Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa
File:                     3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (raw, json)
Hash identifier:          nj9bauInlPAQsEyCAqTGoQFhQtKovDqYDK/sMjG5xrs=
Subject key identifier:   61:3B:EB:0B:FF:97:AE:BF:F7:C4:B9:5C:55:E1:24:DF:B2:04:CD:50
Certificate issuer:       /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
Certificate serial:       62DDBF49FE330E81670B5695DA6F72A5AD8CA231
Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa
Signing time:             Mon 01 Jul 2024 01:02:29 +0000
ROA not before:           Mon 01 Jul 2024 00:57:29 +0000
ROA not after:            Mon 30 Jun 2025 01:02:29 +0000
asID:                     136868
IP address blocks:        103.105.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl
                          rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:dd:bf:49:fe:33:0e:81:67:0b:56:95:da:6f:72:a5:ad:8c:a2:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
        Validity
            Not Before: Jul  1 00:57:29 2024 GMT
            Not After : Jun 30 01:02:29 2025 GMT
        Subject: CN=613BEB0BFF97AEBFF7C4B95C55E124DFB204CD50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:26:57:ac:99:c8:61:3d:dd:0b:4e:12:df:8f:
                    0c:d1:f6:74:32:12:b3:2b:5a:03:63:22:8f:54:24:
                    b8:8b:aa:3a:e5:5d:9f:08:cd:3d:d5:6d:94:b0:bb:
                    c7:63:55:21:b3:c6:9b:da:8c:70:d2:08:9b:f8:9d:
                    c6:71:0f:ba:34:ff:8a:98:0b:21:e0:1e:4e:5f:4d:
                    40:5f:26:7a:9d:c8:45:b8:b4:51:42:07:ad:02:f7:
                    87:1b:52:f7:24:49:72:4c:ae:f6:62:b1:a1:75:79:
                    f7:1c:d6:d7:8a:6c:7f:97:e3:05:07:40:c1:02:76:
                    7e:47:bf:f1:17:75:41:36:15:79:62:53:f1:28:1e:
                    6c:fd:bb:d1:9f:59:04:f6:f1:3a:2a:e1:31:64:7c:
                    14:e5:62:c7:6b:c9:2e:8e:d5:1b:fb:8b:a0:2e:8b:
                    47:23:05:af:34:e8:31:dd:80:3f:ad:fb:d2:68:c7:
                    75:1e:26:9b:80:3b:3a:df:03:74:64:a3:17:ee:68:
                    c0:f5:6f:e0:e3:36:9b:93:7a:76:02:85:45:c8:7f:
                    10:2a:65:b6:51:31:f8:20:f1:9c:25:33:58:9d:3d:
                    f2:35:1a:66:01:18:3a:83:7b:4a:13:87:97:38:b5:
                    f2:b0:d5:2c:99:d4:f3:66:ff:60:bd:ba:8a:b5:42:
                    65:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3B:EB:0B:FF:97:AE:BF:F7:C4:B9:5C:55:E1:24:DF:B2:04:CD:50
            X509v3 Authority Key Identifier:
                keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:7e:b6:37:ec:5a:70:a3:67:b7:e0:d8:00:3a:fb:37:4a:dd:
         fb:77:ea:bd:72:97:24:bb:42:31:95:df:4c:27:73:4e:63:b0:
         b9:02:05:05:c1:88:9c:0c:2c:49:62:24:84:ed:02:e2:00:3e:
         5d:13:21:b6:df:56:3a:47:56:14:50:df:f6:68:d2:37:ad:4d:
         16:0e:cb:d1:e2:ab:74:ec:1c:69:b6:0d:50:2d:a5:5d:e1:dd:
         26:40:34:ef:84:2b:31:80:fd:37:12:19:9f:3b:27:51:bd:2d:
         2b:2f:2a:82:7d:84:27:f5:c4:74:98:73:56:8a:f4:0c:ef:b5:
         8a:25:c7:d0:04:a6:74:43:e1:46:11:f4:71:bc:ee:87:9f:cb:
         7f:9b:39:47:a3:58:77:18:69:72:2a:72:c1:18:1e:d0:7b:dd:
         e6:0c:7a:dc:0f:af:06:b5:10:34:73:5f:90:14:4d:47:03:ca:
         3b:f8:a0:1b:ae:22:a9:e6:ec:ac:38:f5:d7:b7:85:64:b7:73:
         e3:87:3f:3f:cc:75:79:69:c8:e7:fa:b9:51:50:57:cf:ce:c8:
         3a:a4:f3:05:8d:a3:7e:2c:16:65:e2:e9:8b:66:79:5f:22:db:
         fd:a4:e6:df:46:ea:d1:d8:e1:38:b5:fd:83:ff:1f:3e:9f:61:
         77:0f:60:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:52:55 2024 by rpki-client on console-ams.rpki-client.org