Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/3130332e392e3134342e302f32322d3234203d3e20313331373133.roa
File:                     3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (raw, json)
Hash identifier:          nMzdVlm6ZGdAK1jozyzuffucbvzwRK+67XvaYs5SssY=
Subject key identifier:   82:83:D7:36:B1:D0:B7:6F:90:CF:33:20:6A:B0:C8:10:0B:11:04:8E
Certificate issuer:       /CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8
Certificate serial:       03D06D7CE01F73A3A348C925F065F2B8D36469A7
Authority key identifier: 8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/3130332e392e3134342e302f32322d3234203d3e20313331373133.roa
Signing time:             Tue 27 Aug 2024 05:00:02 +0000
ROA not before:           Tue 27 Aug 2024 04:55:02 +0000
ROA not after:            Tue 26 Aug 2025 05:00:02 +0000
asID:                     131713
IP address blocks:        103.9.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl
                          rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d0:6d:7c:e0:1f:73:a3:a3:48:c9:25:f0:65:f2:b8:d3:64:69:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8
        Validity
            Not Before: Aug 27 04:55:02 2024 GMT
            Not After : Aug 26 05:00:02 2025 GMT
        Subject: CN=8283D736B1D0B76F90CF33206AB0C8100B11048E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:9d:f0:6c:a7:9c:83:ca:01:97:6b:eb:1f:
                    76:5a:cc:1a:48:2b:e3:d2:16:60:c2:7d:eb:82:25:
                    4d:c2:83:bb:bc:65:af:a4:9c:b6:15:72:5f:59:fb:
                    f4:ad:e6:fe:dd:d3:94:3f:92:0e:af:ce:17:42:03:
                    33:60:f4:ee:4c:25:6a:a7:f1:99:55:c8:00:74:79:
                    04:c8:c3:b3:79:d7:27:34:d9:eb:6a:e9:e8:5e:17:
                    1b:75:50:0b:49:04:f6:ed:a7:07:4e:49:d2:f0:08:
                    2a:2f:36:46:96:1c:14:f6:9f:77:a5:6d:cb:4e:b0:
                    62:d3:5f:78:74:86:f1:05:a1:0c:43:f7:37:e1:8c:
                    ea:c6:8a:0a:ee:82:65:9f:21:97:73:77:56:95:e7:
                    92:8e:d4:cd:83:31:e3:c9:71:31:af:77:37:ad:b4:
                    5e:b8:c9:c8:50:36:ab:0a:b4:78:29:e5:4e:d5:5f:
                    82:52:57:1a:b3:8c:dc:0e:ae:36:c3:0c:bb:87:87:
                    42:e0:bf:7d:f4:d3:26:9b:84:30:61:2e:2b:77:be:
                    a6:72:38:5f:ae:13:26:6f:ca:99:f0:52:f9:9a:36:
                    88:6a:29:3e:a7:ec:6b:62:ef:ed:c4:46:81:1a:39:
                    8d:b7:c4:20:32:12:ed:47:b4:d3:e5:98:d0:3b:74:
                    73:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:83:D7:36:B1:D0:B7:6F:90:CF:33:20:6A:B0:C8:10:0B:11:04:8E
            X509v3 Authority Key Identifier:
                keyid:8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/3130332e392e3134342e302f32322d3234203d3e20313331373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:b0:28:61:99:96:29:19:5b:86:57:ef:53:08:23:b3:a3:cf:
         33:1a:1a:68:11:cd:43:b8:9e:cd:0b:d2:e5:25:80:e5:b3:0f:
         2c:6b:80:45:ac:9f:de:d9:bb:75:c2:e9:2b:d4:75:e1:f1:0c:
         cf:05:af:1f:f1:eb:73:88:a5:41:17:ab:07:7c:7b:b4:68:06:
         df:d0:11:c1:13:2d:27:e6:55:2a:09:e1:1f:57:b1:9f:6f:de:
         7b:06:5e:a2:e2:7a:c6:57:fd:5b:ce:08:4e:d1:1f:6e:2d:0a:
         7c:ed:e2:e7:6a:95:fc:ca:29:7e:da:19:f6:6d:d2:f0:77:ee:
         3d:14:ac:13:8c:b4:bd:db:80:48:32:96:c5:6a:06:62:76:ba:
         3f:bc:4b:ff:97:3b:24:4d:18:00:51:0a:1a:cf:97:ea:bf:7a:
         5b:ef:20:36:ba:53:5b:f9:e7:50:90:ca:50:6f:0f:df:30:93:
         5b:09:d0:3b:9a:63:e3:df:83:7c:bc:a6:2e:ea:cc:f6:9a:9a:
         8f:ab:53:8e:20:c7:24:8a:3e:f9:b7:76:1d:d1:87:02:fd:b4:
         20:4b:b3:20:ca:f8:c8:ee:11:8f:e6:ca:e9:28:e4:4a:3f:b9:
         a4:87:55:02:16:2d:c7:32:e8:d4:0c:f5:d6:28:19:1e:d3:6e:
         44:fa:44:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org