Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa
File:                     3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (raw, json)
Hash identifier:          xuZSWeThAuPloz+88joprzv6CT1t8AV9sDbU615UOe0=
Subject key identifier:   D1:1B:6E:2A:0D:20:DC:06:A7:FF:7A:52:3B:8D:4B:96:5A:16:19:D1
Certificate issuer:       /CN=9D25181C9096851A77EB95DA55649E08E3B7941B
Certificate serial:       3F906E61C730527855D8649FBADB2EA87A987111
Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa
Signing time:             Thu 02 May 2024 01:00:01 +0000
ROA not before:           Thu 02 May 2024 00:55:01 +0000
ROA not after:            Thu 01 May 2025 01:00:01 +0000
asID:                     138090
IP address blocks:        103.124.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl
                          rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:90:6e:61:c7:30:52:78:55:d8:64:9f:ba:db:2e:a8:7a:98:71:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B
        Validity
            Not Before: May  2 00:55:01 2024 GMT
            Not After : May  1 01:00:01 2025 GMT
        Subject: CN=D11B6E2A0D20DC06A7FF7A523B8D4B965A1619D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:18:e8:d8:52:ff:6b:b4:52:a6:36:f8:b3:ed:
                    79:82:48:5c:6a:92:cf:f1:7c:c3:ef:80:f8:5d:f3:
                    34:10:7c:21:08:bf:ca:5b:34:7f:77:69:c2:41:b3:
                    48:60:50:58:c5:7e:94:1a:47:d9:ce:e9:98:5e:e3:
                    b6:e7:77:f6:6d:88:7e:91:cf:c5:4b:65:f6:60:21:
                    f5:22:33:a4:9e:25:8e:7d:31:03:54:72:a5:2f:3a:
                    eb:23:07:e7:a4:0f:d3:6b:ea:01:05:f3:2e:e1:30:
                    0a:f9:e8:82:c1:5b:1e:e6:24:35:0f:9d:37:f9:bb:
                    b8:1c:04:b3:1e:14:dd:aa:a8:de:52:0a:d7:d5:df:
                    bc:7d:2b:a6:84:0e:a1:10:f3:20:22:13:11:39:34:
                    2d:69:52:f9:bc:d6:62:0d:cc:94:63:84:81:e1:84:
                    fb:a9:12:62:31:4f:55:be:7f:93:e1:39:f1:17:45:
                    6b:76:d9:41:0c:23:0a:ad:41:f9:8f:f0:f7:ad:9d:
                    da:a6:52:08:27:c1:a9:22:3d:c9:8b:7b:44:57:3c:
                    8a:45:fd:a5:95:35:9b:37:de:7f:dd:6b:2e:eb:fc:
                    9a:b6:e2:8d:f0:f8:8f:94:fc:c0:dd:65:20:f2:02:
                    b0:8d:b0:f2:24:34:6a:6d:dd:9c:14:39:a9:41:94:
                    0d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1B:6E:2A:0D:20:DC:06:A7:FF:7A:52:3B:8D:4B:96:5A:16:19:D1
            X509v3 Authority Key Identifier:
                keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:be:c1:7f:89:4e:d6:0a:12:b4:53:03:98:86:22:15:93:ab:
         14:12:98:32:7f:da:1c:ff:99:8c:b9:21:19:a0:96:fd:7a:a2:
         aa:4d:7f:c5:63:54:e0:08:37:38:e4:79:a8:bb:be:78:df:b7:
         96:8a:1d:5a:29:ad:3a:15:ed:c7:b8:6b:dc:c7:3f:1e:9b:31:
         dc:2c:16:69:4a:de:74:e2:6c:71:19:c6:20:51:96:f5:c4:3d:
         2e:4c:fc:4c:1c:ba:e7:2b:fc:70:48:a2:78:67:6f:f5:cf:f1:
         89:52:d2:f1:7f:3c:ba:97:b4:89:df:23:43:d7:ca:ed:bf:1f:
         74:49:1d:c9:b7:e5:19:7d:03:04:e2:ee:c9:3e:bd:2e:84:2e:
         84:5b:78:12:e4:83:4e:e2:54:ba:38:a1:bf:9c:19:2b:55:8c:
         e2:a9:3e:a3:7d:90:46:49:44:fc:c3:fc:fb:ef:12:2c:92:8e:
         47:03:3f:a0:2c:d1:ee:f8:da:b6:63:f1:50:31:63:f6:0c:16:
         84:74:e5:82:bc:83:a2:66:d6:bc:03:19:f0:ca:4a:08:79:51:
         6b:e1:55:14:06:3a:cb:1f:a5:79:f9:27:d8:b5:8c:b0:75:2b:
         1f:b0:82:ef:79:83:19:d1:62:7d:24:a0:4d:99:dc:56:13:16:
         fe:a6:84:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org