Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134332e302f32342d3234203d3e2039333431.roa
File:                     3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          gwUhQCLpG414frqxV/A3eihir8ysCdrvlyk1yD6ay90=
Subject key identifier:   1E:7F:CF:A6:C9:B5:64:73:72:4B:B3:80:D8:93:02:5D:32:20:42:F7
Certificate issuer:       /CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40
Certificate serial:       582D45CD69071FB9FDBB187D96749F112DC804AB
Authority key identifier: AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134332e302f32342d3234203d3e2039333431.roa
Signing time:             Mon 26 Aug 2024 16:00:00 +0000
ROA not before:           Mon 26 Aug 2024 15:55:00 +0000
ROA not after:            Mon 25 Aug 2025 16:00:00 +0000
asID:                     9341
IP address blocks:        103.17.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl
                          rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2d:45:cd:69:07:1f:b9:fd:bb:18:7d:96:74:9f:11:2d:c8:04:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40
        Validity
            Not Before: Aug 26 15:55:00 2024 GMT
            Not After : Aug 25 16:00:00 2025 GMT
        Subject: CN=1E7FCFA6C9B56473724BB380D893025D322042F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:2d:d9:79:6f:24:b5:c2:91:12:84:cb:9d:
                    f9:bc:0e:ac:ff:d9:ab:3e:32:52:38:81:4d:1f:01:
                    ae:df:9b:eb:db:35:39:81:de:ad:47:c9:cf:3a:19:
                    b3:49:13:ae:68:d0:c8:a4:8c:65:2a:62:97:05:58:
                    c5:8d:7b:af:b9:f7:d3:98:57:77:01:aa:82:f3:d4:
                    27:f5:55:f1:17:eb:ed:78:fc:f0:79:c8:c2:27:01:
                    27:c3:af:b1:fb:fe:20:d7:65:1e:60:6a:d0:6f:03:
                    4d:ca:67:71:6a:5b:f9:18:55:ae:47:1a:71:a5:e1:
                    2d:17:be:75:c0:41:97:86:df:7f:a4:c0:d8:ed:91:
                    34:37:fd:85:63:1d:d9:dc:31:f5:be:44:4a:11:ab:
                    44:34:dd:1e:d4:f9:38:5e:b2:00:f4:44:ff:22:a3:
                    0d:50:9f:13:24:f2:6a:55:b7:1f:a2:36:99:f0:12:
                    2c:8f:63:20:f3:63:46:e4:46:45:29:de:65:ad:51:
                    d6:34:8f:85:30:a9:00:09:f3:95:13:e7:50:ba:1b:
                    85:5f:cf:12:5a:e9:3f:94:57:5f:33:37:40:bd:8a:
                    88:89:b1:7b:f9:24:0c:95:40:1e:0a:83:33:46:87:
                    d8:a5:af:1d:58:0b:c6:b7:87:70:4a:8e:f1:73:a1:
                    e9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7F:CF:A6:C9:B5:64:73:72:4B:B3:80:D8:93:02:5D:32:20:42:F7
            X509v3 Authority Key Identifier:
                keyid:AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134332e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:cd:49:59:5b:2e:15:f3:d3:53:20:e6:b9:a6:01:1b:4f:e0:
         ee:82:97:35:40:53:dc:9f:ea:53:6b:89:b0:ca:5a:b6:51:b6:
         6f:1b:6f:3d:1b:7e:2c:87:d1:76:9d:4e:03:b9:b3:d6:b8:52:
         1e:b0:f3:60:c1:9b:63:60:8e:77:10:5f:ac:13:0a:92:40:41:
         8a:c0:62:85:6f:1d:c4:63:86:e1:7c:09:f3:ee:cb:79:89:be:
         af:09:f6:90:9d:52:d9:8e:93:b9:8b:46:70:21:ea:a8:bd:71:
         13:4d:30:c9:61:ef:ae:7a:f6:2e:da:c7:14:61:9b:8a:95:e4:
         d1:64:a5:06:f7:4b:13:e0:f6:25:1c:56:2b:13:3c:f1:07:83:
         b3:39:99:dd:57:d7:c0:6f:4e:78:77:d5:d9:8e:20:68:d9:cc:
         6d:b1:80:10:6a:1e:ba:71:8e:ea:4b:0d:9d:b1:d8:3c:cd:96:
         76:43:78:f3:50:28:c8:e8:24:eb:15:29:de:52:72:94:b4:12:
         b1:9a:d3:a2:9d:c5:82:5e:82:1a:8b:b5:da:73:3a:99:53:65:
         9c:e4:13:de:1b:6a:e8:53:6c:01:f8:fe:c4:0a:de:f2:a0:ea:
         ca:5f:ab:59:6a:39:d6:b6:a3:12:5c:68:95:f2:0f:1c:69:31:
         d6:0f:e4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:27 2024 by rpki-client on console-fra.rpki-client.org