Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa
File:                     3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          SavftCjxfzKeh9QfZVYuZ4/nKtgaHcLMvQCr8+Ies8o=
Subject key identifier:   92:54:AC:9D:4D:F5:C4:50:28:2A:4C:D5:D0:88:03:0F:51:61:B2:D9
Certificate issuer:       /CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804
Certificate serial:       A8A6A5F6A7C569C7918426C7206419FC3B9362
Authority key identifier: 38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa
Signing time:             Fri 06 Sep 2024 09:00:00 +0000
ROA not before:           Fri 06 Sep 2024 08:55:00 +0000
ROA not after:            Fri 05 Sep 2025 09:00:00 +0000
asID:                     9341
IP address blocks:        103.212.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl
                          rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a8:a6:a5:f6:a7:c5:69:c7:91:84:26:c7:20:64:19:fc:3b:93:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804
        Validity
            Not Before: Sep  6 08:55:00 2024 GMT
            Not After : Sep  5 09:00:00 2025 GMT
        Subject: CN=9254AC9D4DF5C450282A4CD5D088030F5161B2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:29:40:11:1e:47:41:ef:19:de:d1:04:97:
                    11:00:2d:9d:c6:b7:ef:f0:11:9c:ae:d0:cb:66:e4:
                    46:ad:81:1f:80:5f:19:6a:eb:3f:09:3c:f4:e5:a8:
                    ac:bd:e5:39:74:1e:f8:70:97:ef:4a:97:a5:6d:1d:
                    cd:f1:82:2e:95:58:83:19:08:9c:eb:15:18:f6:5f:
                    d3:8b:e5:d7:52:4e:1d:cb:ed:25:79:7c:87:e8:12:
                    b7:2c:cb:b8:5d:3f:97:3e:5b:f9:62:05:f8:31:78:
                    c5:bd:df:57:6b:10:b2:c7:bc:b2:2b:81:b5:c2:87:
                    f8:3a:ac:dd:bf:7a:e9:c5:20:7a:e2:89:fa:fa:35:
                    a0:45:ac:7b:9f:61:1e:2e:cd:cb:dd:f1:d1:ae:a6:
                    fc:88:57:40:8c:fc:53:08:4b:77:1e:08:64:7a:cc:
                    af:7b:5b:b0:cd:c1:4e:10:bf:a1:20:a4:d8:6d:d2:
                    c7:c8:3b:80:8f:e8:56:ca:86:6b:ef:a3:ec:e1:02:
                    ae:f7:09:ac:83:4f:47:6d:16:ab:c0:99:f4:e5:72:
                    c4:77:96:3d:60:26:3d:31:38:a1:94:40:1b:d2:9f:
                    56:53:27:81:f7:61:b0:a2:b5:b2:65:a1:1e:58:52:
                    a7:64:fe:d8:44:39:d6:a1:a0:3c:21:33:55:6a:04:
                    ef:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:54:AC:9D:4D:F5:C4:50:28:2A:4C:D5:D0:88:03:0F:51:61:B2:D9
            X509v3 Authority Key Identifier:
                keyid:38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:c8:b3:16:94:50:98:45:0c:6b:01:50:b1:32:2d:02:75:61:
         f5:80:81:68:28:2c:13:69:20:a4:c7:d8:64:a8:17:c9:f4:14:
         56:a0:86:a4:b7:56:24:f5:38:10:e1:4f:7a:a0:6c:15:19:aa:
         5c:62:ec:09:35:d1:af:00:8c:ed:80:16:00:e6:b6:41:6b:33:
         39:33:38:d2:b9:f1:f0:c3:1a:bc:53:d6:e9:c0:18:94:8c:bf:
         05:b3:36:87:9f:04:d0:ee:1d:95:b0:50:d3:70:29:fe:d6:39:
         71:67:db:71:a2:47:d3:a9:87:88:0e:25:5b:0e:21:08:74:3b:
         c7:dd:b2:0a:e2:11:0e:83:01:a3:07:c1:ea:5c:99:8a:84:1c:
         eb:2f:ed:60:4a:a3:e2:33:de:93:55:be:77:ce:21:ce:6d:08:
         53:ea:f7:6d:51:7a:7f:3b:da:cb:d9:9d:73:4f:a4:0c:48:21:
         e0:07:25:b6:59:fa:9a:8d:ba:03:79:a1:a1:6e:54:55:13:87:
         d8:c9:7f:71:1b:f3:df:62:ff:46:01:15:4e:57:ba:00:01:63:
         a6:c7:ca:f0:db:13:b9:0f:15:33:33:e1:cd:6c:0a:5a:48:3c:
         16:83:b3:07:eb:51:87:f6:5e:5b:17:7d:60:f6:e2:b7:82:0c:
         d1:42:29:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:19 2024 by rpki-client on console-fra.rpki-client.org