Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          bSCplJXjwOVVCMiGzugmM6WG+S3f7kGFkCb6IM986a8=
Subject key identifier:   2D:F1:6A:04:68:C5:C5:1F:6E:65:62:45:E7:AF:A2:C4:0D:5B:70:BB
Certificate issuer:       /CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F
Certificate serial:       42986A6BEF7E3DAE174403C4A15E0FB71110022A
Authority key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa
Signing time:             Tue 21 May 2024 08:02:38 +0000
ROA not before:           Tue 21 May 2024 07:57:38 +0000
ROA not after:            Tue 20 May 2025 08:02:38 +0000
asID:                     9341
IP address blocks:        103.189.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl
                          rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:98:6a:6b:ef:7e:3d:ae:17:44:03:c4:a1:5e:0f:b7:11:10:02:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F
        Validity
            Not Before: May 21 07:57:38 2024 GMT
            Not After : May 20 08:02:38 2025 GMT
        Subject: CN=2DF16A0468C5C51F6E656245E7AFA2C40D5B70BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:c5:c3:d4:f9:6e:57:4e:f9:a3:6e:0d:85:
                    de:fd:80:15:68:a0:ed:49:c8:92:c5:e2:b0:21:99:
                    cd:76:c8:f6:99:c3:40:52:d2:82:e1:5c:22:09:04:
                    98:96:be:8c:b8:44:c4:02:45:b3:81:8a:3b:7c:60:
                    f0:82:11:a6:ef:0b:74:70:92:b7:2c:f9:62:90:56:
                    fe:b5:48:02:56:58:ee:06:c3:24:40:42:69:eb:66:
                    24:7c:e9:bc:7e:cf:a1:cc:48:b8:e3:9b:a3:3c:62:
                    13:36:ee:6c:e5:2e:75:3e:af:bd:2a:fc:19:01:b4:
                    91:f1:86:2b:94:9f:38:8c:ab:a4:a5:b2:89:8a:83:
                    b5:4b:f7:e7:03:07:75:86:b3:f0:ce:2e:46:a1:48:
                    d8:3d:c8:06:a7:3e:cc:69:19:cf:27:ae:c6:fc:60:
                    fe:01:c1:37:d9:09:14:bd:db:35:73:7f:80:ed:62:
                    c7:7a:f1:13:c0:da:c5:db:3c:88:cf:4d:ba:68:47:
                    94:71:b1:f4:ac:f0:e2:3e:28:b4:f1:90:0a:6a:3c:
                    8f:ee:ac:76:2a:73:e3:1e:0a:1b:b8:11:f2:4d:cc:
                    65:fd:f1:2f:75:1e:42:c7:0f:be:a0:8f:47:91:0b:
                    0c:54:dc:e9:74:7b:eb:83:05:9c:29:74:6e:81:5e:
                    0f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F1:6A:04:68:C5:C5:1F:6E:65:62:45:E7:AF:A2:C4:0D:5B:70:BB
            X509v3 Authority Key Identifier:
                keyid:5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:b3:9a:38:c9:5e:1b:2c:62:fb:6a:ef:d9:6f:bd:38:ae:02:
         21:fd:e4:2d:7b:f5:20:d2:35:1c:58:e0:d7:bb:fd:00:7a:04:
         87:1d:fc:2b:6b:2b:27:2f:5a:72:c8:6c:77:1d:13:60:0f:cf:
         71:0c:8c:73:32:4f:55:1a:78:d3:38:72:3d:e2:df:c0:82:60:
         7c:7f:95:fe:e2:04:a2:ab:90:4f:12:fa:ce:39:93:3f:77:a0:
         24:46:2b:dd:a2:a5:24:a5:e4:a3:8b:4d:5f:7a:80:50:13:42:
         78:08:c8:b1:92:ed:f9:82:9d:f9:d8:0d:06:a7:b6:25:19:0a:
         ca:ef:03:11:0d:52:e1:59:a2:69:df:69:8b:c0:2c:23:08:70:
         1c:f3:fa:fc:0e:e3:32:df:cd:6d:f5:f3:ad:f6:14:dd:2d:57:
         30:fa:0b:aa:b3:b7:92:2d:63:61:cf:cb:53:25:d0:19:6e:fa:
         95:91:e6:e1:36:7c:f4:19:91:98:3f:91:fc:dc:14:ca:2b:3a:
         b4:71:3b:48:a2:1e:d8:f3:ac:04:d3:4b:a5:61:27:a1:95:97:
         52:30:79:a8:61:ef:e1:bd:6f:f7:a9:cc:91:2e:4f:9f:9b:04:
         05:84:63:a7:83:8a:d1:67:57:b2:3a:5e:70:06:bb:d7:c0:1c:
         45:38:54:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org