Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa
File:                     3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa (raw, json)
Hash identifier:          f/arRfXAUGPd0PxBrTY92XVsLoDe3ia1QDQqr6ZPyiI=
Subject key identifier:   DC:88:43:58:86:56:9E:18:EF:34:BC:BC:9D:21:BC:20:A0:10:8C:84
Certificate issuer:       /CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
Certificate serial:       0EEB7F18727B88D32A6242F90FC325A003F8CAAF
Authority key identifier: D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa
Signing time:             Tue 13 Aug 2024 10:00:02 +0000
ROA not before:           Tue 13 Aug 2024 09:55:02 +0000
ROA not after:            Tue 12 Aug 2025 10:00:02 +0000
asID:                     38750
IP address blocks:        103.213.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl
                          rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:eb:7f:18:72:7b:88:d3:2a:62:42:f9:0f:c3:25:a0:03:f8:ca:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
        Validity
            Not Before: Aug 13 09:55:02 2024 GMT
            Not After : Aug 12 10:00:02 2025 GMT
        Subject: CN=DC88435886569E18EF34BCBC9D21BC20A0108C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:4d:72:46:f9:53:93:66:b1:bc:c6:56:b4:
                    96:b7:46:5b:77:3a:64:02:8c:5d:a4:fb:9d:e1:eb:
                    56:6f:04:32:fd:f9:8c:ac:84:b5:98:cc:20:58:be:
                    a7:76:44:47:5e:12:40:c0:ed:cd:c5:47:25:56:12:
                    18:92:03:38:2d:c5:37:1f:c5:ec:9d:64:56:d2:c1:
                    ef:2e:57:ee:a1:70:3c:24:78:d5:b8:e9:87:eb:97:
                    cb:13:c6:ea:e4:6e:da:2d:c9:61:71:c2:df:0e:25:
                    52:08:1f:ff:92:2b:39:29:8b:91:5a:c9:fb:05:8b:
                    30:d4:49:f8:7d:10:a7:cb:9a:71:3a:01:e3:62:b6:
                    46:08:ab:42:96:69:95:50:e0:17:7f:5b:ec:9f:51:
                    a7:8a:e5:ce:ae:33:c5:76:1b:7f:45:61:f7:72:52:
                    29:31:80:24:69:cd:c1:d1:47:e1:29:81:d7:c6:55:
                    57:cb:7c:a6:ba:92:f2:5a:13:a6:b1:98:14:10:a6:
                    c8:51:41:32:29:6b:08:63:dd:a9:0a:a1:13:e6:05:
                    2b:fc:db:c8:4f:16:6f:6d:f4:04:38:32:32:d7:7b:
                    2e:58:e4:55:68:11:3b:48:9d:49:67:48:b5:84:75:
                    f6:88:50:e9:26:43:a2:93:d3:63:08:d5:67:5b:26:
                    23:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:88:43:58:86:56:9E:18:EF:34:BC:BC:9D:21:BC:20:A0:10:8C:84
            X509v3 Authority Key Identifier:
                keyid:D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:02:96:f3:2c:8a:f7:06:2c:48:a1:3a:79:07:28:a2:d3:83:
         cc:19:b8:4f:4f:04:71:4a:ff:ab:a1:d0:52:40:6c:4f:2d:71:
         ce:94:86:4b:76:dd:19:b3:0c:ba:73:98:0f:b3:e7:ca:d1:ad:
         0a:87:e2:2d:bf:a6:f0:5e:5a:18:7e:c7:50:8a:d5:be:4e:aa:
         2f:05:f8:aa:40:e4:fb:0c:5a:a7:19:e6:29:de:ee:f3:67:a7:
         91:64:12:c0:f1:7f:19:29:fe:63:6b:bd:fd:c7:95:58:d7:52:
         85:92:10:7e:84:ec:dd:ea:79:78:04:04:48:9e:b2:7b:1b:a3:
         fa:75:2f:63:07:f1:87:96:dd:02:ae:8b:02:9b:7d:d3:42:8f:
         e2:db:99:52:66:55:38:20:b5:d9:96:be:d6:de:e9:ac:35:21:
         a4:d8:b0:b7:d1:c9:41:f6:c6:3c:d1:c6:29:e3:1f:ae:ca:c5:
         f1:98:b3:e2:00:fe:9c:76:64:83:01:80:64:1f:e9:ca:00:80:
         8a:b9:29:22:4b:8d:17:ac:b4:43:39:d8:fc:22:53:21:41:19:
         5b:58:b7:fa:58:eb:2e:99:b6:65:02:ad:fb:a5:9a:c7:f5:18:
         a7:a2:f4:a7:c7:b0:38:d9:cd:3b:8f:97:b1:a6:51:57:00:0d:
         a2:1b:26:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:20:18 2024 by rpki-client on console-ams.rpki-client.org