Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa
File:                     3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (raw, json)
Hash identifier:          kr66VWz9ye7cEYI+Ui3/51KV5kPNpIqBw6Ls86Iek2w=
Subject key identifier:   E3:2E:CB:0E:13:A8:19:F1:F8:C5:8C:25:0F:CF:27:40:8B:D2:0A:45
Certificate issuer:       /CN=F39284EDA8B81E5F498D167C4DB09075943DA23C
Certificate serial:       1AF86C81FF907A27E6D257F5E1149AAF6440C173
Authority key identifier: F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa
Signing time:             Wed 18 Sep 2024 05:02:21 +0000
ROA not before:           Wed 18 Sep 2024 04:57:21 +0000
ROA not after:            Wed 17 Sep 2025 05:02:21 +0000
asID:                     136128
IP address blocks:        103.94.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl
                          rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 18:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f8:6c:81:ff:90:7a:27:e6:d2:57:f5:e1:14:9a:af:64:40:c1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F39284EDA8B81E5F498D167C4DB09075943DA23C
        Validity
            Not Before: Sep 18 04:57:21 2024 GMT
            Not After : Sep 17 05:02:21 2025 GMT
        Subject: CN=E32ECB0E13A819F1F8C58C250FCF27408BD20A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:50:97:f1:e1:73:06:f7:4e:fb:d1:7c:44:d1:
                    7e:f5:57:e9:e9:74:9a:1f:7a:49:54:57:29:bf:28:
                    9f:ca:be:7e:fc:48:16:d4:af:6d:a5:7f:fc:35:dc:
                    71:41:b5:4e:85:6f:c9:cd:73:d2:42:00:df:08:06:
                    dc:99:e4:8d:ef:c1:a4:ea:fc:83:c2:4e:1c:f3:32:
                    a4:39:6e:b9:f8:39:e3:b8:09:95:37:4a:63:b7:c3:
                    23:24:8a:72:e8:70:a7:16:be:3b:b5:f4:48:80:5c:
                    bc:9f:b0:46:64:b2:b3:e1:a3:58:67:ca:1a:8e:36:
                    2f:9c:6b:87:09:22:84:5b:f1:c3:51:2f:86:eb:dd:
                    25:44:22:16:00:99:5f:bd:07:1f:7d:79:de:6f:ec:
                    8a:02:34:5e:85:75:64:19:ff:ad:af:c2:b4:6d:4b:
                    e1:ee:ab:e1:b5:9f:99:a6:35:36:3f:70:fb:fc:06:
                    dc:3b:86:61:6c:91:10:74:69:6a:bf:d3:97:d0:06:
                    22:ae:47:0f:b3:76:7e:49:0d:ee:45:84:18:77:87:
                    6c:71:32:d8:01:44:ef:be:03:ee:90:76:a7:ac:b7:
                    02:e0:08:d0:b3:c4:ea:35:22:3d:d8:57:73:0f:4e:
                    fe:0f:6a:95:14:76:4b:7a:07:9d:b0:c2:a5:01:f9:
                    02:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2E:CB:0E:13:A8:19:F1:F8:C5:8C:25:0F:CF:27:40:8B:D2:0A:45
            X509v3 Authority Key Identifier:
                keyid:F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:00:23:85:89:73:ef:c7:6c:68:86:c0:1e:ad:7f:b1:ee:e0:
         94:89:90:d4:3b:78:e9:89:d9:98:db:ba:72:12:78:8b:69:c1:
         65:be:d2:d1:bd:61:c3:0c:88:55:d7:19:bb:01:54:e5:6e:ba:
         d7:5f:46:5c:3f:36:40:62:9e:e9:0f:70:67:c9:7e:f4:05:27:
         fe:17:e3:95:55:d9:bc:a2:e9:19:78:71:79:8f:7e:85:a0:9d:
         8e:88:a7:46:87:98:6e:34:97:72:c0:52:b3:6f:24:07:70:96:
         f2:bc:58:c3:4c:53:77:d2:3f:b9:a9:01:ea:fd:c8:89:c7:84:
         d9:5c:29:72:21:88:02:bf:54:2e:7d:4b:c2:63:ca:c3:30:65:
         33:df:44:5b:f0:1c:73:5b:af:42:43:43:2b:d6:4e:21:05:ff:
         e2:5a:e8:f5:44:14:42:d4:65:83:60:1c:4e:44:04:27:d6:9e:
         81:80:ad:b0:ad:a6:00:dc:1e:74:eb:98:77:e1:1b:10:a0:86:
         47:60:7a:4d:a6:cc:4f:83:03:54:ea:d5:cf:9b:89:53:a3:ff:
         4b:82:73:ab:27:07:e8:9e:21:2d:8f:cd:7f:e7:bb:3a:7b:1a:
         72:b8:77:c1:12:7d:37:77:1e:3c:f5:63:59:5d:2c:67:03:82:
         d8:7d:b5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:50 2024 by rpki-client on console-fra.rpki-client.org