Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/3130332e31392e3230382e302f32322d3234203d3e203435323934.roa
File:                     3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (raw, json)
Hash identifier:          qEF93B9IOJqWdFUG6b5AxXC7eI6HivyP1Ts2wQWO0uM=
Subject key identifier:   79:45:68:95:F1:80:AD:9F:A1:3A:42:DB:6C:E8:9D:88:38:CA:28:23
Certificate issuer:       /CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
Certificate serial:       15E081A087CA9499B47EACE83993D7C5B7323233
Authority key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/3130332e31392e3230382e302f32322d3234203d3e203435323934.roa
Signing time:             Mon 01 Jul 2024 01:06:13 +0000
ROA not before:           Mon 01 Jul 2024 01:01:13 +0000
ROA not after:            Mon 30 Jun 2025 01:06:13 +0000
asID:                     45294
IP address blocks:        103.19.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl
                          rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e0:81:a0:87:ca:94:99:b4:7e:ac:e8:39:93:d7:c5:b7:32:32:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
        Validity
            Not Before: Jul  1 01:01:13 2024 GMT
            Not After : Jun 30 01:06:13 2025 GMT
        Subject: CN=79456895F180AD9FA13A42DB6CE89D8838CA2823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:67:58:cf:82:12:42:33:ec:cd:6b:3c:69:a7:
                    36:0c:b1:58:73:5d:af:7c:82:d7:f0:e9:dd:76:22:
                    81:dc:34:9c:75:af:2b:5b:e3:2c:17:ec:14:7d:ab:
                    0b:b0:c3:ce:c0:14:3d:56:5c:ba:25:6c:a7:9d:98:
                    44:e7:05:6c:cf:57:b2:7d:61:b0:25:6a:ca:81:06:
                    4e:aa:f7:f3:02:cb:81:1c:b2:cc:3c:38:16:01:c5:
                    43:ad:9e:d7:32:46:93:2d:ab:63:45:a7:7f:a9:fd:
                    e1:a9:37:76:d3:91:29:69:ac:78:9d:0f:80:01:a4:
                    6c:11:62:a5:fb:94:4c:b4:36:b2:d7:a3:c4:4b:f6:
                    19:61:4e:b6:59:bd:20:be:47:d1:b0:50:b2:a9:32:
                    bb:38:43:23:f4:bc:39:29:08:86:85:c4:98:2b:75:
                    e3:de:6d:78:e8:06:d0:4d:94:04:62:0c:98:ff:2b:
                    51:a4:c2:8a:ba:1c:b3:48:af:56:71:df:ec:ba:ed:
                    7f:67:95:c2:dc:0d:40:46:c9:06:a7:44:4d:23:7b:
                    51:12:ec:9f:de:8b:4b:69:ea:da:2f:72:0f:2b:77:
                    36:8f:ef:a3:fc:02:80:3c:d6:c9:e8:6a:23:20:c6:
                    e4:57:ef:29:5b:09:42:2a:39:d2:af:c6:2c:67:f5:
                    83:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:45:68:95:F1:80:AD:9F:A1:3A:42:DB:6C:E8:9D:88:38:CA:28:23
            X509v3 Authority Key Identifier:
                keyid:66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/3130332e31392e3230382e302f32322d3234203d3e203435323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:68:d6:19:ab:b5:df:5a:05:ab:38:62:8a:9a:ca:ba:6a:61:
         7e:2f:bd:fc:14:96:e0:e7:f7:e9:73:79:fd:23:b1:cd:81:9e:
         73:93:ca:ab:f8:50:30:c8:84:40:c0:22:a7:fe:a3:61:53:cc:
         3b:61:2d:ac:35:a8:7e:8c:de:6a:e1:aa:58:6e:09:2d:ad:da:
         8d:fd:81:4c:01:87:59:66:32:12:73:49:2a:c8:e1:a5:7e:3e:
         11:2d:c3:00:ac:25:10:50:9d:b5:2d:eb:b1:da:2e:f8:d3:4e:
         9a:24:c6:40:49:b7:e3:f4:82:55:25:bd:75:bb:a8:ed:7f:ab:
         e9:7c:a7:30:56:d4:56:f0:7e:86:6e:bb:d0:bd:95:e8:2d:4a:
         eb:72:55:9e:63:82:55:d7:30:a2:e6:ad:d6:0f:59:2f:88:e8:
         58:4f:1b:5f:5e:04:4b:e3:71:5a:cc:08:73:43:af:9d:03:a3:
         dd:93:1e:c1:56:68:62:03:54:4f:97:c3:05:b3:5a:dc:d6:9f:
         5d:aa:70:ce:e1:24:d1:f1:bf:9d:56:4e:01:3d:14:c0:2b:1d:
         ed:67:87:13:ba:21:c4:e0:1a:2d:ab:20:27:bf:95:98:b9:88:
         4b:f8:07:96:ab:a7:7f:8e:52:38:23:ad:43:6c:98:50:b0:de:
         64:28:2f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org