Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa
File:                     3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (raw, json)
Hash identifier:          E/D2Cv8nys+Xw52/1AbUQ7ljKhbTpvG2KMsVr5WOMsA=
Subject key identifier:   94:FF:2E:34:35:17:83:F5:2B:A7:29:49:34:77:FE:A5:FF:74:2B:77
Certificate issuer:       /CN=0FA41B65D1881666013C9683E40575E68E5DC0A5
Certificate serial:       7B66565B398902F77EDA030A4063BB67DD6E2D4D
Authority key identifier: 0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa
Signing time:             Fri 02 Aug 2024 11:02:27 +0000
ROA not before:           Fri 02 Aug 2024 10:57:27 +0000
ROA not after:            Fri 01 Aug 2025 11:02:27 +0000
asID:                     141107
IP address blocks:        103.220.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl
                          rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:66:56:5b:39:89:02:f7:7e:da:03:0a:40:63:bb:67:dd:6e:2d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FA41B65D1881666013C9683E40575E68E5DC0A5
        Validity
            Not Before: Aug  2 10:57:27 2024 GMT
            Not After : Aug  1 11:02:27 2025 GMT
        Subject: CN=94FF2E34351783F52BA729493477FEA5FF742B77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:81:5d:bb:98:49:72:26:9b:23:73:ae:61:b3:
                    cd:b2:de:bc:0c:b8:9f:79:7b:48:eb:e9:e1:c0:8e:
                    16:70:ef:f8:75:72:15:94:99:f5:0d:f7:53:b7:7e:
                    d5:69:39:2d:a9:be:41:f9:b5:be:c4:8a:91:5b:0c:
                    c8:fe:05:a2:2e:e1:9f:db:a3:f1:a2:30:32:fd:11:
                    fd:b4:48:e3:4c:aa:34:a1:3d:33:2a:3a:39:d1:3a:
                    81:09:e0:a8:81:6f:b0:ef:db:e0:f8:e2:33:33:5b:
                    bf:03:b3:f1:ed:a2:32:54:30:01:1d:20:bc:b0:04:
                    c3:27:41:f6:02:b2:ed:e6:49:95:57:07:3a:89:0c:
                    f8:e9:52:94:b5:60:e1:01:5d:64:3d:f2:2b:07:11:
                    6f:ec:54:5a:13:19:bd:f5:0a:0a:dc:b2:e4:b4:d4:
                    ca:a0:f9:05:58:59:cc:4d:c8:31:81:ae:71:23:f9:
                    5c:a8:c9:45:1f:1f:cc:fd:13:97:c6:d5:5c:3c:55:
                    83:90:6c:50:fb:0b:0f:4b:ae:05:79:ea:3a:aa:a6:
                    db:a5:0f:ad:92:52:83:fa:cb:e6:8a:03:e1:32:88:
                    b4:6d:1b:50:23:dd:35:08:ad:c9:cc:be:d0:93:82:
                    9f:86:c5:1b:48:79:86:4b:39:07:88:c0:dc:1b:15:
                    e0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FF:2E:34:35:17:83:F5:2B:A7:29:49:34:77:FE:A5:FF:74:2B:77
            X509v3 Authority Key Identifier:
                keyid:0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.220.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:ab:08:ea:69:3a:e4:35:cc:81:d1:5a:f7:fc:f1:41:df:be:
         74:18:30:f0:8e:18:a9:92:ba:86:91:fb:5b:d4:77:dc:6b:6f:
         d4:58:37:7c:c4:93:83:fc:ea:fe:cb:32:95:09:22:2f:1f:43:
         7b:a6:b6:34:7c:77:b6:b4:15:88:e2:1e:f2:49:d7:8b:ef:87:
         ca:06:4b:ee:c8:77:6f:7b:19:78:6d:d6:d0:7c:e9:64:a8:34:
         bd:e3:5c:74:81:5e:6c:dd:4d:9e:ab:c4:b7:15:47:74:24:7e:
         06:cd:da:d7:c6:02:fc:12:6d:a5:69:3a:c8:1c:8b:6c:e1:06:
         49:a5:84:f4:cd:9c:c5:2e:01:0f:5e:43:ea:10:4d:75:57:f3:
         15:20:f4:38:7f:eb:90:50:63:cc:78:f0:b2:c2:80:96:a3:d0:
         1a:c2:7b:8d:66:18:6d:25:f7:c4:18:f2:4f:ac:e3:0e:b6:a6:
         51:9b:fb:f3:9e:80:e9:44:b6:c3:6b:20:53:44:1c:64:22:22:
         b4:d7:02:d5:71:23:93:51:e8:70:ea:a8:02:09:e7:97:b2:d0:
         bf:08:94:09:62:29:c1:5f:0d:ca:07:4f:4c:79:d2:2b:02:07:
         77:fd:b6:e0:93:74:de:44:88:c3:64:df:39:96:a9:35:64:8a:
         ca:e0:c2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:51 2024 by rpki-client on console-fra.rpki-client.org