Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa
File:                     3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (raw, json)
Hash identifier:          UPqZTtFOgF+jDRv2CvFxqECXCbrw1aEaPzgtFmgsijs=
Subject key identifier:   4F:7C:E8:76:57:68:C8:52:23:4B:06:C2:B0:2A:E6:D2:23:38:D3:A1
Certificate issuer:       /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
Certificate serial:       12CC6BDABF1739150BEA2B6FB6E583E1F2309F68
Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa
Signing time:             Mon 01 Jul 2024 01:04:25 +0000
ROA not before:           Mon 01 Jul 2024 00:59:25 +0000
ROA not after:            Mon 30 Jun 2025 01:04:25 +0000
asID:                     138079
IP address blocks:        103.130.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl
                          rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:cc:6b:da:bf:17:39:15:0b:ea:2b:6f:b6:e5:83:e1:f2:30:9f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
        Validity
            Not Before: Jul  1 00:59:25 2024 GMT
            Not After : Jun 30 01:04:25 2025 GMT
        Subject: CN=4F7CE8765768C852234B06C2B02AE6D22338D3A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:31:43:41:0b:71:fb:38:98:e9:71:ab:6c:75:
                    af:fc:74:0e:0d:c3:1b:a9:95:d6:26:a0:00:d4:64:
                    02:f5:0c:85:12:f6:12:df:96:77:c0:32:3f:f7:e9:
                    69:06:23:da:dc:21:72:11:57:f7:60:1b:bb:32:f4:
                    89:2b:2d:06:7f:cf:a5:f7:7d:df:42:fb:00:09:33:
                    44:0f:e0:7d:e5:36:7b:39:ac:3e:42:6e:0a:c9:20:
                    5a:be:2d:8e:d9:6f:74:c3:65:76:60:2d:48:c4:62:
                    87:c1:45:dc:46:c5:0e:e9:9e:f0:d0:09:42:bd:78:
                    6b:e9:2e:2a:5d:9b:a2:3e:20:a7:5e:84:bb:bb:0c:
                    c1:88:25:ac:6d:7a:d6:9a:8f:2f:43:7b:1c:81:5c:
                    e6:28:d1:95:71:61:cc:a7:3d:7f:55:d4:fa:da:b1:
                    d6:8b:03:5d:85:34:35:2e:7f:5e:9f:2c:86:13:ce:
                    59:5d:8f:fe:69:fb:b8:01:02:d8:37:fe:4b:4d:71:
                    53:d6:30:cf:b1:10:cc:31:96:e2:8a:99:64:42:84:
                    4c:9b:7c:dc:9a:c3:de:74:96:9d:81:63:0e:37:61:
                    04:92:a7:fb:d1:68:62:ab:16:49:23:ba:25:f7:73:
                    7f:25:16:86:e3:db:ef:e2:ae:9d:6d:aa:48:68:d4:
                    89:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7C:E8:76:57:68:C8:52:23:4B:06:C2:B0:2A:E6:D2:23:38:D3:A1
            X509v3 Authority Key Identifier:
                keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:7b:3d:d6:50:e2:0a:77:b4:b8:0a:8e:d4:51:89:ed:6d:05:
         fc:32:49:dc:48:4b:b6:dc:09:8f:bd:53:2b:10:fb:c0:e2:a3:
         03:b6:3e:26:2f:f2:ab:bf:ff:b9:80:5c:df:48:d7:82:f5:02:
         a3:5c:66:78:f7:81:61:37:d8:f5:3a:62:da:ea:9e:b8:cf:02:
         35:b5:0d:2f:75:1a:27:38:a4:b9:eb:2d:50:da:8a:72:8d:c6:
         06:a4:85:b5:69:d7:67:09:16:12:6b:88:6f:84:e9:30:5c:0c:
         83:17:98:d9:50:c3:af:56:38:a1:15:18:2b:61:8b:84:c7:b5:
         a0:17:35:0e:55:79:c7:ff:15:9b:74:36:1c:d3:3d:e6:ba:2c:
         9c:28:51:fc:52:78:d5:8c:12:7b:75:b5:f3:c5:a9:08:48:55:
         67:fb:38:36:75:30:f3:7e:c4:59:e9:90:e1:03:a2:7a:94:25:
         86:99:4b:91:14:c3:44:45:1d:c4:55:8c:f6:f8:3d:f7:32:07:
         5c:55:73:d8:28:d7:98:9f:78:4f:5e:64:42:61:81:0f:fb:66:
         90:ee:e5:88:e1:01:b5:36:74:c7:bb:da:5c:5c:95:42:6a:bf:
         b1:d2:69:bc:0d:c9:f9:ba:fc:55:b2:31:58:39:0d:da:80:5d:
         fc:28:c0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org