Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3230362e3234302e302f32322d3234203d3e2039333431.roa
File:                     3130332e3230362e3234302e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier:          nmvQwofPaVpB9qgokk7jMkkLyMYbaNxgr2yvSpIbRe4=
Subject key identifier:   2F:7D:69:12:77:2D:C1:E8:14:9E:CC:3B:B4:29:A4:97:62:A4:6D:CB
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       38F4E0B9F5801F098C19AD1579F18AA82815DBE8
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3230362e3234302e302f32322d3234203d3e2039333431.roa
Signing time:             Thu 23 May 2024 01:00:01 +0000
ROA not before:           Thu 23 May 2024 00:55:01 +0000
ROA not after:            Thu 22 May 2025 01:00:01 +0000
asID:                     9341
IP address blocks:        103.206.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f4:e0:b9:f5:80:1f:09:8c:19:ad:15:79:f1:8a:a8:28:15:db:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: May 23 00:55:01 2024 GMT
            Not After : May 22 01:00:01 2025 GMT
        Subject: CN=2F7D6912772DC1E8149ECC3BB429A49762A46DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:18:2a:c2:fd:5c:75:8c:c4:9b:93:83:8c:85:
                    37:24:21:2b:4c:e1:4c:6f:e7:38:0e:64:94:64:29:
                    ad:f2:3e:19:e8:a1:f6:ba:59:67:b7:0f:6e:53:12:
                    36:3f:be:72:89:bf:82:c5:d6:56:86:9a:9b:94:b7:
                    02:b7:9b:da:5b:aa:6b:9b:6b:1c:4c:29:dd:77:c6:
                    db:01:d8:7d:66:9b:99:a0:8e:68:62:aa:92:80:78:
                    0c:4e:56:57:5c:1a:ec:2d:c1:dc:90:12:40:ac:6a:
                    3c:b9:71:70:45:41:70:55:62:cd:69:38:97:ac:92:
                    3e:36:2d:34:8e:7b:b4:89:f9:47:79:af:d3:8e:b1:
                    e5:01:30:e0:5c:6b:46:b2:45:db:45:29:14:e2:ca:
                    fd:f6:a0:99:4a:ab:cf:06:4a:bf:52:b5:6c:d2:94:
                    1f:b7:df:5f:bd:8e:6e:d7:ba:9b:c0:11:74:e9:c9:
                    76:52:a2:00:f3:61:19:c1:4d:44:a5:c9:65:ae:44:
                    01:fc:6b:bc:69:ab:30:79:27:5c:80:5b:04:43:2f:
                    c0:5a:9c:e4:1b:e5:9a:fb:75:f4:a2:ee:18:fb:8a:
                    f0:1d:52:b5:12:8a:96:65:1e:06:9b:1c:fd:58:50:
                    72:0e:4e:a3:db:f2:1b:df:42:79:59:4d:27:43:41:
                    27:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:7D:69:12:77:2D:C1:E8:14:9E:CC:3B:B4:29:A4:97:62:A4:6D:CB
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3230362e3234302e302f32322d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.206.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:d8:a5:8a:7f:32:56:b0:30:1f:7d:cb:16:35:8e:ed:e8:5f:
         4f:09:4b:13:fd:b7:c0:1f:6a:23:54:2b:d5:0e:b9:22:0d:3b:
         73:a8:cb:ca:de:16:46:ed:f9:5a:98:2a:d3:4d:f1:56:c3:01:
         dc:d5:af:02:50:b4:79:11:16:88:6d:b6:d3:4a:cf:7a:a6:5b:
         9a:e0:a5:ee:f9:24:5e:5e:4f:87:ea:9a:2a:ba:84:d4:80:6d:
         29:0c:9c:e0:9e:21:9a:2a:8d:0e:4c:aa:b0:4d:68:d0:af:2d:
         1a:ec:92:83:39:0b:29:cc:83:10:01:6c:77:9a:81:4a:91:ae:
         22:df:16:02:89:58:3d:c6:45:53:53:79:8a:b9:b5:c9:bb:b9:
         0e:6d:4c:8b:cf:cc:30:32:88:e3:fd:54:d4:a3:c9:88:6a:cc:
         7d:c0:bf:61:d7:7e:f7:d9:91:8e:c3:47:37:f4:35:c0:10:30:
         37:18:01:22:cb:75:59:b0:24:b0:fa:6d:22:ab:9c:bf:68:f5:
         3e:fa:8c:65:13:c6:f2:63:ca:ba:a2:a9:c4:8b:5d:24:cb:7f:
         b1:3c:92:00:04:2e:79:15:88:91:8d:1d:b2:c1:e8:56:26:51:
         6f:cb:70:60:64:78:e6:d4:ea:ee:22:2e:64:08:ad:70:02:a6:
         7e:b3:ae:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:20 2024 by rpki-client on console-fra.rpki-client.org