Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/3130332e38372e36382e302f32342d3234203d3e20313530323439.roa
File:                     3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (raw, json)
Hash identifier:          AwcsJgH8zXeY69819ByBk5jmDVzIUHAAzMOf02IbJGM=
Subject key identifier:   31:DE:58:FD:DA:7C:07:9E:E9:F1:B0:CA:50:AA:FB:BB:F5:6A:DC:CE
Certificate issuer:       /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588
Certificate serial:       7FE149E3309FFB9CC4EB82228597D05169172F52
Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/3130332e38372e36382e302f32342d3234203d3e20313530323439.roa
Signing time:             Mon 09 Sep 2024 16:00:00 +0000
ROA not before:           Mon 09 Sep 2024 15:55:00 +0000
ROA not after:            Mon 08 Sep 2025 16:00:00 +0000
asID:                     150249
IP address blocks:        103.87.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl
                          rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e1:49:e3:30:9f:fb:9c:c4:eb:82:22:85:97:d0:51:69:17:2f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588
        Validity
            Not Before: Sep  9 15:55:00 2024 GMT
            Not After : Sep  8 16:00:00 2025 GMT
        Subject: CN=31DE58FDDA7C079EE9F1B0CA50AAFBBBF56ADCCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:fc:09:5b:fa:b1:3a:f8:58:5e:fc:df:78:
                    54:0a:20:dc:c1:75:6b:cd:ef:17:ee:f9:be:52:b4:
                    5b:fb:cb:2b:be:3d:8b:b3:6f:81:26:15:d7:d6:60:
                    1f:af:97:6c:6c:3a:34:f8:0c:84:4e:50:83:49:c4:
                    c4:7d:0e:c3:5f:10:e4:b9:da:03:49:22:ae:14:18:
                    b9:97:39:8b:be:99:81:92:e2:36:40:ca:ee:3f:ad:
                    5c:7f:bd:57:8e:f1:8a:10:be:29:67:eb:fa:f7:f8:
                    eb:3c:1c:2b:5c:2b:5f:6a:6e:14:24:8f:04:32:64:
                    6f:ec:88:e5:29:a8:32:18:07:19:3d:4c:40:f1:eb:
                    fb:2c:01:2e:bf:40:a6:15:37:ea:f0:f2:e2:7a:19:
                    38:b5:b7:06:e8:0b:22:f6:1f:e1:d6:6c:ca:c5:07:
                    48:ef:cf:2a:f3:42:07:de:c7:08:6f:53:94:26:54:
                    8e:07:1d:f1:d3:8e:47:b4:94:e2:5a:b1:85:6c:e4:
                    a8:26:7a:64:af:90:1a:bb:56:29:b3:09:79:52:43:
                    f5:8f:2b:35:8d:2a:b0:a2:28:32:95:df:2c:de:8e:
                    55:5a:44:72:99:37:33:bf:54:1d:2c:98:8f:1c:ce:
                    a4:31:21:da:c4:d0:48:ca:d6:ed:76:de:95:5b:2d:
                    ae:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DE:58:FD:DA:7C:07:9E:E9:F1:B0:CA:50:AA:FB:BB:F5:6A:DC:CE
            X509v3 Authority Key Identifier:
                keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/3130332e38372e36382e302f32342d3234203d3e20313530323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:e5:5f:ff:2b:f4:c1:e1:dc:cc:70:b0:19:85:54:80:1f:c1:
         75:55:12:57:ab:6a:ab:ba:fb:32:fa:b8:5d:d4:16:57:0c:91:
         d8:7f:68:19:da:b3:72:e6:db:b2:7a:bd:ec:63:65:dc:ae:d9:
         30:5b:b0:d4:c4:90:be:c6:68:e1:f3:0a:82:23:51:d0:6d:cd:
         64:d4:41:40:b4:5b:59:35:fb:0e:f2:c3:e4:47:1b:a7:88:ed:
         1d:1d:d1:c4:fe:04:04:51:b8:11:ea:de:61:75:29:7e:db:19:
         8e:58:28:b4:22:13:8f:52:05:f0:94:38:22:ac:4b:39:44:82:
         5e:ef:50:c3:eb:5d:52:d8:2c:b9:2f:08:d2:b2:88:26:f0:19:
         ce:2e:0d:33:24:73:05:12:f4:e3:f9:27:6b:75:d0:f3:10:57:
         51:62:9c:ca:1d:33:88:e0:14:57:e1:90:7b:cf:b3:2e:6d:8b:
         7e:99:ef:8b:f5:35:e0:ce:bd:c9:2d:e6:ba:00:db:a9:9f:84:
         a1:8e:66:f8:4c:55:f8:39:af:a9:dc:3b:43:1a:fe:f5:35:81:
         05:1a:57:75:16:90:da:28:70:4f:03:51:07:db:cc:ed:ec:7a:
         0b:ee:11:6f:f0:eb:f5:f0:81:f9:d9:7d:80:ec:5a:dd:93:96:
         91:43:13:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:42:07 2024 by rpki-client on console-ams.rpki-client.org