Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa
File:                     3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (raw, json)
Hash identifier:          prxETRZ+UcJYInSy8kj+pHh+ePpdBSveL40hYMcOpu4=
Subject key identifier:   38:1B:04:0B:4C:76:46:21:F6:A0:2D:E5:20:41:D5:EA:2E:AA:CD:FC
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       7BD77B186A7B8DBFA98BC07E389AD8908A15A1D7
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa
Signing time:             Thu 07 Nov 2024 09:00:02 +0000
ROA not before:           Thu 07 Nov 2024 08:55:02 +0000
ROA not after:            Thu 06 Nov 2025 09:00:02 +0000
asID:                     142360
IP address blocks:        103.247.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 05:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d7:7b:18:6a:7b:8d:bf:a9:8b:c0:7e:38:9a:d8:90:8a:15:a1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Nov  7 08:55:02 2024 GMT
            Not After : Nov  6 09:00:02 2025 GMT
        Subject: CN=381B040B4C764621F6A02DE52041D5EA2EAACDFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:ac:2f:4b:34:4f:76:b3:fc:8a:8d:6c:3b:
                    de:d1:d5:7e:e5:9b:5b:f7:47:6a:e6:bf:27:39:7d:
                    12:ee:c9:d9:f3:61:3c:fe:6b:a1:5a:a9:ea:66:5a:
                    ba:b9:c8:8e:81:0d:36:b9:43:2e:8c:48:19:7d:ec:
                    7d:63:29:b5:db:92:d6:f2:2d:2f:f2:45:4c:29:47:
                    f4:b5:6e:16:05:ed:35:44:f4:86:f1:25:c1:24:fa:
                    f0:f3:76:9a:ee:1b:42:bc:da:df:64:1f:ce:c9:e7:
                    ee:54:6e:b1:5a:a3:36:e4:21:28:57:bc:cd:76:5d:
                    9a:da:73:24:86:c8:98:62:7b:cf:8a:91:3b:14:6a:
                    1f:58:01:fc:72:e4:ab:84:67:e9:21:ba:91:1a:5d:
                    99:44:9b:30:da:69:cc:d6:bd:de:2d:54:9b:07:ae:
                    0c:00:12:10:c2:88:74:48:78:c7:6d:b8:6e:98:a9:
                    8e:f9:64:31:59:63:e9:a0:3d:6d:95:a2:16:ec:2e:
                    0e:f2:ef:82:8b:d7:0c:2c:f0:14:4a:b6:9a:30:6f:
                    57:d3:fc:f7:f4:b2:77:0b:67:fe:8a:fa:2f:de:89:
                    db:c9:00:98:99:f1:55:6a:bc:21:5a:42:3e:43:4e:
                    c7:46:e1:67:eb:c2:73:bf:00:2b:b3:79:b1:7d:7a:
                    08:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1B:04:0B:4C:76:46:21:F6:A0:2D:E5:20:41:D5:EA:2E:AA:CD:FC
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:13:59:11:14:82:a2:9f:0f:21:44:e9:5e:f6:48:a8:d1:ff:
         5b:f0:73:e3:94:bb:99:79:14:70:d0:69:70:19:98:4f:b4:83:
         40:32:bd:0f:ee:5b:28:a2:bd:1e:e9:99:9b:19:da:8b:08:05:
         c0:30:35:44:59:ff:59:93:6e:23:59:27:12:70:6e:24:8c:86:
         bf:50:fd:9a:88:99:95:67:fd:26:39:af:c5:f0:84:4f:65:af:
         8c:ea:ca:da:d3:b0:02:43:6b:dd:18:f8:dd:d9:fc:24:5f:2b:
         14:60:25:a9:af:93:b8:e3:67:5e:11:8b:e0:f7:7c:4b:cb:d1:
         10:43:19:fb:ea:46:8b:c7:6d:09:8a:28:8d:b7:11:07:26:dd:
         20:26:8b:cf:d9:24:95:f8:a7:6a:04:b7:b7:dc:73:84:6b:50:
         25:79:3d:a6:2b:06:24:fa:7d:b0:0c:93:ba:c8:1c:a5:2d:b3:
         a7:e9:51:13:2b:a9:15:6b:58:60:f3:fc:a1:f5:b6:3a:d7:c3:
         f0:62:7c:01:fd:a7:6f:c7:83:59:9c:37:40:4d:c1:4b:59:68:
         5f:35:56:c1:84:1a:a0:da:50:8f:e7:2a:c6:ff:04:c5:52:0d:
         72:19:29:c3:7d:fb:4e:24:67:23:8a:00:f9:1c:9b:16:35:bc:
         f8:c0:41:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:40 2024 by rpki-client on console-fra.rpki-client.org