Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233392e302f32342d3234203d3e20313334393633.roa
File:                     3130332e39342e3233392e302f32342d3234203d3e20313334393633.roa (raw, json)
Hash identifier:          lOIlOZcG2Y3IWG8FLB+H0LsgNfg8T2cYLe/1njn8sgA=
Subject key identifier:   6A:0E:48:EC:39:A2:8A:D8:8D:2A:8A:E2:2F:68:88:08:04:82:D9:65
Certificate issuer:       /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Certificate serial:       071133783C10A07B1442F31B91357B285E1C8A62
Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233392e302f32342d3234203d3e20313334393633.roa
Signing time:             Fri 14 Jun 2024 10:50:57 +0000
ROA not before:           Fri 14 Jun 2024 10:45:57 +0000
ROA not after:            Fri 13 Jun 2025 10:50:57 +0000
asID:                     134963
IP address blocks:        103.94.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
                          rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 11:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:11:33:78:3c:10:a0:7b:14:42:f3:1b:91:35:7b:28:5e:1c:8a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
        Validity
            Not Before: Jun 14 10:45:57 2024 GMT
            Not After : Jun 13 10:50:57 2025 GMT
        Subject: CN=6A0E48EC39A28AD88D2A8AE22F6888080482D965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b0:9d:65:dc:d8:90:ab:07:47:4a:7f:4a:23:
                    72:5e:5b:53:e9:98:c4:58:45:88:4c:dc:15:cc:10:
                    42:cb:f4:74:35:0d:c4:93:2a:78:15:70:79:df:79:
                    70:af:ae:8c:e5:3b:df:67:88:e2:46:f3:ac:47:bf:
                    e7:e2:9c:20:58:36:dd:5f:21:60:66:5a:72:ca:53:
                    bc:8e:b5:99:3d:7b:6e:ab:92:c2:8f:91:fc:db:2d:
                    b7:2b:41:04:42:fa:ba:ca:41:87:ea:02:db:3d:e5:
                    d2:2b:4b:68:b6:29:96:38:0b:81:69:eb:f4:43:c5:
                    f8:fe:45:ca:7d:b9:b0:62:57:61:62:78:61:ea:74:
                    ce:aa:4a:eb:26:0e:c2:a8:02:8f:87:3c:45:7d:5f:
                    c3:af:af:61:35:1c:e6:e3:c7:1b:75:e3:51:9a:5f:
                    5f:f8:a3:82:ee:20:4a:41:d5:a5:0f:4a:e5:fe:e0:
                    63:2d:c9:95:1d:02:00:8a:53:cd:f0:a7:3b:2a:53:
                    fd:32:8f:ac:a0:fa:c3:b3:6f:57:d6:b2:2d:df:75:
                    a3:49:39:5b:b6:f4:82:b2:82:0f:3b:77:ef:d0:45:
                    a0:41:e0:ab:37:4e:13:06:29:f3:04:69:b7:d2:d5:
                    e6:f1:99:43:76:17:3a:34:48:88:29:c8:77:06:c0:
                    f8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0E:48:EC:39:A2:8A:D8:8D:2A:8A:E2:2F:68:88:08:04:82:D9:65
            X509v3 Authority Key Identifier:
                keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233392e302f32342d3234203d3e20313334393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:83:61:52:67:a3:57:2d:8a:49:14:11:e1:d0:70:e7:af:d9:
         52:6f:25:e6:fe:5e:c5:1b:e6:5d:93:f4:1a:7b:67:eb:95:ef:
         bf:7e:dc:17:d0:e9:73:41:01:94:55:3f:cc:db:ad:27:85:28:
         ab:c3:fb:2a:5a:75:c2:49:4d:bf:c2:e1:12:9c:be:1d:61:8a:
         a9:7c:dd:00:cb:b2:51:4c:4f:37:20:83:6f:52:c6:e0:c8:93:
         31:19:a7:b6:9c:93:5d:97:57:39:a6:be:88:34:e1:4e:f0:10:
         bc:3a:1d:38:26:a2:fa:cf:dd:86:bd:23:5e:5a:a0:25:fd:bb:
         91:d2:08:25:d8:0b:1e:af:51:5b:b8:a6:b0:1f:bf:17:2e:ca:
         7f:95:9c:e9:cb:ef:bd:fe:00:ad:37:95:e3:12:14:76:21:43:
         4e:8b:7a:92:5c:ec:68:3c:35:d7:d3:78:ba:92:f2:20:05:d0:
         c0:5f:81:e9:cd:52:a0:b0:76:eb:a0:38:5e:42:c3:f3:f7:d8:
         b6:5f:c6:9e:fc:a8:43:c2:9f:36:1e:2c:96:e8:6c:78:3b:af:
         a7:1f:1e:44:0c:1a:7a:17:a5:1f:f1:9d:05:27:2b:e1:ea:13:
         4a:8d:97:5f:ea:92:42:a5:da:a2:23:28:36:30:8f:50:e6:75:
         17:09:b7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 15:50:40 2024 by rpki-client on console-ams.rpki-client.org