Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa
File:                     3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (raw, json)
Hash identifier:          Lyic6tpyx8dE3BSp7Wiu55L5Zbno6Dp9EUOJ8PKwjfM=
Subject key identifier:   F9:1A:74:A6:2B:4C:12:CE:C5:3D:F8:18:59:44:6F:59:00:A2:8A:4F
Certificate issuer:       /CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67
Certificate serial:       5705F905B955D56A26B7545C0E24AD861B85BB25
Authority key identifier: 3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa
Signing time:             Fri 14 Jun 2024 04:00:57 +0000
ROA not before:           Fri 14 Jun 2024 03:55:57 +0000
ROA not after:            Fri 13 Jun 2025 04:00:57 +0000
asID:                     142370
IP address blocks:        103.227.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl
                          rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:05:f9:05:b9:55:d5:6a:26:b7:54:5c:0e:24:ad:86:1b:85:bb:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67
        Validity
            Not Before: Jun 14 03:55:57 2024 GMT
            Not After : Jun 13 04:00:57 2025 GMT
        Subject: CN=F91A74A62B4C12CEC53DF81859446F5900A28A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:3a:cb:34:ae:26:36:67:d1:a8:c6:dd:44:
                    98:78:3d:54:d6:b9:b7:75:3a:4a:ab:67:5e:c6:c6:
                    db:eb:00:62:93:2f:d1:9e:7c:d5:45:df:0f:fc:92:
                    3a:65:e6:b4:77:4a:6c:a0:de:7a:b2:bc:fa:11:12:
                    03:37:e5:df:34:61:d2:56:bd:44:1b:c4:56:0b:50:
                    2e:bd:f9:6e:04:9e:c7:79:b7:ad:98:db:b8:d3:18:
                    d0:c8:db:17:cf:b1:a4:c1:07:c7:00:23:ab:c8:a1:
                    94:df:f8:7d:8d:00:5d:08:18:b4:bc:a2:15:23:6b:
                    58:dc:85:6e:1d:1f:8f:28:d0:42:78:ac:d7:19:9f:
                    43:61:f8:90:cf:bb:e3:25:77:7b:09:d7:bc:ac:71:
                    6e:53:97:49:1c:e6:c2:1d:35:fe:81:46:56:c2:61:
                    a5:09:2d:9f:0c:ca:6a:fb:29:a9:6c:9e:76:c4:05:
                    ce:fb:d2:38:e6:ff:96:b4:7f:ea:91:dc:4b:25:7a:
                    91:15:ac:33:bc:a9:fc:bf:26:05:c3:69:4e:33:57:
                    5e:60:c8:dd:a7:d4:66:68:62:0e:90:56:82:f6:ef:
                    b5:bf:70:74:ba:97:ef:9f:da:75:28:15:0c:94:c2:
                    4d:10:0e:59:68:8c:be:95:e5:37:e9:78:75:76:f4:
                    9d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1A:74:A6:2B:4C:12:CE:C5:3D:F8:18:59:44:6F:59:00:A2:8A:4F
            X509v3 Authority Key Identifier:
                keyid:3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:a8:21:63:5f:92:d3:af:8b:c9:bb:c8:ae:b3:a1:30:04:67:
         a0:a1:ca:10:b1:16:02:a2:d6:b9:f1:13:6f:0e:2b:35:5d:d7:
         06:d7:72:0c:f6:1f:9f:69:d4:09:97:08:d2:c4:b0:08:3c:cd:
         e6:3e:3d:e7:31:3b:e8:90:9c:53:3e:30:1e:03:9c:70:92:9c:
         b7:0e:54:60:11:f2:8c:b1:8c:f5:0a:92:47:01:3e:25:85:b5:
         bc:72:af:ab:d1:b2:6a:d7:2f:0c:0f:cb:93:aa:87:c9:5f:d0:
         47:b9:2f:c4:1a:a0:ca:a3:96:bb:cf:e3:74:e9:b6:ff:21:36:
         cb:b8:6a:b2:fa:68:a2:0f:b8:43:c8:43:99:04:cd:60:d8:00:
         a1:b2:9a:71:fc:9c:38:22:ea:bd:0b:97:37:52:91:33:d0:bf:
         b5:01:7d:f3:51:5b:d3:a4:76:bc:d5:9e:fa:d6:21:d0:c5:5d:
         3c:cf:62:ed:af:c7:b0:32:d1:6a:5d:2f:04:bb:26:05:dc:2e:
         81:f9:9f:32:8b:14:83:b3:6d:da:2d:0a:cc:32:52:52:d8:8b:
         b8:82:5e:d9:29:65:22:5d:07:00:42:bf:12:db:5b:ad:78:38:
         a4:a2:37:ec:a6:99:d8:94:d1:0d:55:73:f6:42:27:1c:d6:6d:
         08:70:d2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:01 2024 by rpki-client on console-ams.rpki-client.org