Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa
File:                     3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (raw, json)
Hash identifier:          M8eQrIYoHKI4QrJSn5fFXFJR7PhUYac8EY7GOcmyaWE=
Subject key identifier:   ED:90:B9:AE:9F:F8:9D:CD:A6:5B:37:D5:2F:32:FA:36:A5:82:50:85
Certificate issuer:       /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
Certificate serial:       2FEE3E18FBF91E70196C6457273F084509964CFF
Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa
Signing time:             Sat 13 Jul 2024 13:00:01 +0000
ROA not before:           Sat 13 Jul 2024 12:55:01 +0000
ROA not after:            Sat 12 Jul 2025 13:00:01 +0000
asID:                     137366
IP address blocks:        103.116.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl
                          rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ee:3e:18:fb:f9:1e:70:19:6c:64:57:27:3f:08:45:09:96:4c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
        Validity
            Not Before: Jul 13 12:55:01 2024 GMT
            Not After : Jul 12 13:00:01 2025 GMT
        Subject: CN=ED90B9AE9FF89DCDA65B37D52F32FA36A5825085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:1d:d3:7e:da:24:61:4d:aa:a5:a4:8f:33:
                    a4:af:14:42:00:ea:53:12:ec:aa:21:ab:a4:82:d8:
                    e5:f4:8b:2e:68:33:87:22:3e:31:56:c4:52:44:30:
                    21:3d:37:be:00:85:11:3e:de:5e:a3:75:d5:6e:bb:
                    62:4f:35:02:b7:ae:6f:2e:2b:9d:5f:24:71:32:41:
                    cb:51:9c:c3:ff:7f:b3:f9:df:ec:47:55:43:bb:ea:
                    2a:b8:78:64:de:25:88:c2:37:40:8c:38:97:f6:7c:
                    ae:a9:61:97:4e:27:da:01:30:95:4f:e7:25:e4:91:
                    be:9e:4e:37:28:27:e2:f8:df:6c:2a:f4:1d:c2:e4:
                    65:5d:7d:43:1a:8f:18:5e:e2:9e:04:31:fe:28:8b:
                    0a:68:83:62:cc:a3:8e:8e:25:c7:37:d1:9c:d5:0d:
                    5c:06:4c:85:8c:b9:fd:8a:18:8e:ed:b6:b5:ba:73:
                    65:25:6d:23:4b:5d:f2:64:67:64:ee:58:fb:ea:b3:
                    d9:85:46:f0:75:a3:fa:ea:14:1f:b7:86:4f:25:15:
                    cf:93:0b:24:69:1c:2e:54:b0:d8:f3:d9:38:c9:15:
                    dc:77:bd:0a:d2:1e:32:48:e2:86:56:b4:a2:2e:6b:
                    28:b8:26:f7:6f:43:79:06:ac:54:cf:27:84:7a:3f:
                    b1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:90:B9:AE:9F:F8:9D:CD:A6:5B:37:D5:2F:32:FA:36:A5:82:50:85
            X509v3 Authority Key Identifier:
                keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:0f:47:b8:4d:34:83:5a:64:2f:ed:ab:00:47:83:d5:ea:56:
         96:99:12:2c:75:11:50:42:bb:81:87:86:00:e3:6f:2f:e5:2c:
         aa:76:35:3b:d3:a5:b8:6d:fb:a0:87:a4:f7:5b:ce:00:79:8f:
         b8:32:c3:32:bb:dd:e6:44:70:f9:28:bb:3e:3d:bf:38:26:80:
         d0:ad:ed:6d:5f:10:45:71:37:77:76:34:2a:20:8f:54:19:94:
         51:74:5b:7b:09:f4:71:6d:95:b5:3d:d8:56:7e:cf:9b:36:73:
         a0:05:81:00:08:43:e4:eb:38:13:2c:a7:50:e9:e1:bb:eb:5a:
         b6:d8:1d:2f:0b:cf:01:72:e4:c9:f7:b1:6d:47:08:b4:36:38:
         26:fa:0d:21:b4:ed:35:bc:8d:b2:a7:61:88:08:53:25:b7:22:
         cb:24:87:19:30:e4:b8:8f:88:dc:35:b8:67:34:ca:c3:ce:6a:
         0d:db:87:0f:76:34:12:3e:40:a4:05:04:95:0f:96:f1:7a:d2:
         f6:6e:60:a1:47:fd:a9:e6:ed:97:e2:7f:28:34:1d:99:30:db:
         cf:ea:45:39:18:f4:1c:75:9f:7a:a0:d4:29:f5:27:1c:b5:36:
         d3:47:13:e0:f5:6b:72:f0:ff:b4:df:13:d3:cf:74:39:68:e1:
         2a:84:1c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org