Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38302e302f32342d3234203d3e203435373233.roa
File:                     3130332e32382e38302e302f32342d3234203d3e203435373233.roa (raw, json)
Hash identifier:          zh8C8yEgsQWITe2mVcIv2qnZDKZW2Dq6vUbCBbqtFxQ=
Subject key identifier:   0B:75:01:94:4E:4E:9E:F6:B2:15:C7:3E:5D:34:79:C3:F0:4D:A5:8F
Certificate issuer:       /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25
Certificate serial:       202C38DBA88FB75C2DD927BF1D6D280186692DA4
Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38302e302f32342d3234203d3e203435373233.roa
Signing time:             Tue 27 Feb 2024 03:19:56 +0000
ROA not before:           Tue 27 Feb 2024 03:14:56 +0000
ROA not after:            Tue 25 Feb 2025 03:19:56 +0000
asID:                     45723
IP address blocks:        103.28.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl
                          rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2c:38:db:a8:8f:b7:5c:2d:d9:27:bf:1d:6d:28:01:86:69:2d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25
        Validity
            Not Before: Feb 27 03:14:56 2024 GMT
            Not After : Feb 25 03:19:56 2025 GMT
        Subject: CN=0B7501944E4E9EF6B215C73E5D3479C3F04DA58F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:04:41:06:e6:d5:f0:90:2a:68:99:0b:09:
                    e8:81:9c:c5:a7:65:8d:57:71:02:64:e2:3f:fd:b5:
                    54:5d:cd:2e:bf:57:d3:e1:88:07:81:07:6e:07:95:
                    88:87:1d:ee:07:2b:42:39:1a:e1:36:01:30:ce:3b:
                    c4:70:08:19:05:82:f0:fb:93:3e:c3:f6:b6:ad:b4:
                    20:33:f1:a5:5e:c2:a9:d5:2d:f5:51:19:64:cb:84:
                    8f:73:9d:ad:c0:3a:05:47:87:67:32:9c:1f:21:64:
                    21:fa:50:ec:e9:3d:4d:72:45:89:8a:2a:b5:e3:b1:
                    2b:18:c3:b2:cf:6a:71:f6:0e:69:05:16:eb:08:e4:
                    e2:81:7d:72:11:29:24:9d:33:4c:7c:a0:ef:3f:f9:
                    8a:2c:b8:d0:d1:b8:5e:1c:1a:1c:72:d6:55:7f:f7:
                    3b:6b:f0:1d:88:04:a2:f7:00:27:e0:40:ab:8f:ce:
                    2d:16:8e:7e:40:6b:cc:3f:74:19:8d:47:47:ae:c2:
                    2b:04:dd:ee:62:50:53:3c:25:53:44:58:09:fa:55:
                    09:3b:21:7a:9c:0b:65:00:ce:69:6c:ec:96:dd:b3:
                    48:21:d8:a8:7d:1f:5e:5f:6f:a4:e7:e5:bd:6b:22:
                    d0:bf:05:d1:5b:9e:f6:09:9a:2d:74:34:80:49:b1:
                    9c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:75:01:94:4E:4E:9E:F6:B2:15:C7:3E:5D:34:79:C3:F0:4D:A5:8F
            X509v3 Authority Key Identifier:
                keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38302e302f32342d3234203d3e203435373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:ed:eb:b6:de:19:e0:7b:92:7d:00:64:b2:56:46:ca:88:7d:
         c2:1c:9e:ad:08:c3:ce:9a:88:10:d4:ad:94:e3:43:45:c4:fc:
         ba:41:c8:06:59:b2:39:d8:05:ea:24:37:91:d7:07:77:a2:6a:
         5d:e1:29:4e:53:f5:e2:7c:ed:2a:a5:5e:13:8e:2d:29:c2:cb:
         a8:5d:16:2b:02:2c:39:79:5f:26:70:6c:45:3f:1e:43:e2:08:
         1b:28:b0:21:6b:d1:a9:f3:8a:28:8b:88:cc:4d:1c:6c:b0:9b:
         c7:f0:fb:84:03:c9:ae:92:28:de:56:29:94:21:15:10:bd:a7:
         06:57:b9:bd:2c:f5:75:b5:1b:78:8f:b5:41:75:71:48:eb:5f:
         9c:a0:0c:fe:38:a7:a9:87:ef:32:b6:32:a2:4f:f2:fd:2e:e2:
         da:b0:24:85:fa:26:b8:90:55:12:fe:b7:96:4c:29:7e:0b:1c:
         b8:e2:74:82:d0:cf:d1:ea:e4:fa:1c:b2:10:9e:01:2d:9e:77:
         46:e5:4f:7c:6f:47:f7:52:09:ad:4f:dd:e4:ba:f3:9f:75:b0:
         aa:e6:6f:db:3e:e6:b9:ae:6b:ca:41:c9:7f:04:02:e2:bd:19:
         c7:56:6c:ca:b6:90:5a:9b:da:38:91:76:23:47:00:f8:1b:c7:
         2b:c3:19:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:59:32 2024 by rpki-client on console-ams.rpki-client.org