Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa
File:                     3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (raw, json)
Hash identifier:          z4BeSk+gRKk6M4z7F7+D4+oTS8E9IbV3rV7rrPGM6js=
Subject key identifier:   9E:2F:51:EC:6A:79:35:8A:BB:0E:A2:BD:72:43:84:54:0E:E4:9A:D2
Certificate issuer:       /CN=28612772543E43335B080C32808B7FDC277E71E4
Certificate serial:       40983347E3993C547E204B157E3E7ACB4BFB6472
Authority key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa
Signing time:             Thu 12 Sep 2024 03:02:56 +0000
ROA not before:           Thu 12 Sep 2024 02:57:56 +0000
ROA not after:            Thu 11 Sep 2025 03:02:56 +0000
asID:                     139956
IP address blocks:        103.142.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl
                          rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:98:33:47:e3:99:3c:54:7e:20:4b:15:7e:3e:7a:cb:4b:fb:64:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28612772543E43335B080C32808B7FDC277E71E4
        Validity
            Not Before: Sep 12 02:57:56 2024 GMT
            Not After : Sep 11 03:02:56 2025 GMT
        Subject: CN=9E2F51EC6A79358ABB0EA2BD724384540EE49AD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:4f:9f:ce:77:43:cc:21:2a:20:48:64:f9:
                    c2:4c:7a:5b:7c:22:6c:d8:fc:9b:7c:1c:57:56:82:
                    96:ab:94:44:db:57:dd:ea:72:39:81:c5:8f:71:7b:
                    5b:75:96:d1:83:2b:49:7b:d1:bc:73:35:7e:b6:7c:
                    cd:2f:f2:a9:b9:3c:3a:d2:ed:13:57:20:ff:64:6a:
                    cd:fe:b5:ea:eb:6d:58:f1:f7:5e:da:2a:2d:7c:78:
                    fc:cf:d7:6e:e3:ac:f7:00:4d:a3:88:1d:a7:b9:55:
                    51:d9:ed:b4:45:21:93:b8:b2:5f:94:8d:03:c4:9c:
                    b8:38:2b:4c:b0:86:32:97:b1:b6:9b:ba:91:6e:60:
                    ff:a0:08:ae:90:08:f7:d7:92:55:ab:a6:89:71:4d:
                    a4:92:b5:1c:9b:19:da:96:96:c6:f6:15:c4:9f:81:
                    2d:d0:89:ec:3a:48:d7:40:56:59:d5:6f:4a:7c:10:
                    0e:f5:c5:dc:c6:2a:97:11:95:73:84:1d:81:8d:4a:
                    dc:0e:d2:af:73:4e:e8:24:0a:4d:d8:7c:04:c1:a5:
                    d1:5e:84:d5:32:f6:da:21:76:c5:d1:ae:e3:b5:f8:
                    72:20:53:32:5e:d2:42:27:78:d6:f9:52:e3:8b:7f:
                    8e:ad:2c:d9:d2:5b:d4:d7:d3:ba:71:6c:47:00:56:
                    ed:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2F:51:EC:6A:79:35:8A:BB:0E:A2:BD:72:43:84:54:0E:E4:9A:D2
            X509v3 Authority Key Identifier:
                keyid:28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:ad:04:80:6d:c0:2d:34:69:a4:eb:d6:b6:74:03:9d:9c:7a:
         4f:52:a1:95:db:e9:2c:b1:53:78:94:08:a9:00:5b:61:06:2f:
         e3:d2:cc:3e:fa:07:8e:04:e7:e5:6f:8e:ed:e3:10:1b:2a:af:
         0b:6d:ea:6c:87:87:71:3b:26:d2:f0:8e:fa:5f:48:3b:f3:91:
         31:05:3e:06:bb:eb:0b:1d:41:50:6b:96:7f:f1:d5:1b:55:ca:
         16:8a:57:67:36:55:0d:f6:4c:90:0a:05:75:d4:ec:d2:2b:83:
         ec:c7:02:3e:48:bc:93:2f:6c:21:6b:0c:c1:69:91:84:ef:66:
         79:1d:83:5d:c3:d1:ef:55:59:2c:56:da:a3:5a:c0:ad:8b:7c:
         c9:1d:98:ba:2f:74:80:8f:c8:fc:14:4b:69:55:0f:18:85:cf:
         f9:5f:63:81:16:04:4b:a8:18:17:69:f6:33:c3:be:f4:36:31:
         7a:00:2f:c6:70:f7:44:d2:55:64:ec:16:8e:34:8f:53:60:c4:
         60:1f:52:c4:e6:e6:a3:ee:53:90:6a:3b:1b:13:1a:66:ba:28:
         4b:67:4a:ba:67:aa:c3:5a:6f:dc:f5:7d:f1:5b:28:8e:3e:20:
         c6:d6:2a:70:5f:d2:9a:02:95:f9:de:0c:42:ce:cb:2d:b1:64:
         0c:3e:4f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org