Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e372e302f32342d3234203d3e203338373533.roa
File:                     3130332e32392e372e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          D79/HACJVyoo2Sl+Smszrayw0P2ZrfZzFCQuJUdlBrM=
Subject key identifier:   F5:A6:B1:96:78:E0:1F:2F:D0:21:00:7E:74:55:6B:2A:BB:D5:10:CB
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       077F59ED031BC8314BF16525ABF26356694A4F5B
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e372e302f32342d3234203d3e203338373533.roa
Signing time:             Tue 03 Sep 2024 03:00:01 +0000
ROA not before:           Tue 03 Sep 2024 02:55:01 +0000
ROA not after:            Tue 02 Sep 2025 03:00:01 +0000
asID:                     38753
IP address blocks:        103.29.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7f:59:ed:03:1b:c8:31:4b:f1:65:25:ab:f2:63:56:69:4a:4f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: Sep  3 02:55:01 2024 GMT
            Not After : Sep  2 03:00:01 2025 GMT
        Subject: CN=F5A6B19678E01F2FD021007E74556B2ABBD510CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:8d:7e:66:ea:1b:26:5a:cb:e6:98:87:25:
                    52:28:c6:1d:48:c4:91:79:28:1e:1c:31:0c:cf:7c:
                    58:75:bc:3f:41:89:fd:5a:31:32:df:8e:2e:5b:5d:
                    bb:1e:64:3a:1a:33:96:ac:7e:b7:b9:a2:09:1e:ba:
                    3e:73:65:61:a8:59:db:1c:2d:9f:e4:10:e7:fd:4e:
                    67:69:3e:f6:d1:31:a3:e7:1a:71:2a:30:e0:9e:2b:
                    7b:56:b4:6a:55:f8:61:c4:e6:ae:e2:25:91:78:7f:
                    91:3c:d4:8f:5c:27:0a:d2:c4:aa:66:ed:b2:7f:40:
                    5b:a8:c0:41:c9:ef:7d:08:de:82:fa:1f:57:cd:bd:
                    a8:5f:9e:ea:d3:9d:00:ae:be:0e:f6:74:20:6b:9a:
                    56:1d:6b:3c:5a:f1:54:e2:91:dd:7b:b3:50:23:92:
                    83:bb:c4:5c:36:61:5c:c9:9c:77:d4:0a:e0:e9:12:
                    5c:85:98:22:b1:9b:64:4c:be:4e:54:e9:71:e1:23:
                    9b:9b:f4:e6:13:4c:2e:aa:d5:80:3a:0e:f5:ef:5c:
                    e0:3e:52:c4:06:71:6f:74:b5:9d:17:3f:51:7b:f6:
                    5c:a8:7d:67:20:fd:93:f8:5f:27:4f:1a:1a:51:de:
                    21:2a:11:5e:84:4c:0d:8d:d1:e5:f5:0e:e7:2a:3f:
                    4f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A6:B1:96:78:E0:1F:2F:D0:21:00:7E:74:55:6B:2A:BB:D5:10:CB
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e372e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e7:e7:c3:f7:1b:2d:44:7d:de:31:63:84:f0:a0:2b:85:8a:
         82:eb:6f:0c:15:cd:5b:47:fa:bb:36:4f:62:ec:c2:05:9d:72:
         e6:ed:ab:53:8e:4f:7c:ab:30:ab:df:6b:14:9e:4d:f4:57:39:
         24:a7:a0:34:bd:86:58:93:c2:07:9c:53:45:6b:fb:95:25:ba:
         1b:d0:a5:e7:3f:46:8b:c0:19:ad:d0:de:f9:4b:bb:9e:6b:a2:
         d9:2d:c7:2b:a2:e3:d2:31:fa:dd:03:a1:69:d2:83:ae:19:00:
         fd:d8:e3:61:24:56:1d:5a:2e:25:a8:16:92:fc:32:0a:8e:81:
         eb:31:a2:bb:6c:8c:90:e1:5b:b0:9f:e1:8a:91:3c:66:52:6a:
         7d:67:9e:ff:c6:01:7f:98:8e:5d:6c:1c:ed:79:b7:3d:48:71:
         56:a5:00:e7:b5:2e:56:4e:b0:9a:fb:22:a2:77:b9:8a:f9:ed:
         0a:73:a5:0a:87:63:30:7e:2e:c1:f7:61:9f:ff:28:ec:74:d6:
         09:f3:d5:0f:80:54:8e:7f:a0:4d:41:3e:4c:1d:32:00:e0:63:
         bc:67:1e:3d:79:4e:b6:2b:70:38:ba:ef:28:70:30:b7:5a:49:
         9c:06:18:20:04:63:92:08:4b:ce:1c:7f:41:56:44:e2:f2:01:
         4d:10:a3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org