Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/3130332e31382e3134342e302f32322d3234203d3e203538383137.roa
File:                     3130332e31382e3134342e302f32322d3234203d3e203538383137.roa (raw, json)
Hash identifier:          0o1dZly1HSyDWWEt2i9M1vY5SgKnfR722kBmWCwtoQw=
Subject key identifier:   29:6A:A8:52:A3:40:3A:15:AA:2C:D3:71:96:33:7F:D7:42:95:3E:75
Certificate issuer:       /CN=19D983F92968E71520E086B32ACAFEFB5BF04943
Certificate serial:       37B83AD98D495DA086041B69F915B03F094DDADE
Authority key identifier: 19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/3130332e31382e3134342e302f32322d3234203d3e203538383137.roa
Signing time:             Mon 01 Jul 2024 01:02:21 +0000
ROA not before:           Mon 01 Jul 2024 00:57:21 +0000
ROA not after:            Mon 30 Jun 2025 01:02:21 +0000
asID:                     58817
IP address blocks:        103.18.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl
                          rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 22:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b8:3a:d9:8d:49:5d:a0:86:04:1b:69:f9:15:b0:3f:09:4d:da:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19D983F92968E71520E086B32ACAFEFB5BF04943
        Validity
            Not Before: Jul  1 00:57:21 2024 GMT
            Not After : Jun 30 01:02:21 2025 GMT
        Subject: CN=296AA852A3403A15AA2CD37196337FD742953E75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:22:30:b5:77:50:a7:80:8c:da:08:49:ed:eb:
                    31:b1:d1:6d:2d:3f:70:b9:e2:41:ea:59:57:2e:fd:
                    59:5c:c0:7b:ae:e7:50:b9:f6:5e:a6:f7:31:00:e5:
                    1b:10:35:42:df:4d:62:47:44:ff:ec:4f:8a:be:f4:
                    df:14:b2:38:0f:ff:2d:d5:76:1c:d6:ba:2c:b4:f3:
                    23:7a:31:b1:36:7b:f5:dd:41:d7:e5:bc:5f:8f:af:
                    de:11:8d:e1:f8:eb:cb:72:1d:b6:08:dc:a7:7f:c2:
                    90:fb:46:6e:bc:65:34:d6:e6:04:55:af:f2:4d:1f:
                    60:75:c7:dc:bc:4f:90:e6:f3:1c:4a:4d:2a:eb:80:
                    6f:61:35:65:ff:7c:86:1d:c2:f0:cc:96:e7:88:59:
                    e0:24:0f:75:bd:14:66:24:33:18:75:e7:40:af:9a:
                    63:af:24:9e:9f:28:25:c4:df:0f:a3:4e:7d:08:8f:
                    af:b1:fb:99:0a:98:51:fd:42:bf:bd:63:26:9a:af:
                    08:d3:a9:e6:b0:27:44:35:ff:1c:5e:3e:d6:c8:88:
                    ea:06:67:e5:86:36:43:aa:4a:8f:da:dd:b4:62:ee:
                    7a:e4:e9:1c:03:b4:15:59:64:fe:b0:b9:69:2d:88:
                    29:a8:db:f8:46:b9:70:e4:86:bb:b8:ef:51:e5:46:
                    0a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6A:A8:52:A3:40:3A:15:AA:2C:D3:71:96:33:7F:D7:42:95:3E:75
            X509v3 Authority Key Identifier:
                keyid:19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/3130332e31382e3134342e302f32322d3234203d3e203538383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d3:a6:2c:7f:09:03:14:40:92:cc:78:48:36:2b:fd:04:ce:14:
         85:69:a0:3c:ad:9b:3f:1a:25:ef:61:7c:46:fb:a1:cb:ff:e0:
         e9:dd:60:d9:74:e8:40:1b:7a:4f:d9:56:45:a1:f9:24:35:50:
         27:c8:19:5a:93:53:44:bb:81:95:43:f0:1e:9b:35:0c:c0:4a:
         49:78:b1:b3:d0:31:5b:58:65:de:32:f1:93:f3:01:f4:1f:e5:
         61:a1:33:f4:c2:e5:7e:8b:4c:90:28:c0:22:81:89:2c:47:16:
         6b:cc:e0:88:b4:8e:43:78:7c:6c:6f:3e:7a:f6:cf:6c:a8:45:
         3e:ec:d3:6d:78:23:14:29:cb:76:1f:00:c5:6d:d9:7e:51:8b:
         dc:42:ac:54:e9:5c:59:2b:8f:1e:f2:21:6c:f7:22:10:8e:bf:
         7a:0b:42:21:dd:4b:24:6f:35:fe:7c:3a:f2:91:30:d1:1f:a9:
         64:59:a7:90:52:05:4f:89:69:7b:d3:dc:24:45:59:83:1e:07:
         6c:f0:af:0a:d7:a2:2b:36:fd:c9:2b:bc:75:4a:95:ef:98:b8:
         02:86:a7:0c:48:6b:ef:6b:6b:29:fd:e5:7e:4b:bb:37:66:d4:
         8b:8c:61:e9:23:85:35:d8:9b:67:27:9c:62:39:cf:07:5d:a6:
         42:7d:e5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:41 2024 by rpki-client on console-fra.rpki-client.org