Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa
File:                     3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (raw, json)
Hash identifier:          y/bDPrK/vJcW1JxMX0uYyADWqFYEbR36UfmZG19GCSI=
Subject key identifier:   D8:D7:8C:87:FE:F0:CC:3B:AE:94:D0:95:8D:61:A6:27:93:D4:FE:09
Certificate issuer:       /CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
Certificate serial:       219CE6FEB2F8AE08435A4044D37B79F35DB16A83
Authority key identifier: 81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa
Signing time:             Mon 01 Jul 2024 01:02:13 +0000
ROA not before:           Mon 01 Jul 2024 00:57:13 +0000
ROA not after:            Mon 30 Jun 2025 01:02:13 +0000
asID:                     132642
IP address blocks:        103.19.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl
                          rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9c:e6:fe:b2:f8:ae:08:43:5a:40:44:d3:7b:79:f3:5d:b1:6a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
        Validity
            Not Before: Jul  1 00:57:13 2024 GMT
            Not After : Jun 30 01:02:13 2025 GMT
        Subject: CN=D8D78C87FEF0CC3BAE94D0958D61A62793D4FE09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:37:be:02:53:47:a2:86:65:3f:90:3b:88:
                    e3:4f:53:d8:00:54:6c:84:8e:95:d4:d8:6b:15:b5:
                    0c:d9:7a:09:3f:14:8e:8f:74:b0:35:19:86:7a:07:
                    17:57:1a:b2:7c:c5:c5:f8:e2:f5:35:c4:2d:2f:7f:
                    4f:56:95:53:8d:ca:35:e0:44:21:fc:71:43:82:5a:
                    7e:f9:b6:78:40:68:79:5c:ac:cd:43:7f:ac:38:72:
                    4b:39:2e:21:25:76:7b:26:a9:27:9c:1b:c1:44:90:
                    11:36:af:48:8c:79:67:7c:60:d7:df:30:9f:67:55:
                    63:75:9a:da:39:42:cf:c1:34:31:83:9d:01:a4:79:
                    cf:f0:3f:51:61:9b:62:f6:90:2b:19:e4:f0:8d:8b:
                    ee:1f:72:04:88:66:99:f3:2e:cc:fa:2b:20:ed:13:
                    f7:22:96:98:39:fb:0a:df:29:93:f2:0a:9d:3b:5e:
                    d8:dd:96:08:d8:e7:41:7e:2e:62:ba:48:73:10:4e:
                    88:97:77:2b:62:93:29:28:8f:8c:6a:13:52:2a:12:
                    df:3f:f2:b9:7a:9c:97:aa:f1:ff:84:69:a8:3a:90:
                    9e:e3:5f:76:43:87:4a:9e:b1:34:07:f4:63:89:7d:
                    38:54:ac:b8:bf:2e:c2:f1:45:17:95:e0:3a:8d:b0:
                    75:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D7:8C:87:FE:F0:CC:3B:AE:94:D0:95:8D:61:A6:27:93:D4:FE:09
            X509v3 Authority Key Identifier:
                keyid:81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:53:14:95:dd:9b:ce:36:31:0a:5b:cf:95:e3:ae:9d:2a:dc:
         e8:39:a8:2c:f5:4c:7e:74:eb:26:66:62:0b:26:5f:1f:c6:87:
         ad:16:ab:ae:84:cc:de:3a:da:b8:5f:a9:ed:9f:a8:a8:f7:d9:
         88:ed:a4:68:5e:ee:89:16:e0:85:51:a0:ea:22:fc:fc:47:13:
         44:fc:77:21:68:28:8a:d2:0e:9e:a1:6a:75:aa:72:32:f1:1c:
         b3:d0:31:be:fd:bd:bb:7a:e6:57:f2:d9:8f:c2:56:c9:28:65:
         42:6b:a3:47:d0:e2:6d:10:34:00:09:05:a2:c7:9b:de:b5:77:
         12:9b:8e:1c:03:3f:09:74:01:ee:89:ea:a3:3d:be:60:40:b3:
         8a:81:17:a8:ca:75:9f:8c:14:0e:b8:a2:aa:ff:98:d1:9d:04:
         bc:af:98:23:29:91:57:45:4a:ca:c0:47:88:c2:df:40:6e:51:
         cc:9a:86:eb:3c:33:35:6a:31:e3:c6:cf:bd:95:c3:f3:06:82:
         7b:cf:3e:63:5a:53:0f:83:68:6a:95:cf:9a:ad:58:0c:10:e8:
         cd:a2:15:26:fa:48:25:2b:cc:9b:d3:42:71:45:4f:e8:3c:bb:
         ac:72:66:ff:7c:31:a1:19:46:64:da:1f:b7:0b:63:b8:16:df:
         5b:f5:e7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:48 2024 by rpki-client on console-fra.rpki-client.org