Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e31382e37362e302f32322d3234203d3e203535373031.roa
File:                     3130332e31382e37362e302f32322d3234203d3e203535373031.roa (raw, json)
Hash identifier:          HPqEsLh/WVcKZo85PjYbqy11hyEnzJgjvXokKgn1LnY=
Subject key identifier:   91:20:79:3D:1D:71:82:C0:F4:29:F8:CA:82:50:B4:B9:4C:00:6D:D2
Certificate issuer:       /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial:       508FB07EB095A1ED64933A653DFF7093B547282C
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e31382e37362e302f32322d3234203d3e203535373031.roa
Signing time:             Mon 01 Jul 2024 01:05:58 +0000
ROA not before:           Mon 01 Jul 2024 01:00:58 +0000
ROA not after:            Mon 30 Jun 2025 01:05:58 +0000
asID:                     55701
IP address blocks:        103.18.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
                          rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8f:b0:7e:b0:95:a1:ed:64:93:3a:65:3d:ff:70:93:b5:47:28:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
        Validity
            Not Before: Jul  1 01:00:58 2024 GMT
            Not After : Jun 30 01:05:58 2025 GMT
        Subject: CN=9120793D1D7182C0F429F8CA8250B4B94C006DD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2f:62:5e:82:c9:56:3c:a1:00:52:93:40:90:
                    0c:75:a3:b1:ac:34:d7:c2:08:85:c2:df:2c:41:6c:
                    69:04:e7:6b:f8:4d:70:9c:66:81:00:35:1d:d6:f5:
                    16:18:e6:da:e0:ee:bb:d9:f6:b1:da:6c:24:6b:c8:
                    bd:51:00:df:ae:83:1d:e9:e1:b1:62:31:be:a4:33:
                    91:b1:70:6b:20:d4:f1:9f:61:10:2a:ed:67:7f:65:
                    a0:d2:cc:11:8c:09:08:7f:74:6a:87:b3:53:5c:01:
                    5b:a2:37:91:ac:38:1a:17:b3:92:55:29:e4:ca:a0:
                    dc:1e:bf:16:5d:e2:2f:00:e6:67:17:cf:1a:eb:d6:
                    4b:20:17:24:87:14:bd:28:8c:b7:09:a9:65:e6:27:
                    98:f4:3e:99:4b:14:48:9c:d8:4b:b2:f5:61:96:a6:
                    23:44:5e:6e:60:a5:4e:d8:0f:d6:c0:f2:de:2c:d0:
                    5b:91:6d:4c:b5:70:80:ec:ea:ae:51:a4:4c:6f:b0:
                    57:9e:b1:be:d1:ad:67:31:98:fe:3e:8b:8a:d4:9d:
                    85:89:02:b4:aa:6c:5f:0d:a7:28:f2:1a:6c:b6:4e:
                    ce:03:69:35:f8:98:43:39:be:9a:6b:5e:42:27:65:
                    57:5f:44:d6:bb:db:45:42:69:91:c0:db:ac:9c:d3:
                    d0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:20:79:3D:1D:71:82:C0:F4:29:F8:CA:82:50:B4:B9:4C:00:6D:D2
            X509v3 Authority Key Identifier:
                keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e31382e37362e302f32322d3234203d3e203535373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:19:d9:37:a6:ca:3a:29:a7:d3:5a:36:90:2f:34:aa:a1:8d:
         8c:7e:10:d6:d9:3a:74:84:5b:7a:d2:bf:c3:56:5b:b1:bf:ae:
         78:41:c7:02:cc:4c:1a:85:4f:95:5d:33:c5:30:64:69:b5:ec:
         3d:c1:9e:46:e5:b4:a6:11:09:e1:35:9b:c9:1f:02:36:f0:e2:
         b0:72:f4:48:92:da:63:1d:de:ea:15:69:99:4a:8e:57:c2:a1:
         16:3b:79:f1:ec:32:ff:bf:14:55:7d:7c:8d:e8:65:9f:0f:95:
         1a:8b:37:22:21:3a:bf:11:3e:f7:8f:15:7e:cf:3c:7d:5b:30:
         4e:ee:7f:fa:b8:65:56:4b:74:69:6d:a5:0d:bb:52:1b:6e:dd:
         7c:b3:4b:ff:c2:67:65:70:f8:3d:04:e7:42:9f:e8:7c:03:f0:
         3b:8d:9e:f0:8c:d7:84:94:6a:48:36:51:84:51:7f:35:c2:2e:
         be:58:50:c2:3e:d7:59:48:c8:f7:75:65:ed:0d:99:13:93:c6:
         c5:88:c6:98:f1:dd:19:93:a0:20:87:8a:c9:cc:ea:15:7a:a2:
         4e:7d:16:b8:b8:dc:5c:70:09:ed:85:e7:20:b8:55:4c:78:31:
         aa:0c:6c:fd:98:16:3e:52:80:22:41:bf:9c:d9:c6:2a:ba:fb:
         19:c2:fc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org