Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa
File:                     3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (raw, json)
Hash identifier:          A6qaCFKyI8dUr1nO6FquVRGin/CswiRL6mnLkqKByNE=
Subject key identifier:   87:79:67:52:B2:F7:B5:7D:C7:D4:63:41:80:B4:03:CE:38:78:1A:78
Certificate issuer:       /CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410
Certificate serial:       46A1248E1D564F0D72E47C10C13CC6CA3BAE5F8C
Authority key identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa
Signing time:             Mon 15 Jul 2024 22:00:02 +0000
ROA not before:           Mon 15 Jul 2024 21:55:02 +0000
ROA not after:            Mon 14 Jul 2025 22:00:02 +0000
asID:                     64027
IP address blocks:        103.214.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl
                          rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a1:24:8e:1d:56:4f:0d:72:e4:7c:10:c1:3c:c6:ca:3b:ae:5f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410
        Validity
            Not Before: Jul 15 21:55:02 2024 GMT
            Not After : Jul 14 22:00:02 2025 GMT
        Subject: CN=87796752B2F7B57DC7D4634180B403CE38781A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a1:ec:51:1e:1e:21:84:bb:8c:26:23:a9:48:
                    8e:bc:89:b3:06:a1:c6:8f:5a:22:53:09:83:cd:b2:
                    15:82:b8:a8:75:30:75:87:a3:d3:eb:04:4f:98:fe:
                    a9:23:e3:08:c1:e3:59:8d:ef:aa:69:f2:44:d7:2d:
                    d9:04:65:a6:30:61:0b:98:d6:9d:62:95:a0:6f:51:
                    8d:e5:11:ba:06:6e:80:ff:dc:65:8c:67:9d:5b:57:
                    2a:ef:70:86:61:a0:fc:ba:82:99:f8:9f:1a:21:f0:
                    07:27:b3:ee:01:98:da:19:91:e1:96:58:9e:ff:3f:
                    db:40:8c:00:59:ed:0c:28:5a:ce:61:bb:b1:ef:37:
                    eb:df:78:78:96:2a:4f:55:a5:d3:b6:42:59:48:03:
                    e1:af:43:ce:50:94:9a:89:44:77:10:7c:0f:dc:61:
                    72:79:a3:59:e0:e4:81:c0:93:37:62:39:fd:15:4c:
                    ab:5c:4f:47:f8:11:11:17:c5:dc:23:6f:6d:dd:30:
                    9f:8d:68:f6:70:b9:ab:25:4d:d8:24:de:75:bd:e0:
                    e5:49:b5:ef:c2:de:e1:29:84:64:62:6c:cd:ee:8f:
                    a9:18:7e:59:6a:8e:22:12:64:33:bf:79:8f:37:f8:
                    c6:8b:27:4b:c4:07:92:b8:3d:77:a7:13:b9:86:1a:
                    63:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:79:67:52:B2:F7:B5:7D:C7:D4:63:41:80:B4:03:CE:38:78:1A:78
            X509v3 Authority Key Identifier:
                keyid:13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:f6:e8:b5:53:ab:60:46:ad:6f:34:09:a6:3b:09:5a:23:a3:
         58:eb:65:09:89:67:1e:bf:5f:24:18:c9:09:80:29:9f:c1:60:
         34:d3:53:22:e2:2e:23:17:11:cd:95:7f:f7:5d:53:a1:91:3f:
         b4:b5:3e:2c:2d:fd:92:b3:a5:51:22:2b:4e:ba:19:13:ed:98:
         bb:9b:59:77:72:8c:78:cc:91:1f:97:22:93:49:2a:79:e2:76:
         70:29:1a:e1:ef:d1:ca:c2:58:1d:4d:8e:08:e2:82:8d:d8:7d:
         5c:68:64:d4:8f:c6:e5:7e:be:9e:89:5e:6f:62:78:23:44:75:
         06:18:f6:c6:1b:c0:63:b7:5a:31:b4:ad:cb:c1:e1:70:8a:9f:
         a6:bb:53:ca:66:a3:5e:75:55:c8:c5:7e:ee:96:7c:99:c6:ce:
         6b:f2:a2:e1:ab:97:74:e0:56:83:89:33:2a:73:0e:a1:17:e5:
         7e:60:09:30:31:2f:46:ae:f9:0c:93:89:fa:77:0a:93:6b:62:
         ec:4e:34:3e:0a:4b:81:fb:86:da:be:a7:30:22:e1:a4:ef:63:
         63:89:73:c4:41:f4:98:b8:ad:d7:bd:fa:fa:2c:90:66:ee:91:
         ea:53:e2:14:46:72:d7:b5:c4:9a:86:c7:57:42:c3:d2:f1:30:
         2c:9b:30:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:02 2024 by rpki-client on console-ams.rpki-client.org