Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa
File:                     3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (raw, json)
Hash identifier:          4L2FKCQFOJ6ZvWKgXal0nfrZkHMJOZOY4pyCilWNqJg=
Subject key identifier:   9A:E2:98:04:03:B7:3A:F3:62:3A:72:6A:18:6A:6F:4F:D9:36:70:29
Certificate issuer:       /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
Certificate serial:       5932150F201BBBB63E605A55B2DFFB66C56CD23B
Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa
Signing time:             Mon 01 Jul 2024 01:04:25 +0000
ROA not before:           Mon 01 Jul 2024 00:59:25 +0000
ROA not after:            Mon 30 Jun 2025 01:04:25 +0000
asID:                     138079
IP address blocks:        103.130.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl
                          rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:32:15:0f:20:1b:bb:b6:3e:60:5a:55:b2:df:fb:66:c5:6c:d2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
        Validity
            Not Before: Jul  1 00:59:25 2024 GMT
            Not After : Jun 30 01:04:25 2025 GMT
        Subject: CN=9AE2980403B73AF3623A726A186A6F4FD9367029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7b:c4:05:f5:dd:d8:08:41:88:4d:2d:c5:6a:
                    79:4a:d5:96:18:4e:89:1e:40:c9:b8:40:04:b4:b0:
                    5c:76:de:81:31:bc:0c:66:66:2a:80:dc:7a:5e:79:
                    82:4c:b2:73:cb:8b:f9:3d:f0:86:74:60:2c:58:e0:
                    c5:43:8d:93:9d:bb:5f:08:58:c3:1d:81:a9:40:57:
                    36:b6:ca:d5:bc:28:dd:70:cd:51:d1:ad:5e:59:22:
                    5c:de:c4:7d:bb:c2:40:6b:06:a3:81:97:23:ab:78:
                    e3:f5:62:2f:c2:15:88:5c:47:a7:49:2b:a1:4f:15:
                    be:d5:56:3d:f0:fa:90:26:79:d9:13:1d:33:a5:5e:
                    22:bb:20:da:c2:0d:11:15:b9:8c:6e:ff:03:3e:82:
                    7d:ac:ef:1b:ae:ee:2e:d8:2f:ed:58:52:91:0a:2b:
                    c6:6e:2e:16:63:69:7e:78:af:18:83:d9:1b:05:e6:
                    31:99:e8:fa:a9:cb:44:ec:87:08:8f:22:79:f9:86:
                    81:fc:3c:84:45:70:b7:16:79:f8:79:e2:1b:96:53:
                    3e:a3:7f:f7:4f:18:3e:68:8a:1d:44:3b:32:28:b1:
                    37:99:a6:05:6c:b9:bf:6d:70:c1:91:29:4e:14:f1:
                    c7:7d:af:e5:f1:28:5a:de:0e:66:99:ed:96:9b:24:
                    40:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E2:98:04:03:B7:3A:F3:62:3A:72:6A:18:6A:6F:4F:D9:36:70:29
            X509v3 Authority Key Identifier:
                keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:cc:d4:37:e6:0b:f5:b1:e4:82:43:c3:09:af:18:c9:94:7c:
         5a:ad:ac:b1:ae:0d:69:93:c6:7e:17:11:f1:e7:1c:a9:d3:22:
         97:46:68:e2:66:62:38:88:30:a6:13:62:59:94:f1:a2:cc:28:
         e4:9b:3c:ab:0a:38:69:32:78:69:63:bb:99:b4:f7:75:88:99:
         1b:90:6e:af:5b:91:e4:1f:e6:13:c1:bc:2c:f9:75:ce:74:04:
         b4:cf:92:ca:2b:48:4b:59:f5:2c:f9:bb:8b:2a:8c:f9:4c:c9:
         c3:7c:c4:60:15:e6:71:9b:f4:fa:b2:53:b0:95:0b:3b:69:77:
         b5:ea:90:63:fc:ec:cc:c6:88:a6:52:32:28:cf:27:f9:18:e0:
         ed:71:2d:65:f4:5c:9f:2f:94:52:64:05:54:9c:44:2d:0d:90:
         ae:86:33:2b:b0:9b:f4:df:b9:84:4b:b0:0b:ce:c1:9f:82:b8:
         4b:fa:c3:da:16:f5:93:02:bd:f3:a3:fe:ed:4b:70:c4:52:6c:
         2f:45:59:6e:dc:3d:a0:5e:df:f2:08:eb:82:86:74:b6:8b:99:
         96:bb:fa:8b:b4:f5:14:54:c8:c2:4f:bc:20:4a:14:3e:c1:80:
         42:a7:80:1d:bc:6a:5a:45:8d:4c:d8:f3:7f:87:ab:dc:9d:79:
         18:56:6e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org