Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e312e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138322e312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          8bkqGMhF3/nCIAOPQ3Fxu2QvfK1q2EogVCcqPteQCkA=
Subject key identifier:   EF:80:A3:09:93:48:F0:08:09:C6:8A:57:6F:EE:27:BF:24:8D:C5:02
Certificate issuer:       /CN=1C427FBF1A649B90BD89B0EA83871003D9045925
Certificate serial:       09695CF6A50B8EEAFB94CB98A00807DF85C04D51
Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e312e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 10 Jan 2024 19:00:54 +0000
ROA not before:           Wed 10 Jan 2024 18:55:54 +0000
ROA not after:            Wed 08 Jan 2025 19:00:54 +0000
asID:                     9341
IP address blocks:        103.182.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl
                          rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:69:5c:f6:a5:0b:8e:ea:fb:94:cb:98:a0:08:07:df:85:c0:4d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925
        Validity
            Not Before: Jan 10 18:55:54 2024 GMT
            Not After : Jan  8 19:00:54 2025 GMT
        Subject: CN=EF80A3099348F00809C68A576FEE27BF248DC502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ed:b3:91:14:71:64:b1:86:40:cc:2d:48:ff:
                    8a:94:6a:15:0f:54:76:61:4a:2c:d6:34:61:32:9b:
                    bb:33:9c:9a:d5:1f:3b:51:51:e2:0d:05:0a:d5:15:
                    70:54:d2:15:86:51:48:ec:ad:1e:ca:32:fc:d0:08:
                    6b:6f:53:5f:29:e4:b8:40:3f:05:13:70:aa:fd:27:
                    60:78:51:18:b2:0d:0d:08:97:71:fb:82:79:89:90:
                    6b:65:4b:ea:cf:d9:e8:6f:c3:36:8e:c4:cb:db:e9:
                    92:df:d1:0e:ee:81:69:7a:79:a5:e2:40:91:0b:83:
                    5b:da:08:51:d7:a5:3f:a7:55:0f:69:10:e2:bb:c8:
                    42:44:ae:51:16:f4:e9:06:8b:c1:a6:45:38:4c:4a:
                    aa:2d:af:4c:60:d5:98:8f:e7:a9:4a:0f:28:20:2c:
                    1f:05:ea:bd:f9:29:a0:65:1c:fa:df:ba:9f:31:95:
                    ff:74:7d:e6:14:06:d2:98:f6:3f:6f:fe:54:16:d8:
                    5f:96:7b:e3:6a:4a:e0:e8:3a:05:41:f3:8c:6a:3c:
                    83:73:ea:63:e3:b6:97:39:8c:59:01:35:fa:ea:4f:
                    2a:a6:51:b7:16:d6:99:e7:e7:ab:ac:71:10:b1:18:
                    4e:28:9c:a6:d3:2d:86:33:9e:bc:10:24:04:c0:cf:
                    4b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:80:A3:09:93:48:F0:08:09:C6:8A:57:6F:EE:27:BF:24:8D:C5:02
            X509v3 Authority Key Identifier:
                keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e312e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:b3:e9:f9:71:b5:89:a7:d3:47:10:7e:ab:63:95:31:72:9d:
         66:cc:b3:be:4f:bd:c1:5c:85:fa:19:26:2e:65:6d:34:ff:f3:
         ec:96:59:a6:f1:c2:0b:d2:15:d3:7b:0b:71:02:23:56:e8:31:
         01:bb:f2:f3:29:8d:5c:d4:c5:86:30:eb:40:c5:ce:99:a0:10:
         c9:80:5d:62:9c:f1:16:f3:f7:61:0b:20:21:f8:ad:a9:53:86:
         de:1b:0b:4d:85:20:38:7e:f4:bc:3f:69:be:ea:7a:08:20:8e:
         de:c1:70:eb:10:ff:b3:3a:ac:67:f0:e9:49:0d:c8:df:16:88:
         92:35:66:04:a1:6d:6d:0f:98:12:0f:b5:bf:f5:d6:1b:8e:01:
         70:10:9b:83:e5:77:50:5f:09:4e:24:6d:a6:01:19:e6:e6:86:
         96:9f:89:c6:46:d7:dd:12:9b:91:eb:7d:29:17:72:2b:d1:08:
         55:d3:bb:6e:b9:b4:00:2c:46:63:56:4a:2e:33:32:a3:f1:69:
         68:dd:22:40:66:cf:95:52:c0:a5:ea:03:cd:7e:7f:26:16:72:
         60:6b:ab:ae:b7:63:ee:ff:ed:ce:68:74:89:45:5a:d4:87:db:
         a9:56:17:3b:a5:58:44:24:f7:f8:71:9e:d8:35:55:84:83:5d:
         59:01:5e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:24 2024 by rpki-client on console-ams.rpki-client.org