Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e382e302f32322d3232203d3e20313331373137.roa
File:                     3130332e3131302e382e302f32322d3232203d3e20313331373137.roa (raw, json)
Hash identifier:          pX7k3ZuG4xOOUuk1ngzA+y7GWKvpGHKk6TxYVimyz5o=
Subject key identifier:   AA:7E:D8:D9:C7:F3:B0:D7:79:9F:DB:E6:36:1F:0F:00:31:B0:B7:C4
Certificate issuer:       /CN=2FB994CD1282292E6D2907FCECD7F9E472F49985
Certificate serial:       209B99EA5330BEC67E5863FA882C25939A8AFCC6
Authority key identifier: 2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e382e302f32322d3232203d3e20313331373137.roa
Signing time:             Mon 01 Jul 2024 01:05:21 +0000
ROA not before:           Mon 01 Jul 2024 01:00:21 +0000
ROA not after:            Mon 30 Jun 2025 01:05:21 +0000
asID:                     131717
IP address blocks:        103.110.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl
                          rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9b:99:ea:53:30:be:c6:7e:58:63:fa:88:2c:25:93:9a:8a:fc:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB994CD1282292E6D2907FCECD7F9E472F49985
        Validity
            Not Before: Jul  1 01:00:21 2024 GMT
            Not After : Jun 30 01:05:21 2025 GMT
        Subject: CN=AA7ED8D9C7F3B0D7799FDBE6361F0F0031B0B7C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:12:8d:a2:28:4d:1f:26:92:a8:b4:43:32:1c:
                    d8:6e:f9:59:1d:41:25:4d:cd:c4:7b:27:cd:21:67:
                    1a:f9:90:24:1a:6f:21:5a:f4:53:e7:0e:83:35:0c:
                    0a:a6:75:07:c6:06:d8:fc:b7:5f:c2:c8:f9:36:22:
                    98:81:15:fa:b7:ba:54:80:4c:f1:b3:95:80:20:4c:
                    4f:04:56:5d:e1:26:48:04:4f:b4:9e:4e:42:20:a4:
                    64:d0:d3:d7:30:fb:01:a6:fe:6c:62:b0:a1:09:1a:
                    b8:88:c9:c4:fb:39:28:cd:00:4e:d3:49:70:38:55:
                    0d:09:94:4b:11:5d:d9:5e:93:6c:1a:db:fb:ef:c8:
                    fc:bd:4e:8c:00:ba:20:0f:2b:f0:d1:40:41:3e:ad:
                    ea:fd:57:64:ad:88:15:c7:d6:4c:51:19:4c:ae:2b:
                    28:36:00:36:8d:df:a0:9a:b5:e8:40:e0:64:d4:43:
                    6d:ca:19:66:e9:b7:c5:06:b9:0e:74:d1:25:6d:fe:
                    06:a6:46:eb:09:a6:8c:11:bc:66:dd:84:39:cc:dd:
                    59:86:83:59:90:bb:ef:84:b1:1e:3d:78:b3:7e:e8:
                    2e:a0:98:75:38:0c:dc:78:e9:d3:90:40:b3:3b:50:
                    ef:ff:5b:00:bc:d3:24:bd:9c:cd:ee:1a:23:fd:66:
                    f5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7E:D8:D9:C7:F3:B0:D7:79:9F:DB:E6:36:1F:0F:00:31:B0:B7:C4
            X509v3 Authority Key Identifier:
                keyid:2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e382e302f32322d3232203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:44:a0:f7:9d:bf:11:b5:b8:19:e3:18:34:44:b4:03:85:1d:
         5a:1d:df:8b:dc:5e:2b:7f:9c:5a:3a:89:c1:fd:51:0d:9f:11:
         56:74:a6:ae:a8:e1:60:cd:24:96:7c:a5:c6:a0:7f:21:a7:4f:
         ed:c0:ee:0e:7c:cd:8b:0a:95:b4:5c:47:28:9e:0e:cd:a0:e2:
         00:c7:7c:0f:44:00:35:c6:8d:ca:37:7b:b0:76:de:42:36:ce:
         4e:c8:bd:9e:22:75:6e:b4:75:11:e7:7c:89:86:f6:c9:df:92:
         2d:99:01:01:01:a6:68:cd:e2:d4:15:c1:4a:7a:46:e2:42:29:
         b1:67:48:2f:47:51:de:c5:49:14:af:80:77:ab:1d:b8:70:d2:
         53:00:5c:92:e4:7b:3e:ce:4b:00:b6:19:a8:5c:98:30:05:20:
         60:b9:4d:4a:99:2a:41:e2:5d:67:4a:99:5d:25:2e:81:af:81:
         31:df:06:dd:33:e5:3b:69:84:70:85:15:2b:bf:73:ab:3a:84:
         6c:1c:66:4a:66:25:5e:07:f9:c6:64:75:de:56:70:91:8d:e2:
         0a:e5:a9:30:88:a5:51:8f:a6:98:53:e8:18:5a:e9:97:c0:4d:
         7c:db:17:9e:b8:e6:fc:cd:84:bb:0d:48:fe:37:54:3c:a9:12:
         ba:9f:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:39 2024 by rpki-client on console-fra.rpki-client.org