Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232342e302f32322d3234203d3e203538343832.roa
File:                     3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (raw, json)
Hash identifier:          rlplgg3r+rxIXNon2dNy9blKlPvtpCpYwV7XkrITM4U=
Subject key identifier:   6B:33:1C:0A:AD:6E:7C:09:2E:5B:B4:F6:F1:D6:6D:5C:00:A4:34:F5
Certificate issuer:       /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
Certificate serial:       10603530A97A2BF45F6A07E0D4D08D968B173DC6
Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232342e302f32322d3234203d3e203538343832.roa
Signing time:             Mon 01 Jul 2024 01:02:49 +0000
ROA not before:           Mon 01 Jul 2024 00:57:49 +0000
ROA not after:            Mon 30 Jun 2025 01:02:49 +0000
asID:                     58482
IP address blocks:        103.28.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl
                          rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:60:35:30:a9:7a:2b:f4:5f:6a:07:e0:d4:d0:8d:96:8b:17:3d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
        Validity
            Not Before: Jul  1 00:57:49 2024 GMT
            Not After : Jun 30 01:02:49 2025 GMT
        Subject: CN=6B331C0AAD6E7C092E5BB4F6F1D66D5C00A434F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b7:65:b5:e1:0a:27:f4:d2:43:56:4a:e0:4a:
                    9b:42:e6:ec:e4:fb:b6:18:c4:8c:5d:c4:18:11:57:
                    b2:f8:10:89:3e:a9:65:c4:2a:df:84:85:41:bf:c1:
                    f0:3c:d1:9f:2a:eb:fe:b0:d9:7a:a2:c5:01:8e:aa:
                    85:e6:56:ed:35:18:50:73:50:36:ba:99:72:8a:90:
                    80:45:a9:dc:fd:3d:65:05:7f:e6:2c:94:20:79:46:
                    2e:1c:2a:35:38:f8:41:d1:07:83:84:d6:cb:a0:03:
                    56:10:4c:da:46:47:4b:96:82:00:a0:69:85:64:3d:
                    ff:68:87:16:cf:10:09:04:39:10:b6:d7:59:50:18:
                    d5:24:de:4b:a3:83:68:48:ad:31:01:e5:fa:6d:cb:
                    d3:3c:b9:c3:be:13:8a:0d:89:95:16:2e:6c:fd:13:
                    12:04:ab:c3:8d:94:45:22:cd:e4:7e:c6:b4:ea:9c:
                    c6:b1:8a:82:c0:17:50:b1:9c:db:c4:1e:f5:fb:68:
                    13:6f:69:23:87:ba:cf:42:69:45:4d:11:ab:ed:10:
                    d9:c9:c6:7d:6b:c9:03:72:a3:c3:00:33:27:dc:a5:
                    84:7b:06:7c:22:7a:06:23:ab:cc:1f:f2:27:0e:3f:
                    4f:07:c7:9c:0a:37:10:05:04:57:a3:8e:d8:16:01:
                    20:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:33:1C:0A:AD:6E:7C:09:2E:5B:B4:F6:F1:D6:6D:5C:00:A4:34:F5
            X509v3 Authority Key Identifier:
                keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232342e302f32322d3234203d3e203538343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:4d:2d:07:a5:51:c4:ea:86:4b:d5:01:f8:9c:05:2e:c4:e6:
         ec:b4:1b:bd:62:c4:56:6f:93:44:72:a5:dd:b4:82:ab:c5:58:
         68:b2:b3:e6:5d:22:02:31:23:5f:5c:dc:18:7a:3f:b4:c0:c0:
         5f:d5:d1:48:13:50:04:68:b4:78:7d:51:5a:9a:9a:b6:e0:98:
         8a:13:48:39:ec:59:20:62:c2:d7:4b:2d:e1:42:5c:e3:44:fc:
         ce:06:6b:82:4f:a7:49:7a:33:ee:24:2a:de:a6:7c:85:3b:fd:
         a0:16:ce:d7:7a:51:52:79:39:74:29:18:0c:77:68:cb:2d:81:
         2a:c7:91:13:6c:47:4a:ff:5b:69:21:2f:99:7a:bc:f8:12:bb:
         c9:8e:71:08:74:e2:f3:23:c0:0b:3e:bf:a4:dd:d5:11:ca:bf:
         a1:cd:58:b8:fe:6a:9d:7d:5c:45:cd:3b:a9:5c:72:56:bb:bf:
         2e:33:6a:36:fe:6a:b1:8c:8c:5c:68:f6:4d:e0:4c:06:53:80:
         0b:8d:9e:af:9e:7f:fe:18:1e:44:fc:c7:e4:97:92:d7:e5:af:
         01:70:5e:de:44:0a:b9:3f:48:02:2b:be:f3:7f:e2:4b:f5:7b:
         e3:96:2e:6b:e2:59:ac:d6:4a:bf:da:27:a0:83:30:75:8e:82:
         7a:c1:c1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:43 2024 by rpki-client on console-fra.rpki-client.org