Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39332e302f32342d3234203d3e203634333133.roa
File:                     3130332e38302e39332e302f32342d3234203d3e203634333133.roa (raw, json)
Hash identifier:          dLyg/w+CaYWCmFx2f7C/oQRr5rjQb6eDL7ZPnOIILFA=
Subject key identifier:   6B:59:96:30:82:A5:B0:11:80:35:E4:91:B7:A9:FA:B4:57:70:5C:49
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       66A0F7B4BAA5E28980119F743E087B519CDD4219
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39332e302f32342d3234203d3e203634333133.roa
Signing time:             Sun 29 Sep 2024 05:00:00 +0000
ROA not before:           Sun 29 Sep 2024 04:55:00 +0000
ROA not after:            Sun 28 Sep 2025 05:00:00 +0000
asID:                     64313
IP address blocks:        103.80.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
                          rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a0:f7:b4:ba:a5:e2:89:80:11:9f:74:3e:08:7b:51:9c:dd:42:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Sep 29 04:55:00 2024 GMT
            Not After : Sep 28 05:00:00 2025 GMT
        Subject: CN=6B59963082A5B0118035E491B7A9FAB457705C49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:db:ed:ff:81:ff:e8:46:05:90:d6:54:1b:0e:
                    76:78:85:20:82:e8:89:3f:e1:e5:e4:11:7d:84:ff:
                    11:26:7e:01:78:38:1d:96:25:ab:74:0c:88:b4:48:
                    ac:30:d7:49:f8:0c:7a:3b:90:73:e7:01:21:a6:16:
                    49:26:eb:c2:5e:fc:1b:4a:91:78:36:79:d7:ab:c4:
                    eb:ff:0e:ed:a2:ec:87:c3:0f:df:a0:ab:be:09:1c:
                    78:c2:bc:e2:0f:1f:53:4c:d9:7e:a9:c4:a3:fb:cd:
                    3d:f2:df:14:f9:51:11:8a:96:d3:02:ba:a6:47:3c:
                    80:18:ff:dd:c4:0b:cf:34:20:7d:c4:0e:da:d5:9b:
                    fc:bb:7a:84:d6:f2:32:b9:8a:58:b8:dd:9b:7b:82:
                    71:59:ae:58:90:d6:f0:f8:37:89:ec:6c:09:ba:50:
                    51:9b:3a:30:37:e3:fb:62:8c:a3:da:68:4e:fa:68:
                    15:ea:95:3d:1f:19:78:4c:ae:83:73:02:e8:d7:cf:
                    e6:de:2c:9e:76:c0:00:35:c5:ba:78:b7:fb:28:dc:
                    f3:e8:66:51:dd:c1:56:3b:f8:f1:28:5d:2a:50:a4:
                    69:1d:be:21:dd:c1:0e:0d:b2:c7:46:81:13:82:cc:
                    3e:d3:96:50:49:be:57:2b:63:11:de:7a:c3:69:54:
                    c0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:59:96:30:82:A5:B0:11:80:35:E4:91:B7:A9:FA:B4:57:70:5C:49
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39332e302f32342d3234203d3e203634333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:d5:19:af:82:78:4c:8c:3a:99:22:32:ef:c9:9d:31:55:68:
         b6:c7:68:88:fd:18:c8:03:61:ad:c7:e5:68:29:74:1d:6c:fa:
         7f:19:34:b2:b6:2e:dd:bf:8c:8c:61:8e:0a:0f:2f:9a:8f:6b:
         eb:83:2e:4d:a5:1c:f9:5b:04:dd:a8:4a:db:3e:9b:a5:04:01:
         cf:f7:4a:3f:3e:8f:13:c3:63:08:1e:37:0f:dc:25:23:1b:fd:
         53:3f:4a:11:dd:89:ac:c6:88:ac:30:6e:ad:c2:16:66:77:32:
         f6:2f:76:6a:26:9c:b2:4e:32:4e:4a:9c:08:6d:d8:f2:fd:5f:
         24:64:be:56:fa:d9:b1:da:24:45:de:dc:a0:b9:2a:3d:d8:31:
         51:64:e3:1d:f9:97:73:18:3d:b2:6d:53:bd:26:c1:98:50:f7:
         a8:b5:a3:6c:2a:e7:e7:21:d6:59:b4:d0:4a:42:62:10:a7:94:
         4a:2f:e2:34:4d:77:9e:a1:43:15:42:92:a7:96:a9:e1:60:28:
         e2:da:4e:e4:5f:17:82:3e:b6:f2:d3:aa:2d:a5:55:fd:5f:2c:
         8c:9d:98:0c:47:a9:2e:72:6a:05:62:bb:e8:eb:f9:df:5e:ef:
         53:3e:b8:ea:cb:ce:c4:fe:58:26:f0:b6:01:f4:66:cc:75:91:
         b9:db:cd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:28 2024 by rpki-client on console-fra.rpki-client.org