Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e34322e34302e302f32322d3234203d3e2039333431.roa
File:                     3130332e34322e34302e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier:          MvIPRcEZs4nln2WOljhg2L3a2zCF546Xnto7YGelL6I=
Subject key identifier:   87:4D:9D:FC:ED:6E:5B:22:18:8E:82:70:8A:A0:08:71:5C:04:F2:3D
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       37833CC0276950E2680A29DAD6799E7A35C1F3D9
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e34322e34302e302f32322d3234203d3e2039333431.roa
Signing time:             Fri 26 Jul 2024 14:00:02 +0000
ROA not before:           Fri 26 Jul 2024 13:55:02 +0000
ROA not after:            Fri 25 Jul 2025 14:00:02 +0000
asID:                     9341
IP address blocks:        103.42.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:83:3c:c0:27:69:50:e2:68:0a:29:da:d6:79:9e:7a:35:c1:f3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Jul 26 13:55:02 2024 GMT
            Not After : Jul 25 14:00:02 2025 GMT
        Subject: CN=874D9DFCED6E5B22188E82708AA008715C04F23D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:20:e9:72:38:48:29:5d:b8:a1:d1:43:fd:73:
                    21:76:e8:47:3b:3c:22:7a:af:70:29:cd:17:5b:18:
                    ae:66:64:c4:b3:2d:98:24:06:46:30:7b:9c:5c:aa:
                    b0:5b:33:6e:d1:4f:34:1a:bc:c3:9f:81:30:c9:2f:
                    a8:82:41:81:f7:f0:fc:50:1d:34:3c:9b:0a:70:7b:
                    a7:5f:e4:52:f0:d4:01:67:0d:19:f5:e1:48:91:b9:
                    c0:fe:85:04:32:b0:8a:ee:1f:0c:5e:ba:51:ff:10:
                    40:36:84:00:8d:db:cb:ec:4b:2b:6c:2a:58:e2:fe:
                    4a:4c:9a:91:64:9c:c8:ac:e7:a4:19:20:0a:a5:20:
                    49:eb:e1:50:d1:78:23:cb:ed:86:a5:96:f2:c2:16:
                    37:99:21:2e:be:2c:34:38:29:8f:2d:00:e6:84:5e:
                    34:1a:5c:b5:b8:c1:11:74:48:dc:4a:ce:e1:14:ee:
                    d1:c8:5b:00:78:e1:a6:ef:79:9f:96:56:a5:42:9d:
                    b5:4a:d4:15:69:0b:ae:22:13:0e:ab:0d:a2:b3:d5:
                    06:fd:97:32:fe:cc:9e:78:83:6e:6e:a0:48:e7:69:
                    c7:ff:46:3d:b3:c4:e1:72:03:8c:68:21:3a:cb:42:
                    93:e3:09:f2:d4:38:43:6a:c3:08:2d:af:73:01:0f:
                    cd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4D:9D:FC:ED:6E:5B:22:18:8E:82:70:8A:A0:08:71:5C:04:F2:3D
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e34322e34302e302f32322d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:17:7c:94:23:46:a4:a8:0f:00:08:d1:e7:96:74:e9:b7:6b:
         b4:ce:50:43:70:c7:69:3d:30:d1:28:95:6b:02:2d:46:cd:da:
         8a:8a:8e:f2:fd:77:ae:81:a2:f5:c3:6d:4e:eb:92:f6:d6:64:
         5e:34:4f:90:26:91:89:ab:17:e7:59:94:07:80:d1:9b:80:72:
         5b:90:5d:3c:ae:e4:61:aa:99:66:f1:ed:2b:8b:ad:aa:af:ee:
         74:35:65:85:06:ea:df:c4:f5:40:8b:c5:ef:b8:6f:ef:d1:57:
         44:89:67:c7:10:2d:ae:01:70:6a:b0:34:da:d3:53:cb:aa:c7:
         69:00:6c:24:fb:26:28:1d:cf:0b:5a:db:f9:f9:60:c6:7d:a8:
         d8:86:d7:81:c0:4f:69:f6:7f:33:0a:b1:ac:1f:6b:d4:77:7c:
         bc:13:5d:ab:98:2c:7c:ed:c2:32:e3:9b:00:7a:e2:6a:35:ee:
         09:7d:37:3c:6d:8a:a7:e5:63:96:f9:2c:80:cf:0f:6d:fb:b3:
         bb:42:4c:72:b4:a6:d6:70:73:17:68:6e:5e:1b:01:fc:48:f8:
         ba:91:78:f4:3d:ac:c7:11:68:99:f4:2e:1d:1f:4a:57:85:dc:
         2c:4e:c8:88:d1:37:31:5e:70:27:d9:2e:29:ce:25:61:6a:43:
         51:14:88:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org