Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa
File:                     3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa (raw, json)
Hash identifier:          R89NTAfJB/Q21U8fZyxSLP5VcqJL2ym88fO/Tfizi7k=
Subject key identifier:   6A:3D:B2:DA:DA:C9:4A:09:6E:D3:44:9F:6D:F1:35:EC:6B:7D:E5:13
Certificate issuer:       /CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7
Certificate serial:       7470128FDA3E2929BB4C701868A5DCEDFB21EBA0
Authority key identifier: C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa
Signing time:             Thu 21 Nov 2024 05:00:02 +0000
ROA not before:           Thu 21 Nov 2024 04:55:02 +0000
ROA not after:            Thu 20 Nov 2025 05:00:02 +0000
asID:                     131743
IP address blocks:        103.227.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl
                          rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:70:12:8f:da:3e:29:29:bb:4c:70:18:68:a5:dc:ed:fb:21:eb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7
        Validity
            Not Before: Nov 21 04:55:02 2024 GMT
            Not After : Nov 20 05:00:02 2025 GMT
        Subject: CN=6A3DB2DADAC94A096ED3449F6DF135EC6B7DE513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:17:f7:1b:c3:00:d0:4c:83:0b:42:14:e5:
                    bb:d8:9d:7b:05:2d:2b:44:56:ab:c2:4f:6a:b7:53:
                    1c:64:f1:3b:20:b8:ef:27:04:c7:60:d4:4f:7b:7a:
                    65:37:b5:24:36:a2:46:71:58:52:f2:99:b9:c7:bd:
                    44:72:1b:6a:c5:ce:9e:8b:0b:e8:47:7e:05:a2:0d:
                    74:00:34:bc:2a:1b:c4:1e:e9:08:3d:3e:0c:6f:26:
                    32:5e:fc:18:f9:be:6c:1b:12:8d:1d:46:7b:3a:a3:
                    05:e0:ff:25:de:f6:84:e9:e1:b9:6f:eb:45:80:8e:
                    b3:39:cf:3e:17:e4:1d:e5:f6:b9:0a:de:af:eb:9c:
                    c4:e2:f8:e8:79:f2:fa:57:3e:e2:d3:b0:cf:da:a8:
                    7c:97:36:76:b5:cc:b4:9e:9d:fb:b0:23:90:51:ae:
                    f2:a8:ed:30:f3:bf:e5:cd:3c:99:5f:8a:ad:f9:cc:
                    fd:4f:23:0c:91:8c:fe:e2:aa:bc:63:df:42:71:86:
                    fd:1c:7e:f4:d6:b5:ad:1f:a0:57:66:a4:8b:d5:20:
                    7b:4c:f4:ee:a7:eb:91:3a:fc:09:0c:c8:6a:77:84:
                    f2:b2:24:5e:a1:f4:4b:10:02:7d:9b:45:ff:46:70:
                    77:30:8a:cf:12:31:2e:d2:45:9f:74:c8:b3:08:24:
                    1c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3D:B2:DA:DA:C9:4A:09:6E:D3:44:9F:6D:F1:35:EC:6B:7D:E5:13
            X509v3 Authority Key Identifier:
                keyid:C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:e2:80:ca:93:f8:4f:9d:a6:24:28:64:97:40:34:4e:6f:40:
         a2:7b:2c:c0:a5:99:82:ba:21:b3:7f:e0:63:bc:e1:eb:c8:e4:
         4f:b2:c0:de:2e:b1:f6:a4:bb:0f:34:b8:dc:f0:56:06:2b:e6:
         05:6e:ea:7e:76:7b:5f:07:06:3f:9c:f6:09:bf:ed:46:8e:9a:
         36:04:40:9c:b5:db:9d:36:3d:8c:a7:b5:cb:96:cc:83:ae:1e:
         8e:ef:db:68:ce:05:e6:af:81:49:21:2d:a7:49:11:66:85:21:
         18:61:66:69:6b:ba:2f:4f:dd:62:4b:fb:b5:f8:2f:09:2f:cb:
         51:5c:31:be:7f:a8:4c:dd:98:df:38:18:c5:eb:ea:a8:30:88:
         e9:64:bf:cd:3c:b2:44:20:93:5f:5d:c8:c0:8f:87:3b:1c:37:
         42:df:43:73:7a:2e:bb:22:fe:3c:cc:93:cd:29:fc:66:33:ef:
         37:a6:4d:11:a5:a4:a4:7b:5c:af:64:22:d5:f4:96:fd:1b:4d:
         7f:b7:f3:41:a9:33:83:35:06:4d:db:3e:56:9a:32:1d:dd:80:
         6d:c2:7d:c2:6d:1a:8e:3f:03:14:b1:ef:1f:df:48:96:8c:82:
         b9:3a:d3:82:be:32:dc:8d:f9:45:08:f9:22:25:a0:bf:94:3d:
         6d:58:23:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org