Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa
File:                     3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (raw, json)
Hash identifier:          hMJmJ4dw/81IwDHXcdYCEbx1mMe88CEi44Qr1Pj1eBk=
Subject key identifier:   F0:09:41:B3:E5:AE:E3:44:42:B1:6C:13:15:CB:92:83:BC:FB:D4:F2
Certificate issuer:       /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
Certificate serial:       186D53F8B2C87A9D3F91755F398C8B282FFEBC53
Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa
Signing time:             Mon 01 Jul 2024 01:04:25 +0000
ROA not before:           Mon 01 Jul 2024 00:59:25 +0000
ROA not after:            Mon 30 Jun 2025 01:04:25 +0000
asID:                     138079
IP address blocks:        103.130.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl
                          rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 07:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6d:53:f8:b2:c8:7a:9d:3f:91:75:5f:39:8c:8b:28:2f:fe:bc:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
        Validity
            Not Before: Jul  1 00:59:25 2024 GMT
            Not After : Jun 30 01:04:25 2025 GMT
        Subject: CN=F00941B3E5AEE34442B16C1315CB9283BCFBD4F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:db:51:68:f6:7c:24:ae:cc:17:3f:05:86:
                    d9:00:ce:86:59:31:0a:60:03:dc:1a:f5:7c:24:16:
                    39:e4:66:41:06:3c:21:ba:31:29:6c:d4:7c:d3:cc:
                    6e:06:78:45:11:d5:29:4a:10:d0:dc:ca:b0:d7:13:
                    5b:67:cf:78:7c:52:ea:5d:4f:4b:7a:c3:72:9d:ca:
                    ed:f7:45:e3:9d:dd:fb:7a:5f:8a:b5:24:ff:92:5b:
                    a5:ec:f1:9e:8e:33:22:f7:18:10:ea:ba:ad:61:dd:
                    a8:67:85:ba:03:5c:89:3a:c9:32:14:35:df:65:0a:
                    68:f8:2c:5d:67:fd:c5:7c:b0:a3:e4:ca:fe:e5:2f:
                    5f:87:37:73:f0:f9:6c:bb:78:11:6d:a2:2d:f0:82:
                    39:5a:a2:b7:32:e9:ee:89:ab:23:7e:a4:bb:71:06:
                    f6:b9:2d:55:6e:4a:88:01:1e:77:bc:6c:b8:97:df:
                    99:ff:03:c9:cf:65:3c:a1:0e:34:e9:f7:5f:89:28:
                    f0:9d:36:ef:ef:94:ff:0a:3b:b0:91:25:e2:48:f4:
                    5b:65:66:cf:2f:61:18:9a:3e:f4:13:c9:a8:da:91:
                    10:5e:be:b1:e8:72:ee:96:39:c4:e8:93:06:55:e0:
                    4b:37:09:fb:f5:ec:6b:f4:57:8b:32:75:01:e3:92:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:09:41:B3:E5:AE:E3:44:42:B1:6C:13:15:CB:92:83:BC:FB:D4:F2
            X509v3 Authority Key Identifier:
                keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:40:d3:ed:33:09:84:c6:93:91:1e:ac:53:c6:84:3c:5f:83:
         10:e4:71:1a:f6:35:fe:1e:df:1d:e3:35:a2:d3:aa:4b:d7:b4:
         fa:de:30:c5:52:be:eb:55:5d:e5:85:ae:75:f9:72:3b:91:dc:
         45:f8:7c:de:fb:00:f7:32:ac:7f:bd:98:a8:60:64:e3:dd:63:
         2a:7a:ba:76:1f:6f:ef:4a:53:78:ef:a1:8a:88:88:f5:b6:c7:
         3e:77:67:aa:0d:a1:cc:1a:4f:b8:41:60:4b:00:8d:eb:47:87:
         53:87:92:1e:a1:cb:07:7a:2a:f9:e0:a5:8e:b5:bd:22:a2:75:
         dc:21:7b:75:36:ee:56:1d:da:86:5f:20:12:cd:35:31:c1:03:
         ca:58:e1:72:54:a4:0a:3d:44:e2:83:9b:75:7d:78:07:49:11:
         18:cc:0b:31:90:83:eb:1a:75:55:97:5b:ce:7f:b4:42:47:02:
         ca:4d:3d:56:bd:84:9e:8f:8f:23:ad:ec:f1:b2:88:a7:8e:b9:
         e8:58:a5:87:de:dc:31:46:87:ae:97:0a:b8:59:3f:93:07:5e:
         75:35:94:aa:6f:4a:1a:a6:e6:8b:59:92:be:2c:7d:16:c1:04:
         39:7e:db:34:42:39:f5:e3:e4:e5:f1:15:90:bc:ae:fe:82:ed:
         bf:a7:42:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:50:37 2024 by rpki-client on console-fra.rpki-client.org