Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32372e302f32342d3234203d3e20313332363733.roa
File:                     3130332e39302e32372e302f32342d3234203d3e20313332363733.roa (raw, json)
Hash identifier:          q57omgnlmY1l+aM3r310Job8V2O7MzTRAzkBt8MNU6A=
Subject key identifier:   B2:F4:7A:CC:6C:9E:C5:70:50:7C:14:25:9B:F7:91:01:16:7C:BB:3A
Certificate issuer:       /CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
Certificate serial:       3B9112FE9335BE8693108AE0FF155E8C88FA7230
Authority key identifier: 03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32372e302f32342d3234203d3e20313332363733.roa
Signing time:             Tue 30 Jul 2024 11:00:01 +0000
ROA not before:           Tue 30 Jul 2024 10:55:01 +0000
ROA not after:            Tue 29 Jul 2025 11:00:01 +0000
asID:                     132673
IP address blocks:        103.90.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl
                          rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 17:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:91:12:fe:93:35:be:86:93:10:8a:e0:ff:15:5e:8c:88:fa:72:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
        Validity
            Not Before: Jul 30 10:55:01 2024 GMT
            Not After : Jul 29 11:00:01 2025 GMT
        Subject: CN=B2F47ACC6C9EC570507C14259BF79101167CBB3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:5e:e6:65:7c:84:a5:3a:0b:72:1f:d0:c8:
                    b1:8a:fb:8e:a9:3e:dd:28:bb:16:01:8d:30:4b:27:
                    7f:ed:7c:6d:10:9f:60:13:3d:20:76:d1:d4:44:a1:
                    70:9f:8a:a3:33:06:ff:74:22:7e:d4:6a:9b:aa:0f:
                    d6:b1:b0:d2:03:7a:5c:57:79:6b:70:26:5b:18:1c:
                    61:10:e2:51:3a:65:fb:bd:ea:10:a7:d8:89:1c:61:
                    7c:7e:9e:30:b8:ac:45:41:39:9a:04:37:26:31:fc:
                    75:33:35:3e:9c:01:7b:54:c8:42:a0:30:5d:58:ca:
                    6f:a6:e3:0f:bb:a0:02:f9:57:29:fd:82:af:8d:75:
                    ce:c9:a9:9d:ac:ca:e7:54:d3:08:fd:9f:35:cf:9c:
                    8b:c3:87:8f:cd:c7:4b:ec:25:62:2d:ef:7a:0a:fd:
                    e4:1d:be:24:d0:a9:75:b0:ff:6a:66:12:dd:b8:bb:
                    3b:49:3d:84:6b:a9:eb:4a:3d:78:ea:8c:1d:51:db:
                    9b:3d:36:81:ac:67:23:57:d8:40:5d:c1:16:9a:79:
                    0e:ae:34:35:08:fb:9e:43:7d:d3:08:5e:a6:01:44:
                    c3:2e:8c:d3:ee:37:d4:6c:08:13:7e:0f:e0:07:36:
                    3e:74:67:3e:67:d4:60:9d:c9:c7:c2:be:b7:4e:0c:
                    a5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F4:7A:CC:6C:9E:C5:70:50:7C:14:25:9B:F7:91:01:16:7C:BB:3A
            X509v3 Authority Key Identifier:
                keyid:03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32372e302f32342d3234203d3e20313332363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:55:59:46:57:5d:32:c5:e9:83:86:84:bd:76:bc:7d:24:5b:
         13:17:57:20:22:68:0c:ff:bb:2d:3c:cf:1b:b3:4a:37:a2:e8:
         7f:27:c3:44:9e:6f:b6:38:b0:8a:6d:7a:2f:ea:60:b2:a8:72:
         4a:98:3d:cf:37:7e:90:94:42:51:a5:f8:e0:72:37:e8:c8:09:
         d2:e8:a7:1f:c6:59:49:b1:9a:2b:c9:ff:8c:04:8d:b1:a2:b2:
         49:11:26:54:4e:a3:8d:87:ed:26:f2:7c:eb:fb:2a:e3:1d:71:
         af:69:cb:a4:f3:d9:99:d1:8c:e3:a9:b4:65:e1:a7:5d:8e:1f:
         fc:8a:92:1f:2c:cb:cd:71:ca:e3:1b:d4:a0:50:2d:e0:8a:b2:
         a2:5c:c4:45:f1:2b:b7:36:1b:52:86:39:15:d5:b1:c4:35:d6:
         13:7d:4b:08:55:04:24:06:7e:75:2c:92:69:39:bd:2a:45:82:
         18:64:df:ee:7a:b9:f3:ef:06:a4:02:ea:c1:87:7d:e3:a8:dd:
         e9:67:28:8b:5d:5e:99:a5:f3:b5:f2:85:7e:92:c2:99:1c:90:
         d4:b5:3e:5d:f2:e8:fa:40:9c:35:49:59:24:94:d3:bb:60:6d:
         7c:aa:5b:92:93:af:e3:76:b0:ea:b3:21:74:f0:29:3f:9f:5c:
         72:a4:a1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:37 2024 by rpki-client on console-ams.rpki-client.org