Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38312e302f32342d3234203d3e203435373233.roa
File:                     3130332e32382e38312e302f32342d3234203d3e203435373233.roa (raw, json)
Hash identifier:          ePagVnF/OxPUUWC60KDd6WTfdNFt8cA898KqElO8Qi8=
Subject key identifier:   33:9B:9F:CA:B4:63:0E:A9:2F:98:F9:88:FE:95:95:92:43:3B:AB:48
Certificate issuer:       /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25
Certificate serial:       2578E59A4F9D26464CC2D81A898947976C57AE44
Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38312e302f32342d3234203d3e203435373233.roa
Signing time:             Tue 27 Feb 2024 03:19:03 +0000
ROA not before:           Tue 27 Feb 2024 03:14:03 +0000
ROA not after:            Tue 25 Feb 2025 03:19:03 +0000
asID:                     45723
IP address blocks:        103.28.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl
                          rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:78:e5:9a:4f:9d:26:46:4c:c2:d8:1a:89:89:47:97:6c:57:ae:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25
        Validity
            Not Before: Feb 27 03:14:03 2024 GMT
            Not After : Feb 25 03:19:03 2025 GMT
        Subject: CN=339B9FCAB4630EA92F98F988FE959592433BAB48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:00:5f:d3:ee:fa:ae:06:e2:bb:6d:6f:bd:42:
                    c0:bb:05:88:08:95:00:e6:99:55:76:22:66:d0:86:
                    72:80:d9:42:df:a4:99:4c:4f:5c:37:45:0e:e8:98:
                    ae:f8:a3:64:ca:f1:a6:2b:c2:7e:f5:c1:5a:b6:ca:
                    ee:f4:6f:08:ee:38:14:a0:1d:9a:0f:1d:4d:ac:b7:
                    82:50:ff:32:9c:d1:fa:dc:de:54:37:02:5b:8d:f0:
                    87:bd:39:ca:be:4f:b0:f0:34:d2:0b:0a:6e:3d:54:
                    0f:e9:20:34:54:83:8e:6f:29:01:f2:24:de:fd:e9:
                    55:c9:6a:e2:cf:c6:41:d2:96:9c:75:7e:7f:b0:81:
                    1b:3e:5c:6d:2e:c1:e3:86:3d:c9:e6:9a:42:ce:26:
                    79:78:41:93:3f:12:32:9d:bc:1e:dd:80:70:73:1c:
                    36:9a:81:bc:f5:be:76:63:4f:84:5a:ee:5a:b9:fc:
                    99:dd:03:e6:64:f4:c3:10:a3:f8:ff:e8:71:ee:ae:
                    14:b6:38:b8:46:11:3b:13:2c:a1:98:4e:3b:4b:82:
                    07:50:0d:c3:b8:9f:a8:39:91:f7:af:3e:d2:f4:bf:
                    21:b2:4b:cf:cb:e8:5b:16:3e:0c:4e:54:12:70:0f:
                    1b:a8:de:d5:cf:18:d0:7f:db:09:9d:cc:72:cd:50:
                    b5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9B:9F:CA:B4:63:0E:A9:2F:98:F9:88:FE:95:95:92:43:3B:AB:48
            X509v3 Authority Key Identifier:
                keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38312e302f32342d3234203d3e203435373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:0d:28:30:d8:79:d3:e9:ce:d4:99:ac:0b:91:f5:7e:4c:13:
         86:34:73:69:3e:55:36:7d:67:f5:45:e1:c3:6f:04:e4:ce:fe:
         87:a5:0c:10:9e:f9:f9:05:e5:13:ae:35:1a:79:16:ca:bf:2d:
         62:d7:ac:0a:d7:3f:4c:68:d3:47:56:08:46:0c:2a:ff:eb:72:
         2a:69:f0:d4:68:1e:3d:d4:3a:5b:8e:61:a5:1a:5c:a9:3d:83:
         27:76:7a:77:89:12:e6:c7:fe:bc:53:3f:58:bd:fc:15:0a:f9:
         40:ad:93:99:5f:25:e7:38:e3:ed:ab:c3:8f:04:ac:a4:95:b8:
         72:59:8d:ea:70:90:b9:eb:9e:7b:b4:d0:db:eb:6e:95:a9:54:
         ac:27:c1:c7:23:9d:36:a0:3f:3d:d3:ce:89:04:7b:90:33:0b:
         88:3b:a8:77:20:a9:78:c8:2e:c6:f5:e0:18:19:ad:24:78:aa:
         59:c5:39:41:d0:8e:60:c5:55:74:2d:2f:b5:49:5b:3e:2d:59:
         11:2a:c6:90:34:ba:ef:6e:48:ab:f4:4b:3b:7e:70:d4:77:90:
         64:9c:42:94:4c:a5:45:6a:06:d8:78:49:28:2e:34:29:ee:f3:
         69:ee:a4:fc:99:0e:ba:1f:a7:0c:29:5a:88:2a:e9:58:e3:21:
         07:c5:1b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:13:37 2024 by rpki-client on console-fra.rpki-client.org