Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa
File:                     3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (raw, json)
Hash identifier:          hn9BpZ4mJ7xZ4KfEXMzBILbMuvOXYpPzh4YpRCquyqk=
Subject key identifier:   47:77:E0:71:25:F2:E0:BB:89:8C:2C:DB:DD:A2:AE:C7:D0:14:CD:FB
Certificate issuer:       /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Certificate serial:       564B1AB824F69E0BFCC81A8C157E76FA659A35A3
Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa
Signing time:             Fri 25 Oct 2024 13:00:01 +0000
ROA not before:           Fri 25 Oct 2024 12:55:01 +0000
ROA not after:            Fri 24 Oct 2025 13:00:01 +0000
asID:                     136061
IP address blocks:        103.82.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
                          rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 16:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4b:1a:b8:24:f6:9e:0b:fc:c8:1a:8c:15:7e:76:fa:65:9a:35:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
        Validity
            Not Before: Oct 25 12:55:01 2024 GMT
            Not After : Oct 24 13:00:01 2025 GMT
        Subject: CN=4777E07125F2E0BB898C2CDBDDA2AEC7D014CDFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:15:f7:b2:76:f7:1d:46:a2:02:44:01:d7:
                    36:2c:67:70:e3:d8:6a:18:1c:06:05:64:b2:31:8b:
                    5b:cd:6a:40:20:3c:ff:55:6c:1d:61:1a:10:f9:cc:
                    f6:c2:c7:c9:ad:c6:a9:fc:bb:38:a2:ec:37:13:16:
                    22:44:9c:61:e2:3e:2f:02:f3:2e:3c:d8:18:0a:56:
                    70:08:6a:dc:eb:43:53:67:ac:ea:c0:d7:57:73:69:
                    8f:8a:29:e7:42:b9:5c:67:cf:c1:0d:e3:1b:27:be:
                    01:ed:0a:bc:7c:c2:66:5f:7c:29:9a:05:c8:75:38:
                    00:3b:5a:0a:df:54:45:f4:4e:f7:20:04:ab:67:b2:
                    e2:3a:d3:01:01:5c:bf:9e:d6:d5:9f:be:6e:49:69:
                    76:fc:7f:a1:a9:43:85:39:a1:42:36:3f:4d:c9:64:
                    56:21:7d:bc:7d:8c:c6:88:f5:a6:c9:31:ac:82:78:
                    90:7d:43:ef:e5:fd:ca:ad:e0:de:9f:a6:f7:19:a2:
                    32:aa:dc:f3:39:fb:a4:59:98:6e:62:b2:ee:0b:9a:
                    0c:a7:02:b3:96:f9:68:bf:00:b5:73:52:2f:ac:d8:
                    12:be:cf:2e:67:bf:6a:a9:3c:e6:5a:0d:89:81:16:
                    a8:ed:97:48:2b:e4:d1:aa:83:2e:c3:a8:00:23:5c:
                    f2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:77:E0:71:25:F2:E0:BB:89:8C:2C:DB:DD:A2:AE:C7:D0:14:CD:FB
            X509v3 Authority Key Identifier:
                keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:0f:b8:ce:2d:6b:0e:8a:1b:82:71:50:ba:2b:c5:5d:3f:3c:
         1a:6a:8c:7e:47:07:98:0c:45:2a:6e:e4:cf:e2:58:14:93:b3:
         ee:7a:eb:1a:36:a3:a6:db:ea:a2:57:2e:66:49:2d:60:11:e5:
         2a:92:95:9a:5f:84:cc:51:28:3b:b9:26:50:96:86:ef:04:25:
         97:db:a4:b4:07:2f:23:3a:b4:ec:c5:1a:37:9a:ff:7c:1b:6b:
         68:d8:73:df:0f:5d:37:0a:db:44:17:7e:03:50:46:5e:fb:9c:
         ae:d8:38:fc:10:9c:8d:c2:35:c0:6e:96:ea:82:c0:88:7e:c5:
         5b:56:2d:a1:af:7a:db:4f:7a:c6:aa:24:01:1c:38:59:20:17:
         e3:0c:49:bc:01:6f:a3:9f:57:f6:1c:cf:56:2d:54:a0:4d:4f:
         17:27:4f:df:ce:b7:0f:a4:9a:77:f9:f3:49:a4:56:22:ae:fd:
         78:5d:c5:fb:d6:28:5e:f0:98:a7:61:6a:45:96:9c:5b:fc:18:
         d7:ba:45:25:5c:eb:9a:51:1f:d1:a6:02:87:d8:65:66:6d:93:
         4e:6d:15:53:4c:b0:fa:8c:ab:69:0e:e9:15:fc:9d:2f:4b:3f:
         7b:88:3c:ab:da:24:d9:bf:cc:c1:12:b5:a8:fe:2f:fd:3f:f1:
         ad:42:a4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:43 2024 by rpki-client on console-fra.rpki-client.org