Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35382e302f32342d3234203d3e20313332363337.roa
File:                     3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (raw, json)
Hash identifier:          Se+JQojVLCUto29ucN5SOimVnmTwAPvqyMOWkGKak7Q=
Subject key identifier:   BB:EC:C7:8B:77:89:1C:7B:02:9B:1A:9B:8D:A1:13:74:4F:5B:EC:0A
Certificate issuer:       /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD
Certificate serial:       30B9822DE86F970AA398A655558BBF35FD21860A
Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35382e302f32342d3234203d3e20313332363337.roa
Signing time:             Mon 01 Jul 2024 01:06:06 +0000
ROA not before:           Mon 01 Jul 2024 01:01:06 +0000
ROA not after:            Mon 30 Jun 2025 01:06:06 +0000
asID:                     132637
IP address blocks:        103.19.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl
                          rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b9:82:2d:e8:6f:97:0a:a3:98:a6:55:55:8b:bf:35:fd:21:86:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD
        Validity
            Not Before: Jul  1 01:01:06 2024 GMT
            Not After : Jun 30 01:06:06 2025 GMT
        Subject: CN=BBECC78B77891C7B029B1A9B8DA113744F5BEC0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a0:48:84:39:79:39:c9:97:e9:66:92:85:39:
                    86:01:38:ef:c4:4f:8d:79:6f:c5:57:fa:74:94:e4:
                    4f:ab:38:6e:8c:0f:7f:54:fb:30:4a:03:29:a0:fa:
                    1a:ca:2a:d5:8b:82:43:7c:d8:0b:a6:5c:cf:f8:55:
                    26:ec:76:79:8f:e5:b1:c4:3d:ed:84:36:b4:ed:f6:
                    e4:70:4d:72:f4:31:ea:65:f2:0b:2e:d8:82:19:22:
                    b8:ca:7f:e7:79:62:65:75:e6:a5:ad:c2:98:19:e5:
                    28:cf:42:ac:34:d1:c5:e3:98:27:6d:10:74:b7:93:
                    be:49:95:86:f9:e8:3e:44:7f:dd:63:b9:e4:3e:b6:
                    5a:b9:62:27:3d:8e:2c:2e:cb:f1:19:49:c1:ee:85:
                    36:9c:a9:e8:ea:83:b1:65:91:39:6c:3e:2f:20:9e:
                    c0:b5:30:23:bf:a3:07:a8:c1:b7:1b:23:8f:1a:35:
                    09:c8:ce:cd:5b:93:a6:de:d2:b9:ec:91:80:36:14:
                    9c:0a:59:31:a8:9d:38:ee:76:f3:56:aa:32:19:ce:
                    a0:94:95:22:03:64:82:26:b8:c9:ae:e5:65:96:f3:
                    71:11:95:6e:65:33:52:14:40:20:02:eb:ed:5b:82:
                    ad:ff:07:e5:64:80:3b:e5:5a:a1:d9:46:c6:ab:5c:
                    56:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:EC:C7:8B:77:89:1C:7B:02:9B:1A:9B:8D:A1:13:74:4F:5B:EC:0A
            X509v3 Authority Key Identifier:
                keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35382e302f32342d3234203d3e20313332363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:60:08:b6:31:e5:cf:65:ad:b6:ec:60:6f:e8:be:c5:93:06:
         c8:e1:20:fc:fa:fd:98:a6:98:46:77:79:e6:ce:5d:9b:56:d1:
         0c:47:40:e5:b2:c5:2b:b7:00:25:16:b0:71:5f:84:ac:5b:8f:
         7c:79:d5:a5:bd:2c:92:0b:97:81:2f:b6:eb:2f:54:78:a9:93:
         db:c5:0a:fd:08:e3:3f:31:16:93:5a:b7:8f:87:e0:78:22:03:
         3c:eb:d2:80:c8:67:76:46:9c:28:af:d4:f6:82:93:f4:8f:e9:
         0a:f9:8d:f1:2b:89:47:e5:94:1e:3c:13:4f:53:f2:a4:e4:15:
         f4:1a:75:d7:04:bc:c3:d7:d7:62:8b:32:22:bb:2a:bb:55:f4:
         b0:17:2f:22:90:56:d3:b4:6c:1f:d3:cc:05:7f:03:1e:19:ac:
         41:91:97:80:c4:71:66:03:2c:21:80:bf:17:79:ba:88:de:04:
         20:20:76:f5:30:3e:e5:13:02:23:73:07:6c:21:80:eb:80:27:
         8f:d7:7a:f9:e7:0f:99:78:3c:84:8f:4c:f8:46:ec:de:6d:ec:
         5e:ff:9c:4a:d0:13:e8:53:4b:21:e9:54:53:06:a5:29:48:0a:
         95:45:d9:dc:d0:c7:46:5f:8c:e8:10:f7:f6:be:7f:30:75:9e:
         4c:cc:5f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:27 2024 by rpki-client on console-ams.rpki-client.org