Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e352e302f32342d3234203d3e203338373533.roa
File:                     3130332e32392e352e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          TPK37R1WKkNstAVy1fHUFWLcuOhUbB4mdO22O3fIXO4=
Subject key identifier:   1D:05:E3:CC:2F:EA:7F:82:6E:E5:90:19:7D:94:4D:5D:AA:28:3D:B1
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       765DAE68C22A8AC8B0D44A04427824F8E87A96BC
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e352e302f32342d3234203d3e203338373533.roa
Signing time:             Fri 04 Oct 2024 06:00:01 +0000
ROA not before:           Fri 04 Oct 2024 05:55:01 +0000
ROA not after:            Fri 03 Oct 2025 06:00:01 +0000
asID:                     38753
IP address blocks:        103.29.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5d:ae:68:c2:2a:8a:c8:b0:d4:4a:04:42:78:24:f8:e8:7a:96:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: Oct  4 05:55:01 2024 GMT
            Not After : Oct  3 06:00:01 2025 GMT
        Subject: CN=1D05E3CC2FEA7F826EE590197D944D5DAA283DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:14:68:b2:b0:fa:36:8d:ac:e2:70:a1:7b:6c:
                    c0:06:87:3f:05:45:a2:92:e9:14:70:71:87:b0:05:
                    20:7b:c2:30:eb:f5:13:54:77:d2:9e:91:a1:8a:60:
                    1c:a9:4f:50:bd:aa:d2:60:e6:8f:1d:a7:7e:08:1d:
                    10:95:d7:6d:5b:05:d6:dd:7e:41:2d:d9:3b:63:a8:
                    15:d2:6e:6a:6c:6f:88:c5:17:d4:d1:3c:93:88:9f:
                    36:8e:46:ac:ed:e9:26:89:6f:f1:80:45:3e:c4:a4:
                    fe:ff:8f:16:20:dc:e3:1b:a5:b4:c1:d5:8d:8e:56:
                    49:11:2a:c5:af:81:10:d9:ec:63:16:22:99:bf:76:
                    fa:36:d3:d6:b7:9c:1d:05:d2:2c:46:e0:ce:25:ed:
                    8a:fb:99:75:56:cc:f5:58:0c:a5:9a:fb:d1:81:e3:
                    0b:f1:4a:91:e3:5d:45:c5:3f:9b:89:9d:84:59:df:
                    42:21:18:d8:51:55:29:78:95:4c:4a:1f:79:8a:84:
                    2d:d7:a0:3e:46:3e:12:01:6e:ed:6c:12:58:a0:72:
                    2f:cb:d0:1b:e3:81:e6:15:3f:31:a4:1c:b1:2c:a2:
                    c0:fe:94:b1:34:a3:99:45:11:47:8f:91:b1:e5:88:
                    9a:b7:0c:90:98:66:7d:94:e6:ed:b4:2e:84:b1:9f:
                    95:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:05:E3:CC:2F:EA:7F:82:6E:E5:90:19:7D:94:4D:5D:AA:28:3D:B1
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e352e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:4d:fc:f6:26:68:25:d5:39:89:81:2c:6b:8b:48:07:0a:14:
         a7:13:7c:01:3d:4c:7c:85:89:e0:d4:89:83:0f:9a:6c:c5:25:
         01:e7:85:4d:71:28:e1:45:4a:4b:fb:a9:c2:8a:c5:7a:37:67:
         bc:66:7c:e8:ed:27:a5:27:16:90:78:24:c5:91:4d:bd:fe:50:
         92:e1:f8:63:fa:d9:5d:30:c8:92:48:7a:10:16:ad:53:10:eb:
         72:21:bc:f1:b7:f2:f4:b8:2f:c1:75:71:fc:b2:e6:ca:77:03:
         44:ff:a0:e1:e7:5a:21:4c:b3:dd:16:18:62:91:3d:8d:f6:b5:
         ee:7a:ad:08:e9:c6:6c:c5:f8:e8:1b:ce:2c:3a:8e:78:7f:44:
         d1:e3:c3:b6:c0:13:c3:4a:63:95:49:2e:47:57:68:be:82:3c:
         01:a2:2d:3f:86:c7:a1:08:a5:d2:f2:9a:5b:90:ba:d2:1a:72:
         27:50:d7:e9:2e:1d:f7:f2:a1:dd:a4:26:91:d4:c9:65:b2:f5:
         77:b1:83:88:bb:8c:55:0b:44:e4:37:41:41:83:a7:ca:97:a5:
         72:be:cc:08:85:cb:cf:25:fd:8c:aa:23:9a:5e:f5:9d:e1:ee:
         27:33:0d:96:a2:8b:f2:5d:3c:24:5d:82:91:70:c0:5b:4f:a7:
         33:1b:65:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org