Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e32352e3130392e302f32342d3234203d3e2039333431.roa
File:                     3130332e32352e3130392e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          QhQtilqUmVuVmAkl5eZSG6gphuVqCoGmfkhpeDJ6jE8=
Subject key identifier:   BB:CC:5E:AA:3F:F8:B5:64:93:B8:23:73:C9:C1:27:8A:F2:82:CD:B3
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       2E0860DBB04AD9C51B0283A895D5FBE32998E66F
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e32352e3130392e302f32342d3234203d3e2039333431.roa
Signing time:             Fri 26 Jul 2024 14:00:02 +0000
ROA not before:           Fri 26 Jul 2024 13:55:02 +0000
ROA not after:            Fri 25 Jul 2025 14:00:02 +0000
asID:                     9341
IP address blocks:        103.25.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:08:60:db:b0:4a:d9:c5:1b:02:83:a8:95:d5:fb:e3:29:98:e6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Jul 26 13:55:02 2024 GMT
            Not After : Jul 25 14:00:02 2025 GMT
        Subject: CN=BBCC5EAA3FF8B56493B82373C9C1278AF282CDB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e2:79:00:53:82:63:d3:a6:2a:d7:17:6e:37:
                    55:f9:dc:71:ee:bb:6b:1a:63:c6:45:f6:51:a9:48:
                    4c:dd:f9:3a:c5:7b:c3:89:5b:29:dc:4c:62:75:60:
                    ea:35:59:1b:d0:6e:06:28:f0:25:f7:ce:3b:ef:fc:
                    06:d4:67:4f:d7:39:8f:9b:9a:4c:0d:57:0e:49:bd:
                    4f:45:c1:88:86:64:05:01:b2:94:91:8e:09:8e:e5:
                    40:ac:36:ad:da:d6:0d:61:6f:04:18:46:be:6f:25:
                    79:40:d3:22:30:21:61:14:f9:ba:f6:7b:d8:df:da:
                    16:4b:e4:d2:be:cf:f5:3e:fd:bf:09:5a:81:e5:78:
                    27:6f:e1:b0:4c:c9:31:30:96:b3:8d:c5:04:95:de:
                    6b:94:43:b5:3e:93:e8:6d:49:98:19:2f:ca:f1:ef:
                    16:15:ad:af:49:d5:be:7b:b8:0e:9f:3a:ed:cc:a3:
                    14:6e:e8:06:4b:65:6f:44:f9:70:a8:26:1d:bb:23:
                    3f:7b:be:93:5a:29:ac:99:8a:be:bc:bb:30:e6:5e:
                    2c:61:12:db:ea:9e:9d:80:92:16:c9:b6:e2:c8:1b:
                    0b:8c:fa:29:b1:99:03:2f:ab:fc:a0:28:59:5f:96:
                    9e:8a:ad:c8:e3:de:ef:b8:65:96:2c:5a:75:ce:03:
                    3d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CC:5E:AA:3F:F8:B5:64:93:B8:23:73:C9:C1:27:8A:F2:82:CD:B3
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e32352e3130392e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:fc:be:d8:08:ce:24:94:82:90:96:c2:0b:5c:fd:81:dd:86:
         12:1f:dc:76:8f:5c:ff:59:db:4e:71:1a:d1:b3:d4:1e:2a:d9:
         5f:b4:7d:fb:25:ac:aa:03:8f:f5:93:c9:19:6d:e5:1b:0b:61:
         4b:de:b8:5a:d4:69:7f:e9:52:2f:61:05:f9:27:db:10:e4:c7:
         ff:f5:93:48:da:1f:f1:ce:f4:27:69:a7:65:63:85:34:bd:b0:
         1f:68:4d:9c:9b:56:c6:3f:be:36:55:8e:1a:01:9b:15:d4:3e:
         5d:a9:77:a5:86:30:bf:ed:34:e3:89:3e:60:0a:a0:ea:67:cf:
         ce:ec:fd:51:cf:b3:e7:9d:c1:e0:f1:ab:f3:aa:c2:dd:e5:b5:
         d5:1e:42:4e:c1:88:f6:b1:a5:16:8e:df:2c:5b:1c:db:d2:50:
         1b:1c:4e:44:76:3d:35:08:51:83:7b:6c:33:e1:8c:43:9f:18:
         69:8e:3a:c5:86:1d:6d:0f:68:83:a9:27:66:b8:d5:a2:5a:95:
         40:69:fc:c0:0e:77:d9:64:76:d5:8e:f1:e6:52:01:3d:88:43:
         91:75:83:93:af:6e:1d:9e:51:71:e2:ba:0e:ef:b0:e4:44:5f:
         c8:c7:bc:4d:ce:e1:a9:7f:53:cd:9d:c9:68:e6:5b:86:30:6c:
         9f:97:71:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org