Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39362e302f32322d3234203d3e203137343530.roa
File:                     3130332e382e39362e302f32322d3234203d3e203137343530.roa (raw, json)
Hash identifier:          E/ANh8Obcj2c5y2FA6Ly1F0NL4tMRGMfZqDmckfRl5E=
Subject key identifier:   1D:1F:39:8C:2C:4E:C3:82:09:68:13:E2:3B:D9:2D:F9:00:91:56:07
Certificate issuer:       /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Certificate serial:       62ACF4822C1DADE279F26E38CE813835DB142D50
Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39362e302f32322d3234203d3e203137343530.roa
Signing time:             Wed 11 Sep 2024 09:00:01 +0000
ROA not before:           Wed 11 Sep 2024 08:55:01 +0000
ROA not after:            Wed 10 Sep 2025 09:00:01 +0000
asID:                     17450
IP address blocks:        103.8.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl
                          rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ac:f4:82:2c:1d:ad:e2:79:f2:6e:38:ce:81:38:35:db:14:2d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
        Validity
            Not Before: Sep 11 08:55:01 2024 GMT
            Not After : Sep 10 09:00:01 2025 GMT
        Subject: CN=1D1F398C2C4EC382096813E23BD92DF900915607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:e0:94:ab:b3:74:4f:53:11:9d:9e:a7:de:
                    71:54:8a:03:29:03:e4:ec:64:a9:6b:54:44:27:e7:
                    95:80:e4:72:ae:5e:b3:bc:11:bd:51:57:0d:45:6f:
                    b4:08:47:ed:ea:b5:4d:9d:ee:ab:e2:10:6e:2d:af:
                    98:a4:08:8b:82:76:63:b9:d5:85:14:63:81:67:0f:
                    fb:81:99:a8:a3:b9:09:9e:cb:26:8e:9e:fe:19:e4:
                    ee:a0:5d:c2:50:3f:20:0d:0c:19:89:07:55:95:c4:
                    2c:a4:9d:e5:0e:2c:cd:e4:ba:52:ee:76:a5:6c:75:
                    74:33:45:95:5a:21:39:1a:b6:1f:22:8b:4a:af:91:
                    23:fb:dd:0a:08:69:87:25:28:bc:95:d6:32:d2:8f:
                    67:e4:2a:7a:48:d5:00:0e:00:aa:f4:c9:4b:c5:ec:
                    71:6e:79:68:34:19:50:0d:22:11:48:63:15:62:a5:
                    0f:f0:c6:ff:55:b1:74:dc:ca:dc:c8:f1:8d:41:47:
                    dd:28:3b:86:91:6d:46:6c:5f:23:3f:d7:b0:8a:c2:
                    ac:df:7b:13:4c:e0:e5:00:38:2f:1a:2d:77:b5:a9:
                    64:be:cd:31:f4:b0:fd:d6:21:4b:7e:cc:91:a8:13:
                    5c:29:97:ca:c9:07:b7:fc:53:c2:98:bc:f9:99:b0:
                    6a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1F:39:8C:2C:4E:C3:82:09:68:13:E2:3B:D9:2D:F9:00:91:56:07
            X509v3 Authority Key Identifier:
                keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39362e302f32322d3234203d3e203137343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:85:9a:b3:a9:05:62:70:27:2f:70:0f:37:47:0a:03:d5:8e:
         6e:07:45:2b:d8:95:dc:3e:c9:9e:71:f4:b1:d0:d8:b6:3c:22:
         b0:f3:14:ef:32:a7:1f:71:4e:14:dd:42:48:1a:f1:35:9d:c9:
         ae:63:05:f0:50:6d:26:de:33:9b:42:3b:c7:78:c0:cf:f2:3b:
         eb:57:0c:70:fa:1f:02:c7:24:dd:e3:9d:e0:99:b6:88:59:b5:
         cf:1e:8d:09:cf:03:b4:8a:cd:d7:09:52:00:42:ba:6b:dc:f5:
         3f:7a:84:75:51:44:0a:50:1f:26:3c:3a:a5:5d:45:48:e9:f2:
         64:00:d1:17:e0:5e:23:84:a5:a1:e2:46:44:0f:7a:20:c9:55:
         12:99:8a:79:7a:90:a4:2a:ba:64:41:38:6f:68:26:24:1c:9b:
         cc:6f:aa:e2:46:c9:9e:8c:1d:b1:68:a4:12:25:6a:b8:96:02:
         ed:91:c2:89:a0:d4:6b:39:4d:06:b5:db:51:20:c4:b0:c9:0b:
         2e:6e:81:71:e1:28:05:a3:29:61:f7:96:55:da:30:c1:87:ae:
         4a:5c:a2:59:5d:dd:61:e2:c6:e7:9c:63:49:b3:c5:c3:62:20:
         94:49:27:90:fd:38:c5:50:87:37:96:aa:d0:f3:d2:47:df:f3:
         66:d8:d4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:50 2024 by rpki-client on console-fra.rpki-client.org