Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130332e31322e32382e302f32322d3234203d3e203535363730.roa
File:                     3130332e31322e32382e302f32322d3234203d3e203535363730.roa (raw, json)
Hash identifier:          RTKq+KNIMQtjHmaGcIFEI8O5xsHc+JbM4YVC1smExa8=
Subject key identifier:   F3:E7:27:70:79:E1:98:9D:36:B8:CE:3A:7A:D0:2D:B0:ED:55:4C:9F
Certificate issuer:       /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E
Certificate serial:       09A60E1EA244B12F48F6B438032AF9FAD5AA501C
Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130332e31322e32382e302f32322d3234203d3e203535363730.roa
Signing time:             Tue 18 Jun 2024 02:00:01 +0000
ROA not before:           Tue 18 Jun 2024 01:55:01 +0000
ROA not after:            Tue 17 Jun 2025 02:00:01 +0000
asID:                     55670
IP address blocks:        103.12.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl
                          rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 15:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a6:0e:1e:a2:44:b1:2f:48:f6:b4:38:03:2a:f9:fa:d5:aa:50:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E
        Validity
            Not Before: Jun 18 01:55:01 2024 GMT
            Not After : Jun 17 02:00:01 2025 GMT
        Subject: CN=F3E7277079E1989D36B8CE3A7AD02DB0ED554C9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:35:e3:e3:f1:0c:67:a9:8a:03:a3:dc:1a:25:
                    c8:e6:bb:eb:ae:bf:59:25:be:63:b7:71:19:07:d2:
                    c3:fe:4e:7a:53:45:2f:ff:6c:44:ff:b2:13:54:dd:
                    9e:13:96:b7:cf:e8:a9:31:30:a3:73:d6:5b:c1:45:
                    b5:66:b0:a5:53:40:cd:ba:c6:3a:22:4e:b6:4e:47:
                    38:8f:27:0b:4f:b3:ab:52:05:11:ac:71:d9:4f:09:
                    08:09:12:1a:b2:58:59:e5:36:34:d3:cf:29:d4:2f:
                    bf:0e:40:ea:9c:1e:ee:cd:08:7b:3e:80:2d:74:8d:
                    59:c0:96:87:7a:f1:79:6e:6b:10:a3:47:6b:ce:34:
                    43:0a:30:25:62:e4:c5:78:30:05:c2:f2:23:99:45:
                    e2:65:9e:ce:5e:fa:32:6a:b4:4a:5d:6b:23:2f:3a:
                    a9:80:22:8c:98:2f:a1:bd:a1:98:e7:54:73:2b:4e:
                    29:09:21:ba:81:18:16:e8:bf:39:04:7e:06:6d:d1:
                    7a:2c:da:90:37:e6:6f:be:25:52:29:53:db:70:ec:
                    5c:0c:08:65:8b:89:9e:57:2b:39:2d:2c:19:1e:e3:
                    25:b8:72:ad:36:c3:ca:9e:a8:f0:fa:c7:b3:f4:30:
                    79:78:f4:bb:6a:f7:57:d8:91:76:65:f1:97:13:a3:
                    0f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E7:27:70:79:E1:98:9D:36:B8:CE:3A:7A:D0:2D:B0:ED:55:4C:9F
            X509v3 Authority Key Identifier:
                keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130332e31322e32382e302f32322d3234203d3e203535363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:bd:b2:89:bf:df:75:fc:4d:6f:64:8b:10:f2:00:83:da:3d:
         62:e1:d9:a3:f1:a0:42:22:0d:3e:7f:87:76:80:18:63:3d:9c:
         26:51:57:f5:c9:7c:98:a6:8d:7c:8f:c0:8e:8b:3f:b2:5e:86:
         cb:c2:74:67:61:43:88:76:44:ca:91:6f:6d:e1:15:9b:25:85:
         47:7f:75:42:14:8d:53:65:af:c4:e1:56:c7:5b:9d:48:27:9d:
         ec:8b:cd:63:8a:83:61:71:6d:b9:7a:e5:08:77:01:be:3b:5c:
         4b:13:91:f6:20:fe:ea:70:3c:64:8c:61:1d:4e:cb:cc:df:65:
         4f:2b:ea:06:47:ff:08:8a:5d:36:d9:df:b6:5b:7d:89:39:7e:
         5f:0f:cc:86:66:2c:5d:40:a1:d8:a3:7a:fc:c5:80:19:f1:fe:
         d6:69:b6:b5:b6:e5:20:d4:a9:cb:32:8c:7f:ab:47:e1:31:3e:
         25:c7:a2:77:d8:ea:5e:78:74:b8:9e:69:9c:0a:a1:78:9d:46:
         79:d9:c6:a2:5c:94:1a:fc:a4:fe:e9:68:56:b1:81:34:ca:2f:
         07:12:2f:53:2e:6e:07:9f:9b:7c:c2:47:5e:7f:d2:ea:d7:90:
         d4:85:9b:80:39:00:c4:ed:1c:61:00:79:99:9e:bf:6a:b5:65:
         89:f5:33:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:26 2024 by rpki-client on console-ams.rpki-client.org