Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa
File:                     3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (raw, json)
Hash identifier:          ln4Ofi4VkpxhIBCKYceqIG3INrnNW1q33kOikEH5kEw=
Subject key identifier:   A4:E2:5C:6C:27:99:C0:B4:80:CB:E2:8A:C6:78:AF:D1:8A:EE:57:46
Certificate issuer:       /CN=0433DC81885AA9736198E4B13311013B6539B05D
Certificate serial:       33B05AB8F928ADE341A690A7F0F547D3B7D18819
Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa
Signing time:             Sat 11 May 2024 01:00:02 +0000
ROA not before:           Sat 11 May 2024 00:55:02 +0000
ROA not after:            Sat 10 May 2025 01:00:02 +0000
asID:                     149718
IP address blocks:        103.187.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl
                          rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b0:5a:b8:f9:28:ad:e3:41:a6:90:a7:f0:f5:47:d3:b7:d1:88:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D
        Validity
            Not Before: May 11 00:55:02 2024 GMT
            Not After : May 10 01:00:02 2025 GMT
        Subject: CN=A4E25C6C2799C0B480CBE28AC678AFD18AEE5746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:4d:9e:fc:63:76:b5:f5:b7:35:4b:c5:19:
                    11:53:ad:26:f6:30:9d:80:a2:2d:58:31:50:c5:cf:
                    57:65:a6:e5:62:b3:93:74:77:32:60:6f:1c:89:d9:
                    bb:12:7d:da:89:55:bc:37:0f:91:ae:50:0e:2f:2f:
                    c8:b4:68:94:20:b6:92:69:c5:d2:87:3d:87:98:cb:
                    2c:61:b7:4c:ac:d0:c3:7b:b7:71:7b:4a:a6:99:d7:
                    2c:aa:54:cd:5e:dc:a4:6b:08:0b:0b:d7:09:37:a6:
                    a9:da:29:54:98:cd:a5:c0:9e:76:37:21:b6:71:13:
                    69:2b:c3:ae:f6:5c:84:ec:ae:cb:e4:c3:5c:6b:24:
                    9c:b7:30:ea:fb:99:ff:bd:ba:35:f2:a0:d5:a9:55:
                    96:4d:22:c4:cb:fe:7f:62:12:d2:4f:0d:6b:57:85:
                    3e:dc:fd:4d:04:5a:7a:b0:c4:c7:c9:8d:0e:82:8f:
                    90:6a:7a:76:9e:4e:f3:0e:bb:16:6f:fd:f1:1e:6f:
                    da:8c:81:db:85:47:51:87:70:f8:7f:8c:b5:8b:07:
                    f6:ea:1f:2f:a5:56:f1:f4:d1:9f:4d:bf:8b:d5:97:
                    e5:df:99:e0:ab:e4:c2:71:c0:f9:0b:a4:57:d3:b7:
                    74:9a:d5:98:66:b1:1e:b4:c3:bf:7b:bf:fb:b6:ac:
                    93:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E2:5C:6C:27:99:C0:B4:80:CB:E2:8A:C6:78:AF:D1:8A:EE:57:46
            X509v3 Authority Key Identifier:
                keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:5a:95:70:7d:3b:37:8a:65:d1:97:93:d4:27:78:50:4b:05:
         1a:c7:ff:0e:d0:1e:dc:c0:ea:00:95:b3:b5:c8:2e:a9:68:20:
         07:58:bf:fe:70:40:05:9a:39:4a:e5:f4:a1:a0:11:ad:45:cc:
         89:68:b8:3a:c9:b9:d0:2c:f2:61:15:d4:a6:de:5b:1c:8a:d3:
         70:92:c0:6d:73:f9:b3:63:19:be:59:4b:be:42:b1:f3:ce:76:
         4a:c3:38:be:51:1e:a9:d6:13:17:7d:64:77:b7:72:32:a1:6b:
         91:04:40:cc:8c:1b:e3:74:a7:e0:ed:2f:94:ea:e9:02:39:ee:
         e5:3a:5c:03:c8:78:31:86:ce:3b:db:04:fb:72:36:f0:ce:4e:
         47:1b:29:ad:af:21:01:be:b6:c2:66:45:39:06:8b:36:bb:38:
         2f:b3:62:a4:63:b0:84:c7:e9:69:f8:23:94:94:24:7f:ef:b5:
         87:0d:57:25:6d:a0:dd:02:ec:e2:fa:2a:7b:3f:d0:73:89:64:
         85:b5:2d:c9:f5:a8:60:66:c4:2b:67:d8:8d:79:cc:39:7b:8b:
         db:f4:a1:3b:43:b7:df:a5:e3:92:4f:33:5b:42:9a:75:0b:e8:
         1c:01:cf:aa:92:a2:04:a4:83:9f:40:25:93:39:ae:f9:f6:61:
         26:60:b5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:13:38 2024 by rpki-client on console-fra.rpki-client.org