Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39322e302f32342d3234203d3e203634333133.roa
File:                     3130332e38302e39322e302f32342d3234203d3e203634333133.roa (raw, json)
Hash identifier:          lqqyHXTIiwb0QSPDLsrB4kwNaSGHViQY4g/n5jVVoPw=
Subject key identifier:   33:50:17:71:53:82:36:EC:2E:B9:FB:A2:1B:93:79:42:FC:E4:43:4C
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       581249A0834BB914A371E6B9B38B9403BA44910C
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39322e302f32342d3234203d3e203634333133.roa
Signing time:             Sun 29 Sep 2024 07:00:01 +0000
ROA not before:           Sun 29 Sep 2024 06:55:01 +0000
ROA not after:            Sun 28 Sep 2025 07:00:01 +0000
asID:                     64313
IP address blocks:        103.80.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
                          rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:12:49:a0:83:4b:b9:14:a3:71:e6:b9:b3:8b:94:03:ba:44:91:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Sep 29 06:55:01 2024 GMT
            Not After : Sep 28 07:00:01 2025 GMT
        Subject: CN=33501771538236EC2EB9FBA21B937942FCE4434C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f1:14:1b:f3:e6:7e:b6:cb:9e:1f:fc:1a:c1:
                    af:3c:ce:e1:1e:d2:f1:e2:19:45:4b:3f:2a:34:b7:
                    10:20:ea:ab:7b:f5:9e:1f:f7:b0:d4:30:24:7a:74:
                    ce:76:b8:d5:45:cd:53:39:45:58:2e:87:ea:b8:e1:
                    12:28:4f:c0:94:5a:a0:b0:24:54:01:05:ce:73:d8:
                    c4:69:45:48:6b:20:a3:57:2e:a1:f5:c8:11:93:3c:
                    d9:94:83:f9:0f:e5:2b:b0:0f:47:b3:bc:26:02:f0:
                    ff:f6:42:cf:c2:44:5e:8c:98:53:a1:4b:38:1e:ce:
                    6a:93:2b:58:80:a3:f1:a4:4d:ed:23:0d:bd:02:8e:
                    af:ef:92:69:d4:dc:37:e6:28:b7:ea:d1:b6:33:c2:
                    06:c0:23:4c:8d:6a:55:2e:3a:f4:13:ef:fe:5e:32:
                    33:bc:7b:58:a6:f7:9b:a9:d4:99:80:80:43:6b:84:
                    ba:c8:94:ce:d6:bb:ba:a6:5a:a2:a7:ef:61:e8:28:
                    0a:9a:be:87:fd:8a:d7:c5:5d:57:0f:46:40:ee:ba:
                    aa:d8:41:73:c9:5d:6f:c2:fd:ef:ae:0b:a7:8d:a0:
                    2f:56:be:ef:5e:72:a2:f8:87:e2:8a:f5:2d:68:c4:
                    ff:98:10:db:14:41:14:25:27:a8:d8:ef:12:59:9b:
                    8d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:50:17:71:53:82:36:EC:2E:B9:FB:A2:1B:93:79:42:FC:E4:43:4C
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39322e302f32342d3234203d3e203634333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:99:ea:08:34:d8:fa:a4:a1:ea:fc:fa:73:25:02:6d:9d:4f:
         20:d2:f4:30:ec:4d:9b:df:0c:07:e6:7c:e3:4a:d3:fc:c1:39:
         b3:c4:ea:be:42:5e:c8:4a:cb:c4:71:c5:21:d0:02:09:c7:00:
         5c:f3:84:e4:62:06:93:cf:a7:89:62:b2:37:34:a4:ab:2c:a2:
         2f:fb:0b:d8:e7:ef:1b:3f:28:6e:8f:ee:7b:7d:c0:94:9c:56:
         c5:dd:0a:af:00:06:58:2e:70:1a:0b:4f:fa:2a:ad:3d:07:57:
         a4:0e:81:e1:8b:72:58:bc:08:1e:47:57:f4:a1:d5:24:10:81:
         ab:5b:cc:2f:70:ba:23:17:85:22:64:ff:13:0c:45:2f:c9:e6:
         bd:51:fd:bc:32:0e:3d:e3:f3:c4:d7:5e:8f:43:9e:4d:bf:d4:
         57:4d:00:dc:d5:38:89:99:14:8b:6b:d1:6e:01:e3:15:92:50:
         45:ca:02:bd:d1:9e:41:51:99:78:8f:e1:d9:8a:a6:e4:28:6b:
         91:44:72:c3:29:71:1c:6b:f1:ea:02:fd:8e:4c:72:90:44:e6:
         d8:65:83:23:67:ed:c0:ce:6e:d2:db:47:17:11:a1:43:21:30:
         d4:12:34:08:1a:44:67:cc:81:e0:d4:aa:60:d3:13:d9:71:85:
         b7:7f:15:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:28 2024 by rpki-client on console-fra.rpki-client.org