Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa
File:                     3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (raw, json)
Hash identifier:          qBvgpbHrFALIVDIGvHTQ15zurwq0oeBTxhfZWfP1Nmk=
Subject key identifier:   C8:15:02:C8:75:DC:F8:6E:43:6B:A7:71:49:0A:35:3B:34:2E:9F:4B
Certificate issuer:       /CN=F999F87E868383FB5DA974A732B21FA770F1AC5C
Certificate serial:       3B8D95F97E829B731D0B04F4C48C392FBDFD568D
Authority key identifier: F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa
Signing time:             Wed 07 Aug 2024 09:01:53 +0000
ROA not before:           Wed 07 Aug 2024 08:56:53 +0000
ROA not after:            Wed 06 Aug 2025 09:01:53 +0000
asID:                     138883
IP address blocks:        103.117.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl
                          rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8d:95:f9:7e:82:9b:73:1d:0b:04:f4:c4:8c:39:2f:bd:fd:56:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F999F87E868383FB5DA974A732B21FA770F1AC5C
        Validity
            Not Before: Aug  7 08:56:53 2024 GMT
            Not After : Aug  6 09:01:53 2025 GMT
        Subject: CN=C81502C875DCF86E436BA771490A353B342E9F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:b9:89:04:1c:5c:f1:c0:f3:85:f8:64:3f:
                    9e:da:72:5f:ed:94:e4:20:78:6d:93:23:e6:02:53:
                    fa:21:48:57:29:68:98:11:bd:05:e0:c9:96:68:e9:
                    c9:45:c7:2b:02:c0:f2:45:e1:7f:ba:36:4d:f2:f2:
                    72:f2:c1:18:a5:66:d2:21:c7:65:48:8c:da:70:47:
                    39:1a:2d:b3:44:da:be:aa:e1:5a:5b:3e:86:aa:20:
                    64:7b:56:0d:23:3d:15:47:ab:de:84:93:69:07:89:
                    fa:5f:68:5b:ee:31:da:6d:89:d6:19:33:6b:ff:51:
                    3b:48:75:74:80:d7:d6:1e:ad:1e:6a:4a:8f:ec:97:
                    bf:3d:05:2d:40:49:fa:2e:2c:86:03:8b:38:ac:57:
                    3b:cd:b6:6e:67:05:80:95:53:10:f2:2d:0c:66:7b:
                    62:7a:98:fa:fd:8b:d0:20:f1:b4:fb:07:9b:50:8b:
                    6c:d7:1c:9e:34:ce:d6:43:8e:95:e8:f5:98:53:9e:
                    5c:a6:39:8b:8e:3f:ea:58:97:c4:1e:0c:4b:2c:bb:
                    26:ac:26:01:fa:bc:91:e8:35:93:ed:e3:1e:73:d8:
                    7c:62:a3:69:94:5f:08:ef:5e:a8:f2:31:36:1c:51:
                    b3:6d:7f:9d:3a:27:3c:fa:98:0e:1e:9e:0e:90:ad:
                    ec:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:15:02:C8:75:DC:F8:6E:43:6B:A7:71:49:0A:35:3B:34:2E:9F:4B
            X509v3 Authority Key Identifier:
                keyid:F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:63:78:aa:c0:70:21:b4:ba:5e:9d:48:62:e5:83:db:cd:d5:
         fc:ce:ed:6c:91:76:21:95:12:3d:5b:f0:53:11:85:7f:ce:0d:
         82:a3:af:7c:b7:25:31:fd:a8:d3:dc:7d:59:00:7b:e5:48:69:
         23:b1:a9:91:bd:4c:61:1a:ab:13:3d:cf:91:03:6a:2f:0d:5c:
         b4:eb:7c:43:fc:f5:51:5b:03:d8:8d:1f:82:64:e9:2a:2e:15:
         ce:4d:bf:72:29:a6:23:e8:73:9b:4e:c4:7a:da:48:ab:4d:a2:
         5b:2f:f8:70:a2:2a:d6:a0:66:d1:63:6c:24:f0:87:5e:79:d4:
         96:d7:3c:d1:b1:8e:4e:c2:8e:5d:35:8d:af:e2:44:d3:76:60:
         63:2c:98:6e:8a:49:51:4c:20:2b:ef:ab:80:45:98:99:6b:4c:
         df:55:05:ea:1b:30:10:9e:58:b9:9b:1c:22:bc:93:5f:ee:ca:
         12:68:2b:3d:f5:6c:e1:9b:94:15:1b:a3:fe:c8:73:e7:e2:03:
         75:02:03:0d:0f:bb:31:a5:e5:59:d6:f4:b0:e8:ca:cc:c6:13:
         8e:64:77:d2:d0:18:19:3e:27:cf:51:58:9b:2f:9b:ea:89:df:
         01:65:e0:9c:6e:90:2b:0c:d1:ed:df:29:67:65:85:0d:0e:ed:
         4f:0e:b6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:31 2024 by rpki-client on console-ams.rpki-client.org