Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e203438343635.roa
File:                     3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          Vq4jxUty+KoHPjwWwsmQjxxMbZf4Q8Jd0T0bYcA6lTY=
Subject key identifier:   EC:B2:5B:4C:96:DB:9F:B5:5F:E2:0F:E1:56:22:9B:69:31:55:D6:02
Certificate issuer:       /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
Certificate serial:       749581CF85BF2EA1440891343BB55913133493DD
Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 15 Jul 2024 02:37:07 +0000
ROA not before:           Mon 15 Jul 2024 02:32:07 +0000
ROA not after:            Mon 14 Jul 2025 02:37:07 +0000
asID:                     48465
IP address blocks:        103.13.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl
                          rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 21:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:95:81:cf:85:bf:2e:a1:44:08:91:34:3b:b5:59:13:13:34:93:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
        Validity
            Not Before: Jul 15 02:32:07 2024 GMT
            Not After : Jul 14 02:37:07 2025 GMT
        Subject: CN=ECB25B4C96DB9FB55FE20FE156229B693155D602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:64:04:c1:04:bd:d1:6c:3f:2e:3c:99:79:c6:
                    b1:32:6e:09:24:c8:2d:16:10:86:48:1d:64:be:8a:
                    2e:3f:19:9c:98:2c:2b:c8:d6:75:4b:7c:75:e1:23:
                    07:8d:a2:fd:71:d8:37:1d:43:f6:b3:bd:1e:df:72:
                    62:e4:ec:1e:84:bd:92:fe:ea:59:d0:e0:11:cf:f4:
                    e6:5d:5f:57:ec:d6:b2:cb:37:2b:a1:cc:77:1b:b1:
                    44:cd:32:72:f3:b8:2f:bf:20:5a:62:64:04:27:52:
                    8f:b3:9d:a7:1e:8d:bc:b1:c6:90:c1:9f:6a:f1:68:
                    ab:2b:5c:48:43:d5:f0:3c:99:64:c8:7e:f1:c2:f4:
                    38:b7:1f:81:10:b5:bd:37:e2:e3:8c:14:d8:aa:ae:
                    7f:f6:13:b8:3d:21:db:5f:b2:a6:70:e4:11:8c:69:
                    96:dd:ca:b2:27:26:09:3a:9c:f5:83:6a:5f:db:df:
                    32:95:8b:34:65:be:52:e5:7d:5f:97:3d:85:05:7f:
                    86:76:f8:1e:5b:f9:c0:d5:c9:7f:d3:f8:4f:3b:60:
                    17:f0:89:87:be:a9:d8:ba:8b:06:cb:dc:b5:12:92:
                    ca:d8:3e:7a:77:d1:12:e6:d8:e3:b0:52:99:6c:b6:
                    b7:8a:6f:5a:d7:a1:e2:06:b7:9d:8d:5d:07:4c:82:
                    c1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B2:5B:4C:96:DB:9F:B5:5F:E2:0F:E1:56:22:9B:69:31:55:D6:02
            X509v3 Authority Key Identifier:
                keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:e1:e0:14:c0:1b:b3:cb:4e:1d:54:b4:e6:b8:02:88:4f:3d:
         6d:de:16:ea:1e:a6:2f:85:bb:9f:29:70:24:ec:bb:e5:71:4f:
         77:41:b8:cd:e6:c0:ac:51:ba:35:e4:cc:00:21:4b:dd:6f:6f:
         2e:1d:16:94:6a:ed:dc:c9:db:b6:60:85:bf:49:85:d8:93:cb:
         2f:a7:bc:83:05:97:dd:2e:02:49:98:67:d8:b2:1e:ee:64:a2:
         e6:d0:38:c2:e7:16:10:33:ec:6a:81:ae:90:c9:e1:0b:de:ae:
         91:8f:6a:97:50:2a:8d:23:9a:2d:00:90:fd:87:7f:5e:55:49:
         f7:42:9c:59:e9:61:f2:8c:54:bc:08:3e:62:5b:07:6a:41:ce:
         db:a9:15:4b:d8:31:27:8f:ea:d6:11:ab:25:69:49:08:27:6f:
         ea:21:8b:d1:81:77:b0:45:1b:81:2f:c3:7c:90:3d:69:9f:24:
         13:a8:e3:bd:29:c0:91:6f:a6:d7:bb:9d:4b:8a:c0:06:ce:e6:
         42:fa:d1:e2:99:72:b2:46:34:fd:48:8c:ea:c3:9b:e8:b3:4e:
         3b:c8:82:7b:47:b1:fe:4c:f9:be:fc:95:26:55:ad:b5:a1:ed:
         57:28:59:c8:ab:b4:c8:60:38:68:a0:f5:95:f8:3e:66:5f:41:
         4a:10:ab:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:32 2024 by rpki-client on console-fra.rpki-client.org