Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa
File:                     3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (raw, json)
Hash identifier:          FPt98Jlb07JrGQGNjE2/vKY/2MGs525PrXsgLkmv66M=
Subject key identifier:   51:1A:0E:71:A2:E9:40:07:79:54:C9:19:64:E4:4A:E6:F9:6F:8E:08
Certificate issuer:       /CN=2985976A4B3081770748882703E16497964D05A6
Certificate serial:       73DFB6418ACC0204E05839E64FB16487EA96D706
Authority key identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa
Signing time:             Mon 01 Jul 2024 10:01:11 +0000
ROA not before:           Mon 01 Jul 2024 09:56:11 +0000
ROA not after:            Mon 30 Jun 2025 10:01:11 +0000
asID:                     134623
IP address blocks:        103.197.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl
                          rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:df:b6:41:8a:cc:02:04:e0:58:39:e6:4f:b1:64:87:ea:96:d7:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2985976A4B3081770748882703E16497964D05A6
        Validity
            Not Before: Jul  1 09:56:11 2024 GMT
            Not After : Jun 30 10:01:11 2025 GMT
        Subject: CN=511A0E71A2E940077954C91964E44AE6F96F8E08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:3e:35:dd:70:a7:50:78:20:62:9d:39:61:
                    8c:23:77:3d:fc:27:25:df:09:fb:a7:da:d8:c4:e7:
                    4a:62:d8:db:82:30:a7:d4:74:e5:3b:a5:f1:00:f9:
                    a1:f7:62:ec:1a:59:ab:d8:55:24:be:04:73:31:bd:
                    0d:5c:78:c7:b7:70:ca:be:b3:0b:26:2f:06:22:67:
                    fc:a7:d7:43:8e:bc:d1:90:4c:69:36:2e:8a:32:44:
                    4c:4d:c5:1c:12:4d:ca:49:9c:00:2f:49:41:0e:3c:
                    4c:50:c6:40:d4:bf:1c:47:b3:85:4d:25:56:f8:84:
                    37:26:f3:93:16:fe:fd:2d:1b:8a:b6:37:75:33:dc:
                    22:cb:77:31:75:e9:a3:e9:cf:b1:45:5c:27:98:a8:
                    91:a8:e7:ec:b4:97:a7:31:5a:54:a4:a5:cb:c3:23:
                    4d:c1:3c:a6:72:e4:1f:89:2b:78:1c:69:6a:ef:91:
                    0a:fd:11:d6:6b:38:4c:99:8e:70:13:e3:7d:a6:83:
                    a7:70:cd:9e:20:47:14:53:54:43:45:1f:aa:4a:ee:
                    5d:cc:f0:bb:a9:50:0f:5c:3d:5b:a2:c1:0e:70:d4:
                    a2:7c:94:14:68:39:8d:a8:97:1a:9c:60:f7:6a:d9:
                    13:4c:c1:7d:68:e1:f6:c7:49:96:65:59:48:36:01:
                    29:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1A:0E:71:A2:E9:40:07:79:54:C9:19:64:E4:4A:E6:F9:6F:8E:08
            X509v3 Authority Key Identifier:
                keyid:29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:6c:c3:a5:e6:b6:7b:97:2b:87:f5:32:60:40:f0:19:83:c6:
         07:35:98:3a:57:1e:69:ba:fe:10:cc:61:50:d4:52:35:46:77:
         70:ef:8a:4a:07:6d:74:3a:a4:be:97:bb:a8:0e:f8:7f:38:f3:
         7d:ee:ae:a5:25:6f:8a:33:f6:96:19:d3:ab:16:9e:ff:1c:ae:
         68:16:26:42:21:00:b3:65:e5:a9:f0:cd:6f:48:b4:16:4b:e7:
         46:87:37:3d:ac:c1:f5:08:0c:f0:a8:1c:58:40:30:46:44:71:
         e1:40:d7:19:ea:81:67:d0:30:73:b7:35:52:eb:ad:3d:f5:bf:
         01:b2:98:dc:d6:f7:66:7a:b9:d2:77:6f:b2:a1:e5:6c:b2:9f:
         2f:9a:1f:53:e9:d0:0a:42:a1:cf:06:21:8b:5b:93:28:45:51:
         96:c3:45:dd:e8:b0:2d:86:9f:70:29:52:82:d7:27:b9:0a:d5:
         0e:b7:2e:2d:ec:40:44:c1:46:75:8f:12:73:d9:ae:eb:84:38:
         6e:3b:dc:5b:01:eb:07:bc:26:49:aa:a9:c4:03:ce:ac:5e:64:
         53:7c:9c:e6:4f:45:a0:bc:10:25:08:87:19:a1:25:4e:07:53:
         32:86:c5:f5:97:e3:99:c1:50:aa:83:63:0a:13:94:4f:04:6a:
         5f:a4:5f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:28:51 2024 by rpki-client on console-fra.rpki-client.org