Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa
File:                     3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (raw, json)
Hash identifier:          jZ2VCixJokCjVkqlhzv/JzHDhAkV+oo6GioQBGOSoX4=
Subject key identifier:   B7:E6:33:BA:2F:AC:58:80:94:A3:2A:2F:88:33:B5:AE:F2:35:A3:94
Certificate issuer:       /CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC
Certificate serial:       08A608C50375F867027513D48445BFE4017F1D5F
Authority key identifier: B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa
Signing time:             Thu 17 Oct 2024 08:00:00 +0000
ROA not before:           Thu 17 Oct 2024 07:55:00 +0000
ROA not after:            Thu 16 Oct 2025 08:00:00 +0000
asID:                     134658
IP address blocks:        103.210.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl
                          rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a6:08:c5:03:75:f8:67:02:75:13:d4:84:45:bf:e4:01:7f:1d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC
        Validity
            Not Before: Oct 17 07:55:00 2024 GMT
            Not After : Oct 16 08:00:00 2025 GMT
        Subject: CN=B7E633BA2FAC588094A32A2F8833B5AEF235A394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:68:6a:d9:1a:52:db:c0:35:ea:3f:af:c9:11:
                    30:fe:9f:78:ce:df:d7:95:f7:b9:46:40:e5:dd:e7:
                    6d:20:78:87:af:87:56:f4:29:19:56:b3:0b:27:40:
                    d4:7d:e6:b8:d1:a1:ef:f5:81:3a:e6:15:cd:77:31:
                    16:a1:83:89:ef:af:b5:ba:cb:9e:6a:91:06:85:96:
                    26:dd:cd:5f:ca:13:d6:22:d0:eb:b8:f3:09:6d:36:
                    58:fc:b4:0b:a4:56:a3:b1:c5:50:60:91:1e:1d:26:
                    d1:a6:3d:d1:68:93:95:1b:26:47:28:a6:24:c5:39:
                    fe:e5:cf:be:3c:78:ba:50:26:dd:56:e0:79:88:86:
                    58:5e:aa:5b:86:f9:33:12:c9:16:ae:b0:d9:16:9a:
                    be:aa:9f:36:e3:b0:85:71:37:0b:a0:a9:c5:6f:15:
                    49:6b:d4:6b:39:ad:c6:a3:b4:1e:d6:7d:22:3b:74:
                    27:5b:4c:01:76:75:44:90:38:65:d4:1e:f8:2a:05:
                    7f:3e:bd:f4:6a:ad:f2:50:ac:37:da:38:71:58:01:
                    a0:78:f2:e5:d5:94:47:b9:30:19:c4:4d:c8:55:10:
                    24:f8:fc:cb:f1:3c:0d:31:07:00:13:cb:b1:38:1c:
                    30:33:17:54:03:79:6a:d6:39:39:44:af:6e:76:b2:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E6:33:BA:2F:AC:58:80:94:A3:2A:2F:88:33:B5:AE:F2:35:A3:94
            X509v3 Authority Key Identifier:
                keyid:B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:7f:63:ee:cf:70:62:66:be:be:92:4a:21:da:34:4e:80:e8:
         06:33:44:52:76:d5:0f:30:2e:66:0f:17:9f:b7:db:bf:89:23:
         7f:bb:38:5c:6e:57:fc:05:60:e7:3a:ea:12:cf:46:62:9f:a4:
         e5:c2:03:61:cc:e6:16:63:1c:d2:92:1c:60:c8:56:9a:7d:e3:
         3b:eb:d1:69:55:54:98:86:de:37:68:b3:c9:cf:dd:bb:32:60:
         a0:58:9c:0b:65:ae:56:bf:30:e0:5b:ff:71:90:d5:8a:a1:3a:
         03:8d:7d:28:8d:ae:83:06:3a:34:27:5b:0d:bf:99:d4:58:e1:
         48:1e:2f:59:42:a3:de:27:83:d6:5a:7d:d0:4c:db:48:4d:82:
         0d:fc:57:a9:61:e0:0b:3b:ef:ce:5e:6a:1d:14:8a:aa:20:39:
         ea:2f:e8:83:79:f0:a5:97:87:ec:d6:48:0c:09:d9:23:c5:4f:
         d8:f7:01:1d:74:b4:cb:2a:60:19:2e:75:89:74:0a:c1:f9:3b:
         82:c2:e5:a3:c0:6a:7f:a4:6f:c7:13:41:a1:04:34:4d:ef:c7:
         c1:a9:50:b7:78:d1:93:8b:a5:f6:2f:7d:12:f2:d8:88:36:56:
         0e:6d:98:a8:6d:b2:b2:11:6d:e1:1a:19:6a:25:1b:b7:ae:95:
         ad:0f:a6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:21 2024 by rpki-client on console-fra.rpki-client.org