Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39372e302f32342d3234203d3e203435333035.roa
File:                     3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          jiRuydxgLg1OP/02jmqu+Ot6iTkSHXNNv7t3+8sDOac=
Subject key identifier:   89:90:31:89:26:85:7E:B2:8D:69:41:E6:42:1D:A5:5A:53:24:99:1C
Certificate issuer:       /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
Certificate serial:       6BF235BE1BB22334DBAE531E7DAC2F3C49091C80
Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39372e302f32342d3234203d3e203435333035.roa
Signing time:             Wed 29 May 2024 10:00:00 +0000
ROA not before:           Wed 29 May 2024 09:55:00 +0000
ROA not after:            Wed 28 May 2025 10:00:00 +0000
asID:                     45305
IP address blocks:        103.189.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl
                          rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f2:35:be:1b:b2:23:34:db:ae:53:1e:7d:ac:2f:3c:49:09:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
        Validity
            Not Before: May 29 09:55:00 2024 GMT
            Not After : May 28 10:00:00 2025 GMT
        Subject: CN=8990318926857EB28D6941E6421DA55A5324991C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:af:8e:c6:30:97:6d:5d:d8:b7:4b:57:cb:76:
                    3a:68:81:23:88:f0:f5:05:6a:32:c1:e4:ff:11:f2:
                    89:11:0d:4b:40:e3:55:23:91:c3:da:73:21:63:09:
                    58:37:aa:07:a1:7d:ec:3e:86:3c:36:a3:2e:b8:26:
                    55:90:95:47:f4:42:bd:6c:60:09:1f:04:14:f7:96:
                    b1:d4:57:69:0d:c9:60:a3:4e:b2:17:5e:fa:7b:de:
                    a4:b7:57:50:b2:84:8b:fe:dd:ae:5f:a0:70:c1:eb:
                    7f:75:af:c4:a0:50:9b:05:77:31:c9:3b:a7:e5:1f:
                    dc:3a:e4:1b:b5:7b:00:c8:35:18:e7:c3:9b:bf:fa:
                    a8:5c:b1:18:0a:31:37:1e:66:aa:2d:d7:4b:83:6b:
                    05:5b:9a:d1:22:06:fa:ae:77:55:1b:ea:da:b2:db:
                    05:42:f8:77:ab:ea:18:d0:8e:9d:a6:a3:69:a2:0b:
                    8d:e7:4e:30:58:70:92:7d:4a:e2:6a:c4:25:8b:9d:
                    4d:80:2c:30:31:43:8c:56:60:b4:5e:ea:32:fb:e5:
                    f9:f3:d4:88:3a:ef:32:06:9f:78:46:ae:62:e0:c9:
                    a3:eb:33:35:39:83:dc:c1:ae:a7:69:be:c3:50:4e:
                    2e:04:b3:55:0f:2c:f9:de:f4:e0:cc:fe:52:7b:2d:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:90:31:89:26:85:7E:B2:8D:69:41:E6:42:1D:A5:5A:53:24:99:1C
            X509v3 Authority Key Identifier:
                keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39372e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:71:42:91:16:42:b4:e9:5a:64:0a:b5:9e:e2:6e:51:6d:18:
         bc:13:93:d2:7e:99:c1:f9:a6:a4:84:ee:bc:bd:6a:d2:fa:5b:
         f3:e0:80:be:fe:c3:c1:fb:f2:f5:2c:4e:61:06:28:bd:e1:47:
         07:f5:37:16:82:39:85:a0:65:6f:e4:20:2e:7d:a7:02:d7:3d:
         2b:65:57:3a:65:d3:b4:ff:13:54:0a:a8:6c:b5:dc:74:cd:13:
         49:89:94:ff:f3:34:60:1c:a7:6a:30:b6:76:71:a0:7b:51:04:
         ca:00:a1:3e:f3:f9:35:fe:63:f1:25:d0:ff:3f:67:03:60:ec:
         06:ad:88:af:d6:31:67:e8:3d:2b:63:04:a0:24:4e:b6:1d:58:
         36:95:f0:11:bd:4f:20:e0:b6:fc:09:a9:7e:5c:be:ea:72:f5:
         45:b6:d1:3a:90:9e:b6:a3:b9:29:03:4b:4c:5a:2f:77:9a:60:
         b7:d7:d1:c9:ef:09:9a:b3:78:81:77:8b:15:bb:fc:03:d1:17:
         ff:fc:e6:a8:97:e7:44:4a:28:44:e5:bc:4a:80:03:25:a8:15:
         9a:ac:9f:37:ce:6b:96:0c:11:46:9f:77:b9:03:46:f2:09:4e:
         47:33:2b:81:55:08:a4:ee:0a:74:12:da:e7:4d:2a:4d:c4:a5:
         8f:9a:9f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 08:35:26 2024 by rpki-client on console-ams.rpki-client.org