Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa
File:                     3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (raw, json)
Hash identifier:          muMEUhzqqugv6Zj6iFpUQ9PcnrfD7MobXuiftjt5U7I=
Subject key identifier:   0F:CA:74:23:BC:E6:63:FB:98:F6:66:1A:39:01:BB:77:47:81:12:DC
Certificate issuer:       /CN=4FA812FE6A4A85F790CB2740EF08836883716912
Certificate serial:       18775770DF71F0D81BF33601E0B9F87B4172F106
Authority key identifier: 4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa
Signing time:             Fri 09 Aug 2024 06:00:00 +0000
ROA not before:           Fri 09 Aug 2024 05:55:00 +0000
ROA not after:            Fri 08 Aug 2025 06:00:00 +0000
asID:                     131767
IP address blocks:        103.90.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl
                          rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 12:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:77:57:70:df:71:f0:d8:1b:f3:36:01:e0:b9:f8:7b:41:72:f1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FA812FE6A4A85F790CB2740EF08836883716912
        Validity
            Not Before: Aug  9 05:55:00 2024 GMT
            Not After : Aug  8 06:00:00 2025 GMT
        Subject: CN=0FCA7423BCE663FB98F6661A3901BB77478112DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:04:e3:3b:51:8f:2b:47:8d:85:04:01:24:
                    d0:8a:d2:d5:68:5e:e3:c3:27:22:23:b6:69:89:2c:
                    24:73:c4:96:9a:e4:c8:f7:ad:6b:7d:92:5c:5c:53:
                    cc:a0:91:13:d1:e5:56:85:7e:15:f4:aa:e0:3c:bb:
                    a5:5a:c2:ed:c2:4c:ec:26:cd:50:f6:ee:0b:65:16:
                    6d:83:8d:f9:a8:06:dc:bd:d8:e1:37:98:5d:54:bd:
                    cf:1b:37:5a:a6:85:73:31:11:71:04:99:08:76:f9:
                    ca:60:16:5c:20:18:0d:fa:66:b4:ac:2e:91:02:79:
                    ef:a9:22:41:0f:d2:98:e6:6f:7d:06:31:43:d1:d4:
                    e3:0f:70:b3:af:8b:db:b2:66:ab:05:a1:29:ea:f2:
                    b8:73:7f:bb:09:a5:3d:0d:dd:0a:d3:1c:b4:96:f5:
                    b0:c6:ab:88:18:17:a5:4c:43:d3:01:18:0a:a3:3b:
                    e8:12:72:38:f6:01:64:e0:e7:20:e8:6e:33:38:f3:
                    aa:e4:b9:8e:b3:bc:be:f0:34:c2:cd:d3:e3:65:dd:
                    05:6e:f2:4b:44:03:2b:28:df:e2:50:95:e9:28:07:
                    1c:c8:f7:fc:da:d5:33:64:6a:fe:0f:01:33:3a:f9:
                    ad:ab:84:44:7c:d0:83:b9:16:8c:59:45:72:69:49:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CA:74:23:BC:E6:63:FB:98:F6:66:1A:39:01:BB:77:47:81:12:DC
            X509v3 Authority Key Identifier:
                keyid:4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d3:af:b1:62:21:d7:47:75:75:b2:39:64:2b:0a:ff:37:2c:65:
         02:6a:d7:ca:26:ed:9d:43:aa:ca:e4:23:8e:e3:58:d5:10:df:
         37:92:8b:36:69:f9:83:90:4d:db:70:83:c4:77:7e:fa:9e:ef:
         2c:66:c0:9a:0f:4f:6e:5b:65:1f:61:5e:4a:d5:e0:5d:05:1a:
         fa:e8:91:20:5f:9c:74:ca:76:66:3c:5d:68:84:ba:d5:22:e5:
         1c:25:6d:78:d4:fb:da:21:b4:74:31:04:fa:e7:3b:e4:09:0e:
         bb:09:22:54:cd:44:1f:67:9f:a7:54:2f:aa:1f:71:fe:a6:54:
         b4:b7:1c:e0:9c:ac:47:61:6c:1f:ad:b6:d6:74:67:91:29:eb:
         6d:de:f4:62:3f:6a:b4:e0:c9:4c:89:aa:ae:04:28:17:c7:d7:
         3c:d7:b2:42:9e:b7:b4:3d:b6:85:90:7d:8d:ee:c7:a8:3b:ae:
         01:6e:a5:a6:47:22:94:1b:11:45:5d:36:25:8f:ab:a0:e5:fe:
         0a:1e:0f:08:ab:ec:ad:9c:fe:df:bf:82:a9:8e:cd:c2:7d:b6:
         d8:04:75:6f:3e:52:0f:8e:7a:3e:5d:0d:70:fd:6a:26:a7:71:
         03:99:b8:17:69:b8:69:06:49:bf:f2:dc:d5:db:08:71:24:11:
         77:f9:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:26 2024 by rpki-client on console-ams.rpki-client.org