Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/3130332e3133342e38372e302f32342d3234203d3e203538333639.roa
File:                     3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          Kw6Usn9FPCQUTq3aNzIi149Nm6pyfuxOcoMkAS6ghSE=
Subject key identifier:   11:E1:29:AE:98:3E:10:51:3E:F5:CB:83:92:6D:7C:E9:B8:B4:9C:37
Certificate issuer:       /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8
Certificate serial:       1176EB7815C9F648AF6BC929C3BC1B72E30AC2C9
Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/3130332e3133342e38372e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:02:21 +0000
ROA not before:           Mon 01 Jul 2024 00:57:21 +0000
ROA not after:            Mon 30 Jun 2025 01:02:21 +0000
asID:                     58369
IP address blocks:        103.134.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl
                          rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:76:eb:78:15:c9:f6:48:af:6b:c9:29:c3:bc:1b:72:e3:0a:c2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8
        Validity
            Not Before: Jul  1 00:57:21 2024 GMT
            Not After : Jun 30 01:02:21 2025 GMT
        Subject: CN=11E129AE983E10513EF5CB83926D7CE9B8B49C37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0f:a4:44:74:a9:84:8d:cf:fb:32:1a:c9:dd:
                    b4:16:a6:0b:29:a3:70:35:b0:46:30:3e:64:52:a9:
                    7d:fa:23:f6:f2:89:b4:ab:b4:c4:79:6c:f4:85:04:
                    d4:05:e4:f6:af:37:02:de:09:d9:16:4e:23:8d:64:
                    d2:eb:ac:6c:52:bc:bc:af:6e:1e:f7:7e:3b:07:82:
                    be:c5:c0:98:b6:48:58:7a:85:ca:a9:b6:87:6a:57:
                    2a:f4:72:87:80:75:4a:e1:08:b5:e4:7c:1e:22:05:
                    3d:85:ed:85:e0:5f:dd:ff:db:99:5b:9d:42:31:05:
                    43:2e:98:91:f4:c2:77:64:7a:3a:35:6f:ac:de:41:
                    79:49:a6:f9:d5:98:7b:b9:84:f3:d8:95:71:f5:b8:
                    28:b1:72:6f:67:bb:9f:29:e3:1e:bb:5e:9a:c6:c5:
                    ea:e2:a1:ef:a4:8e:40:97:c8:26:f7:d0:33:62:95:
                    c7:5a:eb:4b:5d:ba:23:19:a4:8a:50:35:21:08:9e:
                    56:79:9f:61:66:42:77:d7:b6:ca:17:72:60:0a:d9:
                    ed:13:c3:e0:67:c2:5d:7e:5b:8b:ac:1e:77:b7:f2:
                    38:5f:0c:3d:23:c8:44:63:63:4e:e7:c9:24:4a:7d:
                    53:7f:17:77:8a:6a:d6:1a:4c:9f:cb:3e:97:c9:bc:
                    1b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E1:29:AE:98:3E:10:51:3E:F5:CB:83:92:6D:7C:E9:B8:B4:9C:37
            X509v3 Authority Key Identifier:
                keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/3130332e3133342e38372e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:a1:a4:bb:20:ca:59:07:7f:9f:0b:b7:9d:fc:cf:b0:cc:8a:
         0b:79:a3:e9:98:16:90:cc:41:c5:6b:ea:aa:e2:c2:ff:39:e8:
         8e:b9:36:e4:09:05:8a:9e:84:cb:6d:73:81:09:e3:c1:e0:3e:
         0e:b8:4e:aa:e1:36:c5:c5:8d:82:9d:5a:45:d9:e8:2c:16:77:
         17:c8:a9:28:73:5e:3d:5c:ef:47:5d:c3:6b:36:3c:69:6a:eb:
         0d:7b:58:a3:d4:5c:6c:ec:52:bf:4b:d2:5c:ed:6c:94:ad:84:
         bd:71:02:60:2e:a0:f2:a9:65:27:7a:85:88:6d:90:e1:66:3e:
         35:50:fe:a2:56:98:bc:25:06:9f:b3:4e:37:3c:14:ad:da:d7:
         ca:6c:f1:65:61:82:33:cd:7d:bb:14:91:46:73:c6:4a:1c:ff:
         2f:59:82:8d:b2:4b:fe:a9:3e:73:8c:39:ce:1d:20:6c:77:f6:
         48:ce:09:26:21:db:bb:25:56:44:2b:24:35:3f:a7:fb:f8:84:
         9b:c6:c1:cf:26:40:02:02:e5:39:53:a0:b5:19:b8:50:dd:fa:
         96:95:77:43:1c:65:cd:5d:a4:8b:ea:80:83:f3:80:09:19:b4:
         fd:e2:27:c1:e9:93:80:30:49:a8:cf:29:d5:47:85:95:98:e2:
         c0:8a:7c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org