Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/3130332e3131382e332e302f32342d3234203d3e20313337333732.roa
File:                     3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (raw, json)
Hash identifier:          2spGhQvPX+WoXPw56wxfDsCBZ1z01gku5TuJeN/VHms=
Subject key identifier:   2C:FF:52:42:51:2F:B1:8B:44:DD:18:D4:79:D5:FC:40:7D:92:1C:60
Certificate issuer:       /CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1
Certificate serial:       219CCBD6758160364231137FB5D811493AE16013
Authority key identifier: 8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/3130332e3131382e332e302f32342d3234203d3e20313337333732.roa
Signing time:             Thu 11 Jul 2024 07:00:00 +0000
ROA not before:           Thu 11 Jul 2024 06:55:00 +0000
ROA not after:            Thu 10 Jul 2025 07:00:00 +0000
asID:                     137372
IP address blocks:        103.118.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl
                          rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9c:cb:d6:75:81:60:36:42:31:13:7f:b5:d8:11:49:3a:e1:60:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1
        Validity
            Not Before: Jul 11 06:55:00 2024 GMT
            Not After : Jul 10 07:00:00 2025 GMT
        Subject: CN=2CFF5242512FB18B44DD18D479D5FC407D921C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:f1:6d:5c:3b:63:a8:7b:61:8a:43:fd:de:
                    44:a5:63:fb:a3:ad:fc:2e:b6:6b:5e:f6:cb:d3:87:
                    2d:ff:1c:2a:0f:19:16:cb:71:bb:89:96:a2:2a:ff:
                    e8:77:39:79:84:ad:3f:be:7a:a4:a3:ef:75:29:99:
                    10:b9:73:5a:9f:86:7d:6b:0c:9e:e6:0e:42:91:a0:
                    23:e0:51:06:8c:95:c2:ef:1f:db:e1:43:33:91:c5:
                    4a:6b:a2:00:38:41:2f:c9:7a:60:36:d1:ae:ed:28:
                    a0:9e:58:a3:21:39:c7:9f:ae:12:60:6b:32:ec:d3:
                    0c:84:5d:68:3b:22:f8:a6:31:56:d1:f8:88:e5:a4:
                    02:a5:c2:70:e2:36:f2:10:ab:ed:b5:ca:64:c6:35:
                    c3:8d:71:99:b4:2d:75:b0:fe:fc:1c:d5:b4:1e:32:
                    bf:9b:a2:50:05:84:e3:75:86:1e:82:70:fd:34:af:
                    de:e8:99:2f:20:94:9f:45:a0:d4:4e:b7:4f:a8:c7:
                    29:22:87:22:53:e8:09:cd:8c:e2:c5:2f:ef:b1:fd:
                    5b:77:cc:5f:81:67:e2:98:0a:1f:1c:00:83:3c:fd:
                    8e:3f:79:35:69:61:8e:05:dd:12:25:fb:d6:fd:71:
                    14:25:66:82:b0:8d:b5:5e:94:0b:d9:25:2b:95:2f:
                    74:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FF:52:42:51:2F:B1:8B:44:DD:18:D4:79:D5:FC:40:7D:92:1C:60
            X509v3 Authority Key Identifier:
                keyid:8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/3130332e3131382e332e302f32342d3234203d3e20313337333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:41:fa:d6:31:4b:00:f8:49:eb:5e:7a:ba:88:54:b4:ee:cc:
         52:35:d6:18:4e:42:e5:1f:42:f7:c2:74:f2:05:59:30:fe:ed:
         c8:52:46:28:a4:c9:3b:17:70:f9:ac:27:b6:8d:a5:6b:cf:30:
         cc:98:bc:86:4a:7d:96:43:62:d5:aa:7b:19:7d:8d:92:93:a4:
         e4:4d:92:fb:dd:76:45:b5:be:2c:4d:4d:a5:2f:f4:c7:2d:be:
         fd:9b:93:11:2b:3f:47:b2:c8:44:ac:27:e2:0f:db:38:55:d1:
         40:a2:c7:0a:f8:eb:d1:90:5a:dd:ee:bc:4f:17:9e:1f:76:8f:
         8b:4f:72:33:1e:90:9f:a7:a7:44:1b:82:c6:18:a1:82:40:ae:
         cd:8e:4b:3a:27:07:62:0f:25:42:87:c5:8a:94:d8:2f:f8:c6:
         b5:7c:9f:ca:89:80:04:12:0f:89:79:bb:bb:6b:56:f2:0d:48:
         61:53:88:d5:40:b6:05:31:e1:0c:04:36:f1:f7:f9:77:85:36:
         20:e2:da:42:96:4d:17:14:3d:3f:0b:aa:ae:bf:7d:8a:44:14:
         0c:e4:56:d3:3e:de:c8:78:88:25:9a:6a:6f:32:24:80:8b:20:
         e0:02:0f:be:69:0e:7f:e8:e7:4b:fd:14:ec:c9:06:46:c9:f7:
         fa:73:fc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org