Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa
File:                     3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (raw, json)
Hash identifier:          CD9wJONsaZwvJXuVX9EIASMR2Lv/jupr7Ncfz7emG/c=
Subject key identifier:   06:A7:42:CF:92:49:CF:DA:54:E9:66:E8:E9:DA:A7:70:C5:7A:27:EC
Certificate issuer:       /CN=581E644EEC44F9523CF189893E102BCC6008F9BE
Certificate serial:       2EB05D4CEAB309E32034B79F021052D346405752
Authority key identifier: 58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa
Signing time:             Wed 04 Sep 2024 10:02:24 +0000
ROA not before:           Wed 04 Sep 2024 09:57:24 +0000
ROA not after:            Wed 03 Sep 2025 10:02:24 +0000
asID:                     138886
IP address blocks:        103.189.120.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl
                          rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 05:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b0:5d:4c:ea:b3:09:e3:20:34:b7:9f:02:10:52:d3:46:40:57:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=581E644EEC44F9523CF189893E102BCC6008F9BE
        Validity
            Not Before: Sep  4 09:57:24 2024 GMT
            Not After : Sep  3 10:02:24 2025 GMT
        Subject: CN=06A742CF9249CFDA54E966E8E9DAA770C57A27EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:45:54:6e:d2:c6:54:0d:94:5a:00:b8:e8:fa:
                    13:fd:5f:05:6b:07:1f:77:c1:01:11:af:b7:7d:1a:
                    47:cc:54:77:11:7c:78:6a:f5:4a:8e:b9:35:3d:c8:
                    6a:0d:b7:f9:23:45:0c:8a:e4:fb:82:10:b7:f0:96:
                    c0:ef:1f:d1:79:29:73:e2:da:57:23:b0:a7:9e:9d:
                    62:65:03:5d:05:14:d5:83:30:17:6c:af:7a:b1:9f:
                    35:94:8e:1f:d7:f3:71:ce:1f:16:b6:2d:98:32:3a:
                    98:13:f0:38:69:4d:ec:9e:45:39:92:71:c9:9a:66:
                    7d:20:35:22:86:56:1c:dd:c7:e4:6f:15:8d:a4:ab:
                    17:ed:9c:9a:41:34:eb:ea:75:d1:f9:58:8e:d5:34:
                    6c:a2:05:46:4f:55:b5:6a:38:0a:dc:e9:80:0f:a3:
                    da:dc:48:a3:4d:9d:22:9b:38:6d:6f:88:1d:d0:4d:
                    55:41:2a:65:11:06:d9:d6:d1:bd:69:2c:d5:db:d8:
                    fa:b6:a2:4c:a6:b2:58:6f:27:7b:5b:a0:30:04:6e:
                    29:89:71:af:70:17:47:ba:9b:be:3c:7e:f9:53:9e:
                    5a:44:37:84:dd:26:da:64:40:37:08:7a:96:ea:16:
                    29:bd:1d:4c:4a:68:a0:49:7a:b2:b4:c5:7a:0c:ee:
                    14:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A7:42:CF:92:49:CF:DA:54:E9:66:E8:E9:DA:A7:70:C5:7A:27:EC
            X509v3 Authority Key Identifier:
                keyid:58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:f1:3e:95:29:4d:aa:12:52:4c:97:12:31:07:bf:97:e6:44:
         f9:b3:aa:a3:af:50:bb:9c:4b:6d:f7:fb:e7:c3:74:8a:b6:98:
         fc:ae:2e:f9:86:27:10:2f:60:a2:6c:20:1f:40:70:fe:ec:59:
         79:b2:50:86:ab:19:1e:27:99:86:6a:2c:da:a7:11:ae:29:b0:
         44:8f:ec:31:90:c5:18:fb:b6:59:24:81:77:4b:a7:9a:42:ad:
         e4:51:b6:7f:3d:6e:1b:06:95:12:14:38:3a:69:71:7e:ba:cd:
         85:f2:1f:27:8c:ea:aa:16:65:ff:52:cb:11:a9:45:e9:9e:1f:
         fb:37:b9:6d:9d:72:8f:9c:a9:c6:02:ed:60:9b:12:5a:fe:5c:
         fd:e0:fd:1f:52:b0:6a:2d:25:85:ef:cf:b1:01:a1:fb:1d:d3:
         29:72:21:fe:b6:09:b0:a2:88:4a:b8:7a:af:c8:b8:30:f6:0c:
         8a:d2:0b:81:7b:be:7b:a8:34:13:74:45:d8:3d:d2:f4:63:0c:
         31:f1:4c:7c:78:2b:41:18:cd:c1:4f:97:83:43:7f:2d:1b:f5:
         a7:98:43:da:b6:aa:9d:a7:18:b1:22:ee:7b:29:e8:2f:82:72:
         58:fd:a3:a2:88:9e:68:24:16:87:b4:8b:07:28:8b:25:28:e3:
         aa:5e:e2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:34 2024 by rpki-client on console-ams.rpki-client.org