Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37372e302f32342d3234203d3e203536323535.roa
File:                     3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (raw, json)
Hash identifier:          MHqEWkxk0lcqHf0DHOOzzwqgpatowmuSY53tgbg1pfo=
Subject key identifier:   05:ED:3D:9E:6D:A8:ED:13:0C:1F:AF:79:48:73:CE:3A:1C:18:5C:78
Certificate issuer:       /CN=E5B2AB049E75667C8F00ECB0EBF617859558571D
Certificate serial:       698FACB194D2C308F17E2053872DEE2DD93B8E96
Authority key identifier: E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37372e302f32342d3234203d3e203536323535.roa
Signing time:             Thu 12 Sep 2024 07:00:00 +0000
ROA not before:           Thu 12 Sep 2024 06:55:00 +0000
ROA not after:            Thu 11 Sep 2025 07:00:00 +0000
asID:                     56255
IP address blocks:        103.224.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl
                          rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 05:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8f:ac:b1:94:d2:c3:08:f1:7e:20:53:87:2d:ee:2d:d9:3b:8e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B2AB049E75667C8F00ECB0EBF617859558571D
        Validity
            Not Before: Sep 12 06:55:00 2024 GMT
            Not After : Sep 11 07:00:00 2025 GMT
        Subject: CN=05ED3D9E6DA8ED130C1FAF794873CE3A1C185C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b7:a1:09:0f:2a:af:b8:cb:70:08:14:24:6b:
                    42:65:ba:f1:e4:ea:82:b3:88:04:23:e1:d4:e5:ef:
                    bf:cf:7a:0a:ce:30:ae:2c:de:c9:c5:24:f1:be:35:
                    b4:b6:4f:1d:35:2b:35:05:47:33:70:58:59:b5:ab:
                    6d:b9:9b:14:cc:af:a6:07:1c:6c:d6:6e:a9:14:24:
                    35:22:95:d1:93:e9:eb:b4:e4:8d:61:3c:58:9b:1b:
                    55:ab:81:fd:e8:85:ef:42:51:bd:0d:08:69:51:ed:
                    18:04:d1:40:4f:f7:59:ba:af:55:ac:3a:83:4a:22:
                    68:e4:b8:b4:3e:6e:80:6a:e8:a6:61:a2:6e:19:13:
                    fa:f0:02:9f:83:64:18:e3:68:0a:0f:ab:eb:9a:2c:
                    88:3b:04:8d:cb:f1:23:4c:48:ff:c0:5f:16:ee:97:
                    11:5d:8b:b2:30:e8:76:0e:a8:a6:d6:8d:9a:31:6f:
                    16:64:77:73:64:a1:1b:e4:87:03:30:82:a0:57:3d:
                    e6:2c:42:3f:bb:04:8d:ea:92:ec:e9:90:b1:35:8c:
                    07:f9:58:e8:a6:8b:3e:37:81:b7:05:36:d1:8d:3f:
                    eb:6c:bd:d1:e8:5e:35:f6:f8:a6:1a:ad:49:1f:33:
                    71:1e:47:d7:ba:8d:c7:d2:92:38:85:3a:c6:4b:ea:
                    2d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:ED:3D:9E:6D:A8:ED:13:0C:1F:AF:79:48:73:CE:3A:1C:18:5C:78
            X509v3 Authority Key Identifier:
                keyid:E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37372e302f32342d3234203d3e203536323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:70:54:d3:c3:3a:dd:91:3c:cc:71:4d:72:c7:59:f6:33:6c:
         3c:f8:2a:7f:a1:29:3b:2e:df:36:a1:ad:7c:c7:09:5a:0b:ee:
         40:ae:e8:60:6d:6f:ef:2f:a7:97:99:81:d6:69:31:de:1d:3c:
         6c:79:30:d8:24:1e:60:e6:79:97:fb:f7:1c:98:61:66:35:ee:
         d3:06:4e:8b:58:2d:92:c2:54:37:52:00:fb:d3:1d:1c:6e:9a:
         46:c3:83:99:74:37:85:c4:cb:62:79:26:c2:bb:40:f5:b9:b5:
         2a:de:87:8e:2b:cd:6a:c8:fb:04:01:d5:96:4b:1e:b5:41:f4:
         5f:9f:96:27:fe:76:7c:09:d7:b0:0c:b6:6b:00:cc:00:db:07:
         d6:1e:19:57:be:25:f5:4d:83:3d:d0:07:78:5a:3a:bf:3c:0f:
         c3:6a:e3:29:ca:a4:ff:c6:e9:5a:a1:80:74:28:e1:89:74:63:
         b9:48:1e:e8:20:e6:f6:82:7b:a4:21:18:22:c7:c3:39:90:8b:
         28:2f:be:98:27:fb:e1:f2:58:4e:2d:7e:63:e3:08:0d:fa:d2:
         0b:f7:18:63:40:8e:7e:40:3c:5b:5b:25:6e:ae:90:91:93:fa:
         4c:e2:eb:ad:43:6e:04:b2:2d:81:34:11:4c:89:65:05:d2:e4:
         b9:34:7c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:29:53 2024 by rpki-client on console-fra.rpki-client.org