Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32342d3234203d3e203633383237.roa
File:                     3130332e33392e31322e302f32342d3234203d3e203633383237.roa (raw, json)
Hash identifier:          lYQCgluKRMLdqhxTINGi3YwkFcOJwrOABEOfRjK/jF8=
Subject key identifier:   8A:61:13:A8:77:8B:10:B2:B3:4B:7E:5A:F5:86:E2:93:4E:85:21:78
Certificate issuer:       /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial:       3D751009101352FF9B168137CB5AC940D25D6495
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32342d3234203d3e203633383237.roa
Signing time:             Wed 20 Nov 2024 07:03:08 +0000
ROA not before:           Wed 20 Nov 2024 06:58:08 +0000
ROA not after:            Wed 19 Nov 2025 07:03:08 +0000
asID:                     63827
IP address blocks:        103.39.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
                          rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:75:10:09:10:13:52:ff:9b:16:81:37:cb:5a:c9:40:d2:5d:64:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
        Validity
            Not Before: Nov 20 06:58:08 2024 GMT
            Not After : Nov 19 07:03:08 2025 GMT
        Subject: CN=8A6113A8778B10B2B34B7E5AF586E2934E852178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:4a:ec:cc:63:a2:da:b1:4d:f8:c7:ad:de:
                    a3:f4:34:11:0e:5f:56:ef:f5:f0:4a:1d:c4:26:f0:
                    8f:6b:25:fb:7a:ec:62:68:8e:be:5f:4e:3f:c1:92:
                    6e:53:85:34:79:89:2a:92:4c:1c:36:e3:36:e4:8f:
                    b3:02:56:ea:70:07:8b:18:92:83:e2:b0:31:61:f8:
                    a8:0e:6f:5e:11:1e:39:e1:c3:d0:16:04:c8:41:39:
                    f0:30:bc:e1:48:89:70:71:22:6a:85:48:e0:72:ec:
                    80:5c:a7:0c:90:56:8f:f7:fe:16:0d:2a:68:26:17:
                    7a:31:41:13:b1:18:f6:ea:6c:48:c2:c5:da:93:d9:
                    8e:00:5f:3c:e1:a0:f9:66:8e:f8:63:b5:d5:ac:08:
                    62:d9:86:58:e3:33:5c:80:c6:ce:57:89:61:0b:df:
                    c9:55:c4:6d:e6:f7:f3:c6:5d:3e:7d:f5:cb:a2:be:
                    0a:de:07:e0:39:4c:5c:0f:9c:ea:5c:79:19:ab:76:
                    2c:34:54:54:0c:29:7f:5f:e6:3b:06:85:52:fe:75:
                    1c:73:33:04:35:e3:08:c4:db:df:69:df:01:42:da:
                    c5:fd:b1:cd:2a:94:20:12:54:ef:f6:00:d1:f8:78:
                    8d:b8:ec:e8:5c:87:0b:6e:b0:b9:97:b7:e8:d8:b8:
                    2c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:61:13:A8:77:8B:10:B2:B3:4B:7E:5A:F5:86:E2:93:4E:85:21:78
            X509v3 Authority Key Identifier:
                keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32342d3234203d3e203633383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:8d:cb:92:58:97:37:78:9f:d6:dc:16:cd:00:be:ff:62:f6:
         be:94:96:2e:41:9b:97:26:c2:e7:8d:44:87:b3:65:ad:03:5f:
         74:4c:2b:a6:ff:02:9b:b3:31:36:b0:f9:07:0c:b2:9c:81:6c:
         da:d1:67:69:04:41:80:0d:f3:e7:53:d3:3d:f2:31:61:fa:4d:
         08:fc:b3:bc:af:2b:1a:ba:56:54:fa:10:bc:0f:da:40:d2:3b:
         67:01:0d:2b:36:05:4f:50:a0:e1:b6:d1:90:85:5b:76:a7:66:
         b5:03:f0:11:ad:90:38:34:e5:46:51:bc:80:e6:20:ab:4c:2f:
         08:14:bf:c4:e6:37:83:16:0b:95:00:e9:bc:8c:c1:64:d5:66:
         5c:e9:12:71:3c:a3:83:2f:a6:d0:29:6c:78:7f:ed:93:24:7f:
         99:71:cb:cb:06:e0:34:ed:35:b1:c1:36:d5:e3:68:46:9a:f1:
         07:36:c8:32:60:55:4c:9d:24:3a:4b:45:88:96:5c:70:9e:2a:
         09:bf:6b:83:e8:ac:78:48:b2:8c:d7:ca:a0:49:41:62:14:fe:
         f7:e0:fe:27:d9:8e:1b:3c:f1:0a:df:7c:34:90:37:d5:64:ab:
         bb:1b:c4:0f:da:22:9a:3e:0f:16:2c:75:cd:9d:a7:ce:4b:69:
         e0:aa:a6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org