Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3232392e302f32342d3234203d3e20313336303838.roa
File:                     3130332e38372e3232392e302f32342d3234203d3e20313336303838.roa (raw, json)
Hash identifier:          49GaAONRTztAZUBI3terW3rMJ2d/tzm3bqYy1W0/6E4=
Subject key identifier:   1A:B9:11:DF:D0:61:5E:9B:AE:29:EE:17:E0:F2:4A:81:A3:B2:83:BB
Certificate issuer:       /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial:       43F591D8B19DB29343C4034CA99D1BA17C25ED28
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3232392e302f32342d3234203d3e20313336303838.roa
Signing time:             Mon 01 Jul 2024 01:04:20 +0000
ROA not before:           Mon 01 Jul 2024 00:59:20 +0000
ROA not after:            Mon 30 Jun 2025 01:04:20 +0000
asID:                     136088
IP address blocks:        103.87.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
                          rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f5:91:d8:b1:9d:b2:93:43:c4:03:4c:a9:9d:1b:a1:7c:25:ed:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
        Validity
            Not Before: Jul  1 00:59:20 2024 GMT
            Not After : Jun 30 01:04:20 2025 GMT
        Subject: CN=1AB911DFD0615E9BAE29EE17E0F24A81A3B283BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fe:08:d3:40:a6:78:a4:72:ff:30:16:24:36:
                    3f:ef:10:97:0e:1f:80:fc:31:f0:74:ef:4f:4f:c8:
                    2c:5b:78:df:c9:cd:71:21:b6:ce:bb:a8:fd:23:0a:
                    a1:05:1a:10:27:ed:8b:4f:99:6f:e4:5c:9d:f9:76:
                    51:c9:2a:0f:e2:9d:af:c2:4c:b1:2c:9c:e4:cc:c8:
                    db:27:49:8b:86:4c:1b:cc:fd:d2:db:d6:9d:02:41:
                    6e:0a:47:df:af:1b:cf:8c:d7:25:be:28:fa:7f:3e:
                    3b:bb:38:96:6e:53:dc:75:a1:2d:e4:ef:fc:10:11:
                    ec:95:80:3a:50:3a:96:42:67:e2:cb:74:1c:fb:e3:
                    8b:93:57:7b:c4:c2:4a:13:ad:cd:4b:90:d9:de:49:
                    a1:09:43:fa:39:22:83:66:b5:f5:0d:c4:1d:9d:4b:
                    91:fa:79:d2:49:b3:90:26:47:93:3b:a3:39:26:da:
                    50:36:57:75:94:75:0c:3c:bd:bb:78:f6:f8:5d:ea:
                    a3:48:6a:c4:a4:5b:44:45:7a:99:67:a3:97:5a:01:
                    b6:c3:7f:b0:51:2c:02:02:f7:f1:68:c2:32:0b:58:
                    bc:1d:39:d2:fc:95:81:88:61:57:f4:cf:b9:db:fa:
                    fc:99:c7:8f:ce:3d:11:af:b2:86:d1:e0:6f:60:45:
                    1a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B9:11:DF:D0:61:5E:9B:AE:29:EE:17:E0:F2:4A:81:A3:B2:83:BB
            X509v3 Authority Key Identifier:
                keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3232392e302f32342d3234203d3e20313336303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:cf:a3:35:27:f3:cf:ed:c6:6c:c8:e1:1b:84:21:1d:99:8c:
         ea:97:a3:8e:e2:4f:5e:80:3c:8a:cf:db:7f:e1:6e:a6:ba:73:
         fe:f9:b6:11:c6:52:81:b5:0b:43:3f:9b:3c:3b:73:0e:d9:b4:
         92:07:7f:d3:f9:e1:94:7f:4b:40:83:40:0b:7d:f9:df:08:7c:
         63:12:d1:99:b7:a5:6c:c2:b0:08:89:2a:13:6f:20:aa:df:83:
         02:e3:b7:27:0f:0f:d7:80:a1:cf:14:55:2e:9f:d3:30:c7:66:
         f8:0f:2d:2f:31:da:ec:a4:e7:d0:21:eb:f6:a2:03:05:ef:84:
         66:e8:53:1b:16:70:bb:10:c0:28:63:ad:c7:30:7b:76:24:58:
         8d:56:41:b2:6c:76:1a:34:fe:25:ae:9f:48:29:b7:c0:ec:a6:
         a5:37:85:cf:5e:b9:f0:e9:f6:56:42:8f:48:54:b6:d8:ba:bd:
         10:9c:77:dd:cc:a3:08:94:2c:a9:74:ae:3a:92:fe:1d:9e:34:
         19:18:aa:77:2f:7b:70:7d:c0:a5:9e:ce:7b:a9:d3:ce:6d:97:
         60:b8:fa:ac:04:bb:c2:0d:1e:f8:a6:b8:c9:34:58:aa:30:ec:
         41:6a:36:06:e2:4d:75:f2:3b:88:d3:28:1e:5d:bb:35:11:6a:
         21:26:5a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org