Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203530313034.roa
File:                     3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (raw, json)
Hash identifier:          ryO/6Q2AbjV0WKoELIMXk9RR8vL6Mlg6XujM0Ji/+2s=
Subject key identifier:   14:85:30:78:7F:16:11:EC:A6:B5:0E:18:17:04:7B:70:32:AE:45:11
Certificate issuer:       /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA
Certificate serial:       1ED92806FB42AB6E3607DECEE9E33E2BC4447C21
Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203530313034.roa
Signing time:             Wed 31 Jan 2024 21:00:00 +0000
ROA not before:           Wed 31 Jan 2024 20:55:00 +0000
ROA not after:            Wed 29 Jan 2025 21:00:00 +0000
asID:                     50104
IP address blocks:        103.195.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl
                          rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d9:28:06:fb:42:ab:6e:36:07:de:ce:e9:e3:3e:2b:c4:44:7c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA
        Validity
            Not Before: Jan 31 20:55:00 2024 GMT
            Not After : Jan 29 21:00:00 2025 GMT
        Subject: CN=148530787F1611ECA6B50E1817047B7032AE4511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:27:29:90:1c:12:f0:59:64:40:d5:85:cd:76:
                    5f:e9:3e:0f:71:22:24:88:fb:46:6e:08:c8:c7:ee:
                    a9:13:87:c7:81:47:29:b3:09:18:7a:87:70:f2:b9:
                    3d:24:cb:97:90:d1:9a:21:3c:1f:c4:ca:51:96:6d:
                    53:04:bd:e6:83:40:62:65:9b:2e:21:00:35:22:3e:
                    26:85:f1:eb:48:e8:ed:2b:31:71:59:57:33:0b:cb:
                    8f:56:b2:1a:46:77:65:26:31:e4:2a:77:81:71:6f:
                    10:09:f8:f4:8d:81:64:fb:b5:7f:ed:4d:d8:e1:86:
                    2f:b7:bd:b3:bc:ff:12:f5:5e:6e:1a:e0:56:f3:02:
                    a0:ab:dd:cf:62:dd:39:9b:ba:3a:34:6d:f4:43:20:
                    be:7d:a6:56:f8:d7:e6:c2:2f:f3:1f:b1:3a:3c:c0:
                    cc:46:89:de:e9:8b:49:90:23:68:45:ed:9b:1e:67:
                    8d:29:eb:a9:46:71:71:b9:46:98:30:56:b0:5f:2d:
                    04:60:89:c3:7a:8b:aa:b9:5f:90:84:63:5b:e8:e9:
                    54:fe:5b:6f:87:60:a3:ca:74:eb:d4:59:39:b8:8e:
                    ed:50:9f:c1:bc:d2:cb:51:33:89:40:97:d4:c2:b4:
                    1a:1c:bc:fd:35:7e:c1:23:25:06:bf:6a:88:fe:65:
                    1b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:85:30:78:7F:16:11:EC:A6:B5:0E:18:17:04:7B:70:32:AE:45:11
            X509v3 Authority Key Identifier:
                keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:22:fa:ea:6e:7c:10:3a:1b:7e:9a:c3:0d:fa:c1:b9:11:6c:
         e4:94:2a:c3:47:36:75:1a:6b:e4:60:1f:dd:b6:59:98:fe:cb:
         43:b7:53:13:87:21:aa:0a:65:8c:94:ea:1a:11:72:76:bf:13:
         11:0e:89:9c:9e:37:a8:24:a7:1e:b7:24:4f:9f:8d:67:e7:df:
         3a:93:45:4d:26:d0:43:b8:a9:5b:d3:38:84:44:8c:f0:14:d9:
         1c:1c:43:89:0a:3f:7d:c9:17:5b:4b:61:62:79:cf:41:71:6e:
         8d:e5:9f:58:23:07:bd:fc:ae:2b:88:21:d3:54:44:7a:fa:c7:
         de:23:52:b0:87:a8:79:86:fa:bc:b0:17:54:b7:6c:0d:01:34:
         c7:46:2c:b7:81:d1:99:0a:56:18:60:6a:17:d2:10:12:13:74:
         63:aa:34:e2:fe:5a:83:0d:7e:ee:cb:f6:2f:ee:97:e6:b7:d4:
         88:3c:00:74:ce:b6:9b:6f:59:9c:49:b3:aa:a4:6b:1d:6a:3b:
         43:ef:18:df:e0:1d:e4:d4:5d:10:0c:b7:7f:ae:61:a5:55:3b:
         08:e1:89:4b:36:e1:1e:4b:c4:fa:75:c4:64:b4:b5:af:f7:39:
         7e:90:2f:7d:83:48:b7:7e:a4:68:da:d3:4e:0b:c8:cf:0f:f3:
         3f:12:9c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org