Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e31312e302f32342d3234203d3e203535363632.roa
File:                     3130332e37312e31312e302f32342d3234203d3e203535363632.roa (raw, json)
Hash identifier:          KNuzEtjQXTPqbO4WNny2KjokoOmzzEFCKrvvjyUWvLI=
Subject key identifier:   22:AF:9D:BF:89:D3:E1:29:2E:30:C7:B3:5E:9D:19:8B:7B:EF:9E:2A
Certificate issuer:       /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9
Certificate serial:       43440969ADAE9D7ABF504548073024CD1AE85D5A
Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e31312e302f32342d3234203d3e203535363632.roa
Signing time:             Tue 14 May 2024 08:02:07 +0000
ROA not before:           Tue 14 May 2024 07:57:07 +0000
ROA not after:            Tue 13 May 2025 08:02:07 +0000
asID:                     55662
IP address blocks:        103.71.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl
                          rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:44:09:69:ad:ae:9d:7a:bf:50:45:48:07:30:24:cd:1a:e8:5d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9
        Validity
            Not Before: May 14 07:57:07 2024 GMT
            Not After : May 13 08:02:07 2025 GMT
        Subject: CN=22AF9DBF89D3E1292E30C7B35E9D198B7BEF9E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:24:a7:13:df:fc:b8:50:1f:03:97:14:29:79:
                    88:38:1c:7c:de:a7:c5:31:6c:18:e3:5b:dc:92:44:
                    a7:03:2b:5a:57:ea:cb:d4:eb:ea:9d:33:53:87:7b:
                    96:fd:46:90:2f:7e:a4:74:41:77:77:d3:e1:2d:0e:
                    8f:9f:dc:0c:d0:05:ac:01:ed:da:82:90:6f:b9:5e:
                    49:7b:22:f5:12:0c:18:ca:03:6c:20:7d:42:d1:c3:
                    f3:85:96:0b:78:f9:75:d8:75:54:0b:5c:29:9b:69:
                    56:41:c0:e3:12:e8:02:72:11:19:9c:8e:55:53:e2:
                    4c:bc:0f:a1:37:83:ef:c4:15:bb:3b:b3:f8:6e:16:
                    36:a9:97:7a:76:d2:78:8f:76:67:ca:75:69:9f:a2:
                    af:af:75:c1:8e:34:9b:33:8f:86:a2:ba:a4:47:ca:
                    25:db:3e:f4:3c:f4:dd:7c:7f:a1:2b:e9:8e:60:dd:
                    66:15:5e:a8:82:dc:7c:1c:ef:62:1d:fd:23:65:11:
                    8c:53:d4:84:8e:75:1d:cf:7a:3b:71:6a:8f:c1:25:
                    e8:f2:43:a3:26:6b:d3:a1:76:a3:00:33:56:ed:d5:
                    c1:9d:92:2b:8a:8d:94:7e:4c:a6:02:66:e0:a7:15:
                    3e:ae:27:f9:3d:65:d9:00:50:fc:21:b4:cd:94:6a:
                    65:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AF:9D:BF:89:D3:E1:29:2E:30:C7:B3:5E:9D:19:8B:7B:EF:9E:2A
            X509v3 Authority Key Identifier:
                keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e31312e302f32342d3234203d3e203535363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:f1:95:c5:88:c4:c3:4a:dc:92:4f:3f:38:c2:ba:50:cf:6e:
         66:04:c1:b4:66:81:5c:b4:76:5b:d6:ef:08:d1:dd:29:2b:68:
         47:41:23:a1:82:43:99:ea:7d:81:87:ce:44:c2:5a:c7:3b:fe:
         c8:8f:b3:c7:6c:3a:51:63:0b:ce:ed:17:bc:b3:7f:7c:48:b4:
         57:0a:f4:b2:8a:b9:f9:f1:ec:18:4c:bc:52:58:b8:44:4d:33:
         e4:a8:04:c7:80:d1:68:7e:16:a2:08:33:c4:6c:b0:a9:35:76:
         35:c2:c3:ef:b8:9a:dd:ed:4e:b3:13:ec:72:6c:97:a4:3d:a0:
         9b:03:33:c4:80:11:ef:06:fa:92:6b:b2:45:f6:77:5d:d3:32:
         37:5b:82:2d:5a:ca:43:06:b9:ee:18:a6:42:34:ba:cf:b7:f9:
         c3:06:f7:f7:33:fe:df:25:f8:c9:44:ee:eb:bb:e9:ec:ad:b8:
         3e:b1:1b:b0:77:d5:de:aa:5e:b1:0b:6a:6c:56:ef:47:3d:ab:
         e0:b5:7d:89:c0:85:26:51:05:ed:c4:58:e6:df:80:93:54:68:
         6b:1c:bd:5e:18:ac:1e:b8:69:19:47:fd:29:b2:a7:15:db:d2:
         ec:ea:9e:7e:56:13:24:26:19:d7:8d:db:62:21:29:08:2c:2a:
         fb:0a:7c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:39 2024 by rpki-client on console-fra.rpki-client.org