Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa
File:                     3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa (raw, json)
Hash identifier:          9Q99Kg7kcs5TlK0zDsAJUsyJe4V4AmWVrmwNiBBnVIg=
Subject key identifier:   70:7B:5E:7B:5C:0B:EA:25:C6:74:D8:40:0B:A7:E0:38:DA:11:81:52
Certificate issuer:       /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
Certificate serial:       1628937C21541355DD819F1996A631E94AD8CC3D
Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa
Signing time:             Sat 07 Sep 2024 04:00:02 +0000
ROA not before:           Sat 07 Sep 2024 03:55:02 +0000
ROA not after:            Sat 06 Sep 2025 04:00:02 +0000
asID:                     138080
IP address blocks:        103.131.16.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl
                          rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 16:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:28:93:7c:21:54:13:55:dd:81:9f:19:96:a6:31:e9:4a:d8:cc:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
        Validity
            Not Before: Sep  7 03:55:02 2024 GMT
            Not After : Sep  6 04:00:02 2025 GMT
        Subject: CN=707B5E7B5C0BEA25C674D8400BA7E038DA118152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fc:d9:e5:aa:5c:ab:0b:66:94:d8:56:f5:2c:
                    93:88:55:b0:22:07:ff:ad:cb:f7:4c:43:08:bf:5a:
                    71:1c:26:d1:2d:0b:a0:95:72:ff:57:24:37:db:15:
                    32:b3:0e:63:c4:e3:fd:df:38:2e:fe:3c:c3:9d:6a:
                    29:13:49:84:dc:5b:b9:31:18:9c:81:9a:87:89:3b:
                    04:d9:57:56:a3:b5:99:f4:70:d4:ac:ca:46:e8:a0:
                    a1:27:8f:93:d3:37:47:b2:01:af:62:5f:bf:2e:71:
                    6f:7c:a7:09:6e:f4:40:2e:6b:ea:30:77:f8:72:66:
                    1f:fa:36:28:ea:35:1f:ac:f3:41:81:5b:90:d8:81:
                    94:a3:4c:10:aa:a5:d9:85:f6:73:de:e4:cb:09:31:
                    aa:e1:c3:25:58:dd:b1:67:da:9e:e6:71:d1:3d:36:
                    d9:07:f8:04:6a:5d:a2:ed:51:b6:36:6e:d0:f7:7a:
                    76:c0:04:f8:44:3e:36:04:51:44:83:f2:03:2e:b9:
                    93:73:5a:43:15:a7:f3:86:02:eb:72:15:0f:e7:e9:
                    a3:96:57:f8:e6:0e:93:93:81:80:71:21:b4:80:c8:
                    1e:f1:eb:c9:ff:a7:24:f6:ca:1c:af:95:db:a7:5a:
                    53:bb:fb:7f:4e:fe:e4:05:ef:81:3d:1c:26:20:59:
                    33:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7B:5E:7B:5C:0B:EA:25:C6:74:D8:40:0B:A7:E0:38:DA:11:81:52
            X509v3 Authority Key Identifier:
                keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:5a:d8:0f:fa:ce:ce:0a:d8:67:43:41:1c:d7:02:fd:37:24:
         15:08:b4:54:f7:56:39:44:14:4d:5b:e8:0b:61:85:c6:5d:50:
         d1:02:c5:ec:77:d4:ac:36:44:9b:1e:3c:7d:e6:b4:9b:24:31:
         71:40:e6:ec:f4:c9:4a:21:bd:07:09:f5:6b:b5:67:ea:4b:9b:
         c9:c8:e8:05:69:91:c7:99:83:c4:de:10:2b:9d:25:2b:9d:c8:
         e3:a2:42:1f:48:cf:96:d0:2e:45:fb:2f:70:12:4a:85:a0:ca:
         7d:6d:f8:8e:a2:63:cc:e7:3d:19:b2:c9:d9:96:cf:dd:ae:6c:
         1d:cf:ed:e9:df:c3:06:18:bf:80:14:bd:1c:59:ad:eb:ac:7a:
         1f:fb:15:07:28:a5:19:c4:5c:2e:6b:6f:2a:bc:21:c5:7e:d8:
         16:11:76:26:08:2a:56:00:dc:af:0a:af:30:2e:47:f3:5e:53:
         33:5e:2a:68:c7:d8:3c:df:ed:5c:45:2d:87:51:a4:9f:c8:c0:
         68:d3:02:ca:d0:ca:1c:d3:36:f4:84:52:1c:41:6b:83:ad:21:
         27:81:d2:fb:52:74:a8:c1:3c:8c:33:d2:9e:63:a6:56:8f:37:
         bb:48:22:74:6b:1f:16:09:57:43:1b:50:c7:b2:80:37:45:85:
         a4:b1:07:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org