Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/3130332e38382e39312e302f32342d3234203d3e20313530323232.roa
File:                     3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (raw, json)
Hash identifier:          Ey+hAeMC3FZdl/vgDwtSv8s2kkOb2B/dnDhrf0lue/o=
Subject key identifier:   37:4B:DC:7F:B8:D5:71:44:AA:5D:3F:F2:F1:14:BE:08:75:CD:74:96
Certificate issuer:       /CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB
Certificate serial:       4287A1A772A4B42920D855C57CD8187FC8FD96B9
Authority key identifier: 04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/3130332e38382e39312e302f32342d3234203d3e20313530323232.roa
Signing time:             Mon 12 Aug 2024 15:00:01 +0000
ROA not before:           Mon 12 Aug 2024 14:55:01 +0000
ROA not after:            Mon 11 Aug 2025 15:00:01 +0000
asID:                     150222
IP address blocks:        103.88.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl
                          rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:87:a1:a7:72:a4:b4:29:20:d8:55:c5:7c:d8:18:7f:c8:fd:96:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB
        Validity
            Not Before: Aug 12 14:55:01 2024 GMT
            Not After : Aug 11 15:00:01 2025 GMT
        Subject: CN=374BDC7FB8D57144AA5D3FF2F114BE0875CD7496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a4:bb:11:2a:54:b7:c5:3e:03:9d:4b:c4:7f:
                    40:a2:e3:ac:2b:85:76:6b:2a:18:36:33:d0:e2:1f:
                    ec:20:57:56:f5:ac:5e:ed:9d:c3:d4:09:71:7e:47:
                    a9:bd:44:d4:6c:19:63:08:5a:f6:8a:44:e3:42:95:
                    32:ad:5d:94:24:5f:89:42:32:39:a3:85:fb:9f:25:
                    97:6a:e2:19:c7:5a:9c:12:7e:26:ab:3d:3b:74:1d:
                    f2:be:f4:30:65:a1:53:28:7c:58:4b:eb:65:79:cc:
                    73:e8:1a:ad:41:49:76:dc:d0:cf:24:a4:e5:e9:6f:
                    b6:1d:44:9d:a0:ea:77:79:0e:67:60:50:d5:01:ef:
                    0e:f3:a4:a0:8d:20:34:60:ce:de:3e:21:1d:a5:c3:
                    c3:fc:39:bf:f4:e7:7d:eb:5b:77:86:81:1a:fa:48:
                    70:48:d4:56:df:93:26:51:00:d0:fd:8e:cc:39:b7:
                    28:45:88:36:18:d7:06:8b:93:24:59:03:35:09:9d:
                    6e:19:ad:c3:fe:79:9e:08:5a:b2:d2:d3:d1:ff:e0:
                    58:88:db:8f:b6:5a:73:43:26:94:8d:fb:27:c9:f8:
                    0e:be:8b:86:7a:f1:6d:35:3e:08:de:7f:9f:2b:61:
                    57:3b:00:dc:00:a7:48:33:05:26:7f:0e:d4:e9:1c:
                    ec:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4B:DC:7F:B8:D5:71:44:AA:5D:3F:F2:F1:14:BE:08:75:CD:74:96
            X509v3 Authority Key Identifier:
                keyid:04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/3130332e38382e39312e302f32342d3234203d3e20313530323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.88.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:7b:a7:49:03:05:74:80:23:ef:8d:f8:5b:6f:bd:f1:38:f0:
         fd:3b:35:79:9a:fa:4e:a0:9a:9b:92:88:bd:3c:d5:4c:4a:6f:
         6c:4c:ce:45:5a:f2:5a:b3:95:32:58:63:6c:ff:24:21:51:92:
         7e:cf:90:0d:1d:34:e2:c1:79:1f:3f:df:09:35:1e:41:23:64:
         8a:b6:35:79:38:bf:50:82:c2:b0:97:23:6f:b8:9d:cb:5a:3b:
         19:f6:01:9f:fc:76:4e:16:57:44:e4:63:9d:65:e2:1e:cf:f5:
         88:85:0b:2c:d2:d0:0f:61:32:eb:3f:2b:89:c9:8a:55:34:83:
         ae:4f:61:3f:1f:14:3f:ea:2e:90:6b:42:71:b5:56:c4:7e:a5:
         63:65:41:ca:e6:a9:81:4c:d9:8f:f3:7d:53:8f:92:4d:66:83:
         61:d0:44:75:1e:e9:9e:d9:89:04:43:1d:53:18:00:c9:a1:92:
         6b:c4:55:54:0a:7c:7b:e7:ed:fd:15:d9:0d:f8:09:f2:67:bf:
         84:e6:3c:46:97:cc:7c:8a:7c:b7:cd:33:d7:44:ef:f9:3d:8a:
         cb:04:14:cf:b5:6a:84:99:9d:be:84:3b:ba:54:0d:99:87:44:
         42:b3:2f:1a:da:98:30:9f:d6:98:6b:b2:67:e2:8a:83:69:af:
         33:e6:0e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:28 2024 by rpki-client on console-ams.rpki-client.org