Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa
File:                     3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa (raw, json)
Hash identifier:          7dftH2SS+w8RSRd/srYB88ohPuCHagULW4cCu5O4G8Y=
Subject key identifier:   9B:8F:9A:09:C4:88:24:62:FA:A7:A8:CB:EA:64:19:7A:AA:61:F0:ED
Certificate issuer:       /CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF
Certificate serial:       07D9EBE45C1D5FFA2C2C3FE00473AD52A4BBB767
Authority key identifier: 0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa
Signing time:             Mon 01 Jan 2024 09:00:44 +0000
ROA not before:           Mon 01 Jan 2024 08:55:44 +0000
ROA not after:            Mon 30 Dec 2024 09:00:44 +0000
asID:                     132678
IP address blocks:        103.241.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl
                          rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d9:eb:e4:5c:1d:5f:fa:2c:2c:3f:e0:04:73:ad:52:a4:bb:b7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF
        Validity
            Not Before: Jan  1 08:55:44 2024 GMT
            Not After : Dec 30 09:00:44 2024 GMT
        Subject: CN=9B8F9A09C4882462FAA7A8CBEA64197AAA61F0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a9:f2:2a:a6:12:e8:30:7b:51:eb:b4:ec:8b:
                    35:2d:61:01:6e:40:ae:b9:cf:68:68:bf:ff:7b:60:
                    6d:dc:e7:33:26:87:0d:7f:cc:73:78:91:5b:67:53:
                    11:ea:ae:4a:44:4f:65:4e:0e:dd:be:21:3e:f6:a8:
                    03:08:9b:95:a8:21:23:d6:a1:0e:ed:56:19:4a:8c:
                    7e:c4:cd:bb:d8:64:08:8b:09:cd:04:21:70:95:2b:
                    d3:ba:25:3a:a8:9a:d8:c6:1b:0b:a9:de:ef:36:47:
                    b6:21:07:c9:8f:31:8f:0f:ea:5a:c9:21:f6:f9:e2:
                    43:15:44:27:e8:d1:02:64:b0:c8:47:e1:48:ba:b0:
                    9a:a2:93:27:11:e0:e9:69:44:bc:40:2c:0b:0e:f6:
                    19:1e:df:24:e1:5a:e7:e3:c8:0a:4e:7a:81:26:63:
                    b6:3e:bb:38:08:78:4e:d9:d4:7d:c1:d9:27:e4:d6:
                    f1:93:6f:96:83:23:8b:40:72:f6:8b:99:3f:8e:a9:
                    e4:80:47:33:53:ce:9f:ab:07:c0:d6:4f:09:93:1b:
                    24:b0:13:f1:5f:8f:99:94:16:c6:db:1d:0f:e4:18:
                    c4:c7:9f:83:f0:93:38:52:cf:81:9f:02:6f:ad:7e:
                    94:d3:e2:17:18:21:79:49:91:63:65:9e:05:4d:92:
                    77:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8F:9A:09:C4:88:24:62:FA:A7:A8:CB:EA:64:19:7A:AA:61:F0:ED
            X509v3 Authority Key Identifier:
                keyid:0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:dd:e8:cc:44:be:8c:66:db:37:cf:b2:a4:e2:75:99:29:46:
         a3:ab:79:c0:d5:19:00:2d:f9:cf:4f:95:6a:43:0f:e4:ca:f4:
         e5:f9:3f:a6:50:6d:e6:de:e1:1d:6e:69:05:1c:ad:2b:ba:a0:
         f1:3d:db:52:00:62:94:0f:b7:23:e5:e6:97:9e:50:10:db:9d:
         67:c0:e9:8d:c7:5a:80:33:20:2b:42:4b:62:e2:61:5f:b9:13:
         23:24:9c:e3:e4:71:a0:59:86:5f:7e:b4:45:32:8e:58:68:83:
         a6:45:13:ee:b5:46:f5:0a:ee:fc:7c:93:c2:5e:d1:15:66:7e:
         55:40:5a:bf:5e:0e:8e:67:00:3b:64:3e:27:ca:14:2b:40:de:
         ee:61:4a:d0:17:ad:16:a3:11:e1:9e:11:55:15:d2:25:c0:fa:
         53:61:2d:bd:4d:30:4a:1a:a2:69:4b:8e:a9:4e:77:b9:54:89:
         06:63:9d:e2:8f:65:c6:18:64:35:e9:87:96:b5:4a:cc:de:9b:
         a1:23:30:7d:2d:5d:8b:d1:b1:e2:9e:fa:32:99:67:ab:6b:77:
         8f:94:59:e7:ec:4f:49:98:47:c1:df:75:b2:01:67:a2:e9:fa:
         31:cc:1d:bf:2e:ef:55:f5:3b:d3:a1:c7:c7:3d:98:5b:18:9c:
         4f:16:7b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org