1a:05:61:55:ba:18:19:30:49:d9:9c:00:6b:98:
                    ea:be:1b:32:d2:02:e5:19:95:0d:35:c2:b6:35:ab:
                    29:70:20:fe:39:c8:a7:94:a7:39:3b:eb:f0:bc:e1:
                    8e:63:fe:32:d5:fa:8c:cf:d8:63:fe:e5:e6:c5:46:
                    e3:80:38:8a:d9:e8:0e:9e:3c:28:dc:93:79:0a:5e:
                    35:47:49:ba:e2:d7:a6:b6:17:c2:18:29:d7:1e:74:
                    e0:02:3f:7b:5f:9e:b5:a2:07:01:1d:69:25:5a:42:
                    78:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:28:3D:7B:34:6E:70:A9:CE:FE:B1:6E:37:D8:E9:6C:E0:7A:28:95
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36332e302f32342d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:1f:68:46:f1:f7:71:06:07:c7:de:96:d7:9e:66:f1:fc:53:
         30:e9:8a:23:92:dc:25:f5:e6:66:83:89:2c:d3:5e:d3:4e:fc:
         07:ce:05:5c:59:5a:09:d7:62:d6:a0:e9:4e:c1:88:21:f6:6c:
         23:f4:fa:9c:0c:fc:cf:6b:90:4e:30:34:2d:b1:68:c4:92:19:
         fc:f3:db:48:e9:d2:3d:e9:4c:bb:b0:bd:7f:e8:83:5d:57:43:
         7c:a9:b7:3b:5c:b8:18:b6:5a:0f:8e:f3:ea:ff:e1:21:a2:01:
         a2:f5:d9:fb:05:79:0b:54:2a:a7:50:74:dd:e8:d7:8f:7d:a1:
         ec:e3:92:6f:c0:7b:81:0c:db:b4:d0:28:6d:ba:5f:ea:f2:c3:
         02:83:a1:f1:a1:09:fc:50:b9:11:b7:d7:0b:b3:43:22:47:6e:
         e8:9d:ba:df:6a:2a:57:b0:0f:ff:fb:6b:30:6a:6e:dc:c2:99:
         25:59:26:61:25:bc:f8:df:33:e5:dc:ee:ec:2a:b4:ea:cf:56:
         b1:54:36:2b:71:69:f2:fc:72:6f:3d:05:c7:1d:a0:b6:5b:03:
         43:3d:04:89:e9:33:c5:eb:f7:6d:67:67:9e:3a:ec:f2:4d:20:
         90:49:6a:d5:6d:43:f5:cd:59:a5:9f:cb:13:b3:b7:e9:a1:90:
         40:14:09:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:43 2024 by rpki-client on console-fra.rpki-client.org