Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133392e302f32342d3234203d3e203233363739.roa
File:                     3130332e3130332e3133392e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          TEceZQAB1Jco2vcakCjMQcuKLy7kfKp5UKSCk2eKEh0=
Subject key identifier:   42:46:54:78:7C:B6:8D:46:42:D0:A3:99:71:9C:87:AA:45:B0:7E:81
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       AE1095994A3C1C062002ED07992D8C9BC70A7F
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133392e302f32342d3234203d3e203233363739.roa
Signing time:             Fri 02 Aug 2024 09:02:21 +0000
ROA not before:           Fri 02 Aug 2024 08:57:21 +0000
ROA not after:            Fri 01 Aug 2025 09:02:21 +0000
asID:                     23679
IP address blocks:        103.103.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
                          rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ae:10:95:99:4a:3c:1c:06:20:02:ed:07:99:2d:8c:9b:c7:0a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: Aug  2 08:57:21 2024 GMT
            Not After : Aug  1 09:02:21 2025 GMT
        Subject: CN=424654787CB68D4642D0A399719C87AA45B07E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:35:89:63:e7:ba:f2:fe:0e:4e:53:ff:a8:15:
                    df:19:df:9f:5f:5f:59:67:04:06:c7:a4:5a:d4:b5:
                    e2:63:f8:ab:bf:76:d5:64:6b:e8:b7:3d:e0:c9:fc:
                    7d:c8:59:ad:66:14:d4:a0:91:d9:60:13:e9:7b:f8:
                    c3:5c:c5:c1:a5:c6:92:eb:b3:bf:7b:5e:1a:a6:d5:
                    6b:77:ab:51:ba:8a:2f:98:81:a2:43:ea:73:81:1c:
                    88:cb:b3:4c:b9:11:cf:e1:13:81:e4:d9:81:03:26:
                    da:31:6b:da:a6:69:f5:f7:ee:99:b8:d3:56:30:9e:
                    eb:32:4d:d0:f6:d3:97:c7:6f:d9:65:bb:38:b5:83:
                    cc:e8:a2:f4:e7:c0:19:b7:c8:ca:50:ab:1b:8c:77:
                    3e:8e:fc:7d:87:08:07:5c:29:8f:15:aa:ac:9c:18:
                    0f:b4:6c:a4:e8:17:c7:65:a7:79:64:14:d4:f3:64:
                    9c:74:3c:07:ec:8f:24:0e:ae:6c:e5:8f:57:bc:6e:
                    c5:29:6c:b7:25:49:17:ea:a1:1b:a2:d9:98:33:86:
                    3d:6b:1e:ca:36:e2:77:6a:2e:cc:26:49:48:df:a7:
                    fa:2e:3a:65:79:98:36:2c:ff:4e:1f:90:96:27:44:
                    77:76:81:39:48:36:b4:28:25:3a:88:5e:c2:5a:a2:
                    0e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:46:54:78:7C:B6:8D:46:42:D0:A3:99:71:9C:87:AA:45:B0:7E:81
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133392e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:a9:06:17:af:b1:f3:60:a9:d6:8f:11:1a:85:74:e6:36:e1:
         fd:05:5b:c3:2b:b1:38:29:7f:24:c2:58:72:86:63:4e:f7:63:
         cb:f0:c5:c7:0a:81:57:04:72:e7:ac:58:d3:84:9e:04:f9:6f:
         ef:d6:7e:bb:30:ef:68:1e:9b:7e:1d:87:b3:9c:5a:59:9b:44:
         1e:02:c2:15:da:21:83:8a:17:ff:34:57:17:a2:86:35:9f:92:
         e6:3c:80:47:21:86:1a:6b:cb:4e:fd:17:69:f6:b7:12:c4:2d:
         0e:d4:67:4a:13:46:59:32:4a:6b:58:e9:e1:a2:8e:0e:30:86:
         e9:4a:3b:09:19:73:87:e5:a0:4b:af:0e:11:f0:db:58:27:e2:
         c9:e2:8f:52:16:c3:89:2a:f0:81:91:47:90:37:71:55:cb:fa:
         3e:49:5e:a3:b5:3d:7d:c3:a9:6f:3d:bc:db:4a:bd:af:0c:96:
         2a:58:b8:c2:c8:3e:a6:94:52:ef:35:fe:86:ef:9e:56:28:1f:
         77:9c:3b:8e:70:0c:22:27:2d:03:d6:22:60:2e:09:8e:29:a1:
         a1:8b:08:ac:35:a7:1d:50:3d:d3:ec:3e:2f:56:60:1d:3a:78:
         98:67:ac:ed:ba:88:11:b1:04:61:98:96:95:55:6b:4a:e7:c2:
         64:6f:6d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:14 2024 by rpki-client on console-ams.rpki-client.org