Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/3130332e3132392e3232302e302f32342d3234203d3e20313338303632.roa
File:                     3130332e3132392e3232302e302f32342d3234203d3e20313338303632.roa (raw, json)
Hash identifier:          pEPx9GlfgVdff970wI4B5m8bQvmaU/OAu7JqFmxVjdc=
Subject key identifier:   3B:25:E3:6F:7C:6C:12:FB:94:49:8C:73:C0:CF:06:F3:A5:A2:16:91
Certificate issuer:       /CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD
Certificate serial:       63F0AFC8658AE643DD906FDF9321F9A32641BAE4
Authority key identifier: E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/3130332e3132392e3232302e302f32342d3234203d3e20313338303632.roa
Signing time:             Mon 01 Jul 2024 01:02:50 +0000
ROA not before:           Mon 01 Jul 2024 00:57:50 +0000
ROA not after:            Mon 30 Jun 2025 01:02:50 +0000
asID:                     138062
IP address blocks:        103.129.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl
                          rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f0:af:c8:65:8a:e6:43:dd:90:6f:df:93:21:f9:a3:26:41:ba:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD
        Validity
            Not Before: Jul  1 00:57:50 2024 GMT
            Not After : Jun 30 01:02:50 2025 GMT
        Subject: CN=3B25E36F7C6C12FB94498C73C0CF06F3A5A21691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:34:90:c5:de:88:27:78:c3:c2:10:b8:3f:27:
                    b8:3b:7b:5e:46:94:bd:98:38:58:b0:63:a0:a5:b6:
                    1a:a8:dd:07:fa:33:d4:f1:9a:da:b4:ee:15:60:ec:
                    50:c2:9b:23:b0:24:a7:3b:9c:a2:cf:fc:71:e0:e4:
                    64:93:af:71:1b:39:33:b0:d7:ec:a7:f4:dc:4d:6a:
                    e2:bc:12:b8:cb:d1:4b:dd:cf:dc:a6:b5:1f:1b:9b:
                    81:f7:73:e6:3a:60:60:61:71:49:0e:6c:e1:c1:e1:
                    80:87:7d:ad:c0:c0:d0:03:18:05:30:36:99:67:dc:
                    48:3f:15:26:e5:c7:cd:e6:ae:ae:2a:8e:0c:27:62:
                    51:cb:12:e6:22:71:06:f6:8e:11:d3:e5:6b:f2:5d:
                    4d:1b:d5:8d:8f:32:9a:71:ba:6f:11:4a:cd:6c:f4:
                    cb:5d:f5:61:a9:c3:c4:fa:70:7c:58:c2:ae:0d:d0:
                    ff:aa:1d:42:82:20:cf:7b:4d:c5:60:a4:c1:73:87:
                    61:29:23:eb:c4:9e:11:47:f4:ab:bf:70:fd:84:52:
                    1d:8d:c9:9f:58:20:6c:27:14:46:a2:a8:67:74:c5:
                    7f:54:8b:d9:f0:61:f9:5e:d6:b4:d3:e8:52:69:e8:
                    b8:c7:12:5c:b6:bd:8c:de:51:ee:c6:87:3f:ca:91:
                    bb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:25:E3:6F:7C:6C:12:FB:94:49:8C:73:C0:CF:06:F3:A5:A2:16:91
            X509v3 Authority Key Identifier:
                keyid:E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/3130332e3132392e3232302e302f32342d3234203d3e20313338303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:0b:ec:2b:1f:65:8f:26:73:dc:2e:7d:e8:7b:8c:36:3d:a1:
         c4:e8:94:8d:87:84:04:d0:f7:8a:df:eb:37:c8:3d:35:36:01:
         fc:4b:7b:8f:ca:e7:b3:6e:d4:5b:70:14:61:b4:4a:0c:ab:77:
         4a:c5:20:18:ba:c3:eb:c4:18:55:d7:e9:d6:59:38:6f:2e:10:
         40:8e:76:e4:59:da:2b:68:43:c0:fc:cd:32:f9:82:32:0e:80:
         97:09:da:db:65:ef:d6:7f:5f:38:5b:ec:04:68:0f:6e:1d:af:
         35:c7:9a:c2:39:ef:a5:6b:fa:3e:b0:69:47:76:9b:a2:b8:5e:
         9b:49:7a:be:f5:76:f3:e8:36:b0:91:d5:ca:39:4c:01:56:ea:
         11:1d:ba:c8:bd:fa:7e:53:99:b9:f0:b4:c8:86:f9:68:5d:b2:
         90:9b:f3:c1:2c:ed:a2:57:17:a9:15:50:a5:c0:96:53:fd:fb:
         44:f7:a4:05:12:42:e2:dd:7c:eb:5e:05:96:cf:b2:a8:d6:ed:
         99:e8:74:fc:03:47:24:37:04:06:77:ff:7f:c5:ab:f4:67:20:
         1e:08:46:f7:57:74:ac:de:c5:b5:3c:5f:ff:78:ba:d1:f3:9c:
         0d:39:13:e5:a4:a3:9a:7b:38:fc:87:15:aa:03:b1:de:53:89:
         fa:b5:cf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:52:55 2024 by rpki-client on console-ams.rpki-client.org