Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34342e302f32342d3234203d3e203233363934.roa
File:                     3130332e36362e34342e302f32342d3234203d3e203233363934.roa (raw, json)
Hash identifier:          J1GwFDnmIYjEvkx3C2B28UvrTOpPZPzdK7wZFaiwPBo=
Subject key identifier:   A0:B4:70:C9:81:F6:ED:5F:AF:66:14:C6:6D:38:C4:99:57:10:F3:24
Certificate issuer:       /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial:       34236E0C7BFA546D53974AD6CBD05D21405483E8
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34342e302f32342d3234203d3e203233363934.roa
Signing time:             Thu 06 Jun 2024 11:00:01 +0000
ROA not before:           Thu 06 Jun 2024 10:55:01 +0000
ROA not after:            Thu 05 Jun 2025 11:00:01 +0000
asID:                     23694
IP address blocks:        103.66.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
                          rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:23:6e:0c:7b:fa:54:6d:53:97:4a:d6:cb:d0:5d:21:40:54:83:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
        Validity
            Not Before: Jun  6 10:55:01 2024 GMT
            Not After : Jun  5 11:00:01 2025 GMT
        Subject: CN=A0B470C981F6ED5FAF6614C66D38C4995710F324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9b:17:29:25:f9:f4:82:3a:8e:2b:a9:51:32:
                    e8:ef:e1:14:92:bc:4c:0b:65:b8:6a:55:7c:fa:a9:
                    f6:60:2e:32:59:00:6c:ab:64:91:66:aa:c3:4b:80:
                    aa:36:7b:74:77:b3:14:6c:85:12:80:51:2c:a5:c6:
                    b6:22:80:a6:e0:17:42:0b:3f:e2:a0:63:4b:9f:b8:
                    50:e0:41:f0:27:cf:f6:65:b4:45:59:6b:1c:7a:21:
                    5a:98:00:3f:7d:e8:31:cf:d0:a7:e7:11:bc:32:6e:
                    a6:57:55:ac:1a:2e:07:7f:84:9a:dc:29:70:87:31:
                    83:c2:6e:1f:0d:d8:cf:cc:ec:97:21:74:ca:1a:ea:
                    e0:23:b6:c3:e4:a2:34:8f:1b:c1:fa:23:1f:5d:da:
                    02:01:13:ba:f0:e8:ab:a7:28:f9:33:d2:4d:51:6a:
                    83:f9:0e:a4:c1:bd:17:26:0a:8c:a5:1b:15:2a:df:
                    6f:1d:96:da:79:68:38:d1:a4:e2:8b:53:91:cc:46:
                    db:b9:a6:7c:e3:9e:81:c4:54:0c:3d:4c:1e:1c:9d:
                    6e:a4:e0:0f:81:c8:21:38:66:d6:62:d1:0c:2f:79:
                    05:c8:07:09:50:ec:1f:92:12:ba:b5:8e:1c:a5:de:
                    aa:e3:ae:0a:05:45:08:8f:5a:51:7b:6f:33:ea:19:
                    7c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B4:70:C9:81:F6:ED:5F:AF:66:14:C6:6D:38:C4:99:57:10:F3:24
            X509v3 Authority Key Identifier:
                keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34342e302f32342d3234203d3e203233363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:93:5e:a3:cb:77:ef:5a:22:2f:1f:da:96:9d:9d:79:fa:1e:
         9f:bf:e4:3d:da:cf:fe:b3:a1:47:0f:aa:77:1a:46:ec:5f:77:
         f4:79:20:df:c0:a6:23:0f:70:65:45:cf:ec:58:55:37:12:4d:
         3d:d7:00:97:67:48:f0:78:51:c2:11:c1:2f:9d:b6:56:20:fb:
         21:2d:68:07:fd:19:33:14:7e:20:8a:f6:c4:c9:8d:9a:ed:26:
         aa:0c:f9:60:36:41:c6:e1:a2:10:5e:b2:61:26:52:ee:5f:25:
         24:fe:41:e2:b8:4f:b5:e3:f7:05:1a:ea:af:70:2f:55:5d:4a:
         00:b2:19:21:2f:90:9e:36:bd:83:18:8d:d8:26:ff:33:32:e8:
         8e:be:b6:fc:67:d2:92:c9:fd:f6:1b:c6:a0:d9:1b:99:45:a7:
         91:72:6b:a4:1a:54:8d:66:c3:54:f9:43:60:79:4e:f4:e3:c5:
         74:2f:88:0d:69:1e:b5:03:45:ef:28:3c:1a:9f:75:6b:ce:c6:
         36:89:7a:ac:46:50:b3:0c:06:30:18:43:36:2e:29:a7:27:12:
         b6:31:e0:bb:bb:8f:40:72:11:dc:ed:90:35:be:89:94:1f:d4:
         36:61:3d:70:24:b5:fd:ed:47:7a:2b:fb:70:d8:c3:0e:9e:0b:
         bf:4a:76:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org