Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa
File:                     3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa (raw, json)
Hash identifier:          9/aoPw/A3PHqO4fBl/fv1det2aqwO6TMNbj286mZzlI=
Subject key identifier:   06:75:D0:F4:AA:A2:FC:B1:84:2D:A9:05:F9:CB:AA:15:A8:86:71:02
Certificate issuer:       /CN=94F6C26027B9F72AA8701D1296627FA57809A6F3
Certificate serial:       43CD3740C2699E24DAC0F5A69E2F678A0C61C1D0
Authority key identifier: 94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa
Signing time:             Fri 23 Feb 2024 02:37:19 +0000
ROA not before:           Fri 23 Feb 2024 02:32:19 +0000
ROA not after:            Fri 21 Feb 2025 02:37:19 +0000
asID:                     137343
IP address blocks:        103.113.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl
                          rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:cd:37:40:c2:69:9e:24:da:c0:f5:a6:9e:2f:67:8a:0c:61:c1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F6C26027B9F72AA8701D1296627FA57809A6F3
        Validity
            Not Before: Feb 23 02:32:19 2024 GMT
            Not After : Feb 21 02:37:19 2025 GMT
        Subject: CN=0675D0F4AAA2FCB1842DA905F9CBAA15A8867102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:9d:bb:2c:c2:6c:a7:02:30:1e:14:d1:dd:
                    59:a3:ba:ef:1b:be:5c:71:88:f1:50:70:0b:70:ce:
                    95:a3:86:2b:3c:92:e0:a9:4b:4a:39:e8:34:9c:59:
                    4f:10:cc:80:74:f8:7b:66:52:9e:27:32:97:d1:73:
                    da:6b:a4:52:79:67:1d:ee:e5:5a:04:0f:09:bf:93:
                    be:f6:70:96:51:02:d9:a0:db:9a:e7:94:f4:01:67:
                    e4:6e:22:2c:2e:81:fd:71:5c:b3:2a:bf:f4:80:82:
                    1d:76:99:8d:2e:ef:35:09:2a:fd:8f:2c:de:26:f1:
                    90:c9:7c:13:d9:cc:b2:79:31:4f:95:8d:99:a5:f2:
                    76:66:3c:07:ce:d3:9a:dc:c4:2a:23:88:29:1d:fd:
                    04:7d:bd:35:cb:93:2d:27:3d:24:3b:8e:ab:68:4a:
                    9c:20:31:6e:2f:4b:1c:97:ac:3a:09:ff:b7:cc:94:
                    4b:bf:8e:bb:a5:d9:9a:42:75:0e:b5:3f:e1:7a:74:
                    1f:c9:0c:20:b4:59:56:e9:8f:2e:78:4b:17:ad:2f:
                    81:bf:02:9b:41:61:4e:c4:7d:e8:f2:57:75:38:a8:
                    17:dc:98:69:77:63:80:45:b5:6c:f7:3b:d3:93:b4:
                    a5:ca:24:22:ab:e8:e5:6f:33:80:ff:6c:ca:e6:77:
                    45:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:75:D0:F4:AA:A2:FC:B1:84:2D:A9:05:F9:CB:AA:15:A8:86:71:02
            X509v3 Authority Key Identifier:
                keyid:94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:17:0c:71:b8:1a:ac:74:cb:9f:4b:30:e6:96:0a:35:cb:b9:
         25:37:9d:00:a5:6e:44:0e:a0:11:fe:24:ed:51:55:b8:62:78:
         e1:f8:7d:c6:bc:23:b2:9b:f3:66:d9:05:c0:84:50:0a:7a:93:
         93:d0:10:27:2f:15:d9:d9:ea:1e:9c:69:85:c7:a5:cd:c2:21:
         cc:87:0c:c7:2e:ba:6c:76:9a:50:31:d0:6f:3e:03:04:94:d2:
         78:01:9b:c8:74:3a:8b:39:96:5a:af:63:04:c7:e5:d2:b6:2e:
         bc:72:fa:6f:57:a9:74:de:eb:36:1d:4e:f0:cf:fa:b0:ff:74:
         b9:e6:1e:b5:61:3b:05:22:6e:2a:77:15:01:90:8a:03:58:a7:
         9b:6e:e6:98:d9:a9:7a:2e:43:19:b7:54:0d:d7:e0:3b:fe:6b:
         11:9d:8c:c4:c0:a9:76:01:f5:b3:37:ff:06:ee:80:09:fd:37:
         2e:02:df:4c:1c:68:fb:7f:6c:b4:1b:bd:be:1b:57:b8:0c:3f:
         53:73:b0:7f:bf:ad:c6:8f:51:b3:33:20:a4:9b:8b:d3:f2:93:
         2a:02:1d:25:ca:23:33:36:87:35:f4:59:8c:8c:7a:b0:0a:95:
         be:e2:49:5e:98:4f:a5:4d:f2:5e:4f:59:3c:58:48:06:d8:47:
         52:1d:d9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:41:50 2024 by rpki-client on console-fra.rpki-client.org