Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32342d3234203d3e203634333030.roa
File:                     3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (raw, json)
Hash identifier:          HX+M1/c843BtAi9GCzNvz5IespxJbiI9xxHDdoPxfdI=
Subject key identifier:   32:D8:F1:9C:5F:47:91:F9:4C:8C:97:F1:2D:0B:B9:F5:D6:32:F4:42
Certificate issuer:       /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
Certificate serial:       5063D475B7458CDEDDA9846E745DE64E1F39F753
Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32342d3234203d3e203634333030.roa
Signing time:             Fri 07 Jun 2024 15:46:01 +0000
ROA not before:           Fri 07 Jun 2024 15:41:01 +0000
ROA not after:            Fri 06 Jun 2025 15:46:01 +0000
asID:                     64300
IP address blocks:        103.13.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl
                          rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 10:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:63:d4:75:b7:45:8c:de:dd:a9:84:6e:74:5d:e6:4e:1f:39:f7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
        Validity
            Not Before: Jun  7 15:41:01 2024 GMT
            Not After : Jun  6 15:46:01 2025 GMT
        Subject: CN=32D8F19C5F4791F94C8C97F12D0BB9F5D632F442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:63:63:fb:11:a6:61:dd:aa:4d:2a:bc:f3:f6:
                    55:24:80:2a:fd:6c:12:13:95:3d:32:a6:ba:03:f0:
                    70:54:4d:dc:b4:8f:29:cf:76:02:81:8d:ae:fe:4b:
                    b5:9f:8c:c2:10:d2:f0:10:5f:7e:ba:1d:e9:b5:83:
                    8e:c5:d4:99:5b:5d:3c:5a:89:9c:65:b5:3a:3d:f8:
                    fb:2a:d0:48:c7:45:ed:08:47:fc:a3:10:1b:72:f5:
                    a2:74:7c:3c:23:ad:1f:43:7e:73:3d:ab:ee:b0:5a:
                    56:9d:9c:bd:32:00:51:eb:30:41:a9:4d:3f:00:2d:
                    cc:24:c6:ce:48:c7:fb:d4:b6:13:cc:37:79:8c:c8:
                    41:11:b5:cb:81:93:66:e9:ac:74:d9:da:19:19:3c:
                    30:6b:b7:fb:7f:04:a8:47:f1:44:95:d6:16:40:52:
                    ad:24:90:c2:5e:74:b9:ea:ec:a1:04:13:f3:88:c5:
                    81:e4:ca:52:0e:cd:36:87:d4:ef:27:74:86:96:8d:
                    91:48:85:ea:7a:e3:43:b4:94:31:e8:56:82:73:1a:
                    db:e1:75:4b:3b:49:45:d7:02:83:56:8c:29:39:0b:
                    22:83:08:f6:98:10:3f:f6:57:d4:a3:9b:fa:40:7e:
                    0c:f7:f2:fd:34:e2:dd:16:44:5e:98:b8:88:88:cc:
                    08:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D8:F1:9C:5F:47:91:F9:4C:8C:97:F1:2D:0B:B9:F5:D6:32:F4:42
            X509v3 Authority Key Identifier:
                keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32342d3234203d3e203634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:f1:38:8b:e2:bb:dc:e2:1a:14:3c:5b:db:e5:78:25:95:b8:
         cb:5b:5b:40:f1:99:08:fe:fe:8b:f8:c1:b1:56:12:b6:aa:d6:
         85:c9:c9:3f:3d:02:ac:ba:f1:86:10:6e:cc:3f:13:5a:90:6c:
         ec:10:8d:6a:01:4a:43:15:97:9c:30:b6:b4:17:8b:c0:ba:37:
         d4:90:72:67:44:49:20:eb:cc:99:1b:ae:ae:79:38:bd:9a:b4:
         21:64:96:11:c8:cc:49:a0:65:4a:9b:ad:ba:7a:c1:53:e3:40:
         e4:d7:cf:b0:db:85:b6:bd:06:71:86:62:44:22:93:1f:e7:3c:
         aa:47:79:14:f8:ca:45:3f:65:9f:af:cb:6b:ea:ac:82:7f:bc:
         47:f8:64:6d:cd:c3:29:8e:49:fc:75:4f:58:4f:3a:b2:dc:88:
         55:e7:d3:b9:ab:4c:0b:69:66:23:84:fe:d8:dc:e3:bc:e0:b5:
         c8:ec:a5:3f:c3:93:3f:b8:e1:12:ab:f8:2e:44:08:3c:0d:e0:
         e6:5f:0d:57:d7:a8:ca:0a:eb:2f:1d:90:6c:d6:b1:09:f2:b7:
         d0:31:f9:3d:99:5c:26:09:85:ff:9f:02:b6:a6:be:e2:c5:0d:
         b2:8d:a9:43:c6:9c:4e:76:02:ce:b6:1b:4b:e4:bb:47:b8:b4:
         84:19:85:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:49:16 2024 by rpki-client on console-fra.rpki-client.org