Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3130332e3130392e3132342e302f32342d3234203d3e20313337333136.roa
File:                     3130332e3130392e3132342e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          Hr3uwLJxBNfzsV6Q0+ifmRmuIRlu8pn04eRFkJEK8Pc=
Subject key identifier:   EF:88:25:CE:D1:C3:D5:11:C5:EE:0B:8A:24:8E:EE:5A:6C:3F:2D:15
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       0A549C8EF75685BD628DBA3F475579F4CCE537FC
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3130332e3130392e3132342e302f32342d3234203d3e20313337333136.roa
Signing time:             Fri 16 Aug 2024 15:00:01 +0000
ROA not before:           Fri 16 Aug 2024 14:55:01 +0000
ROA not after:            Fri 15 Aug 2025 15:00:01 +0000
asID:                     137316
IP address blocks:        103.109.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:54:9c:8e:f7:56:85:bd:62:8d:ba:3f:47:55:79:f4:cc:e5:37:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Aug 16 14:55:01 2024 GMT
            Not After : Aug 15 15:00:01 2025 GMT
        Subject: CN=EF8825CED1C3D511C5EE0B8A248EEE5A6C3F2D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5b:1f:03:21:08:fa:da:c1:99:e3:4d:15:08:
                    ee:59:ba:23:00:f9:6b:a3:7d:4a:ee:3f:5f:fe:85:
                    13:78:3a:47:22:b6:0b:4b:7c:09:d0:08:97:0c:75:
                    c3:8f:f5:3c:05:3e:db:66:1f:d3:7e:fc:c1:f5:31:
                    fd:a8:35:bd:70:99:b8:69:da:f9:6a:29:1f:6f:30:
                    20:95:36:fe:35:94:e3:9d:3f:4c:8d:67:d6:02:5f:
                    d1:06:15:e1:9e:fc:e2:ee:02:78:8e:30:81:5b:d2:
                    15:73:a9:da:b6:ff:d4:3c:99:3a:fa:09:1c:62:ab:
                    d7:52:68:56:b0:29:ba:b0:fc:97:e2:22:5b:6d:ec:
                    00:55:9e:01:e2:a9:df:49:25:34:1e:b4:ef:87:df:
                    bd:bd:94:84:a4:d9:da:ed:5f:52:a7:86:41:c5:6e:
                    c4:a2:4c:7a:f6:66:10:8d:0c:a1:35:0e:06:84:39:
                    85:ce:c6:35:18:8a:1b:2c:0e:88:93:c6:9f:40:ab:
                    7d:f6:c3:ee:a7:68:35:be:c0:f2:33:5f:76:06:b8:
                    42:93:a9:7d:6d:bd:a5:d7:84:3c:01:95:23:88:27:
                    b7:8a:a5:c4:b9:e5:bf:84:d3:43:5c:50:0a:4a:4c:
                    42:1b:6e:70:47:6e:fe:5b:36:12:33:dd:98:f4:6e:
                    81:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:88:25:CE:D1:C3:D5:11:C5:EE:0B:8A:24:8E:EE:5A:6C:3F:2D:15
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3130332e3130392e3132342e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:33:79:1d:d1:ca:5f:b3:f0:78:b8:8b:e6:c1:26:fe:5e:cb:
         1e:b9:6e:c4:49:52:a6:39:aa:ed:29:04:a1:b2:50:3f:b0:b4:
         44:32:1c:c9:f0:dd:00:41:62:7f:48:0f:5c:94:f2:e0:90:60:
         fc:0e:7b:75:14:d8:8b:ee:9b:1a:64:f0:0f:b8:c4:a8:b3:b9:
         4b:ba:37:fc:2f:0e:07:d4:ff:2d:c2:61:3c:68:56:51:63:82:
         0c:1c:13:6e:9f:82:7c:f4:2f:09:1d:10:d9:6a:c6:e5:ad:ff:
         57:33:d7:5e:03:72:11:a2:66:c7:03:27:8f:21:00:6d:b7:a3:
         b3:24:d5:a5:b1:81:78:0a:a9:38:b4:60:c5:42:d1:08:0d:d9:
         e1:74:4d:ae:ee:63:ce:ee:d4:ae:3b:6d:69:f4:85:a7:68:44:
         bc:b2:6d:23:17:42:f8:8d:50:f2:23:6f:7f:0d:df:21:6a:81:
         b1:53:3b:ea:c1:04:76:11:6a:91:60:5e:f0:36:32:35:a1:35:
         be:2e:8d:28:35:0a:53:10:5f:23:75:51:64:95:6a:f2:22:25:
         be:7b:9c:4e:ec:72:93:55:96:cd:40:c2:42:34:a0:e8:2f:df:
         2e:f4:f1:7b:49:c8:24:f4:8d:16:b0:8d:c5:42:4d:dd:a9:dd:
         86:f1:7a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org