Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa
File:                     3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (raw, json)
Hash identifier:          tetctb3x0jo2tKS9PhsP2mOyqUJEiXGEiR7qL9F7+V4=
Subject key identifier:   55:37:1E:C1:2D:97:AB:7B:2D:F0:0B:8A:92:0A:30:B0:8B:3E:E0:80
Certificate issuer:       /CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D
Certificate serial:       46C40C434BDE695516EFAA36CB9367482D83BBD1
Authority key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa
Signing time:             Mon 01 Jul 2024 01:04:56 +0000
ROA not before:           Mon 01 Jul 2024 00:59:56 +0000
ROA not after:            Mon 30 Jun 2025 01:04:56 +0000
asID:                     133802
IP address blocks:        103.141.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl
                          rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c4:0c:43:4b:de:69:55:16:ef:aa:36:cb:93:67:48:2d:83:bb:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D
        Validity
            Not Before: Jul  1 00:59:56 2024 GMT
            Not After : Jun 30 01:04:56 2025 GMT
        Subject: CN=55371EC12D97AB7B2DF00B8A920A30B08B3EE080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:4a:ca:6c:fe:3b:21:67:96:d7:69:43:49:
                    4d:35:4f:71:6d:d6:2a:96:6e:b0:79:f2:6b:e4:43:
                    18:08:4a:b9:80:14:2b:68:a1:aa:19:ec:86:34:a4:
                    81:7a:59:d7:46:51:69:49:c7:d2:c7:d5:a9:10:3a:
                    76:dc:d7:48:95:5c:94:44:9d:e4:96:34:93:99:ee:
                    69:45:32:ab:df:d6:e2:e3:d4:1f:bc:be:e5:80:bb:
                    07:e3:a7:79:d8:d1:0c:22:66:1a:b4:15:7e:03:a5:
                    6a:46:10:a6:35:3f:fe:8e:c6:73:9d:12:f1:58:c8:
                    ae:11:b1:f2:86:5c:d0:f1:40:b5:0b:3e:e3:23:47:
                    ee:e4:09:d3:de:33:f7:8c:d3:8c:48:c4:13:7c:03:
                    51:4b:ac:a4:f5:89:1f:1b:c6:c7:3c:35:33:d5:bd:
                    37:8d:6e:fc:82:11:b2:1c:21:6e:53:17:01:c3:9c:
                    72:9d:b8:b2:6c:83:d1:e4:55:b4:fa:b8:15:09:99:
                    a0:bc:bb:67:21:6e:c1:df:d3:20:48:e9:3e:e0:7b:
                    78:5f:4e:75:26:39:a1:f1:b5:2d:9c:d6:1e:a9:4e:
                    cc:63:97:52:7f:43:17:64:c1:9e:51:14:a6:86:4c:
                    52:94:e7:0c:16:3f:85:3a:b0:44:e2:d3:17:b5:e9:
                    98:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:37:1E:C1:2D:97:AB:7B:2D:F0:0B:8A:92:0A:30:B0:8B:3E:E0:80
            X509v3 Authority Key Identifier:
                keyid:BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:9f:e9:55:84:1e:d1:cb:34:c1:02:51:c6:c7:35:84:01:db:
         04:ae:b7:7e:52:1b:46:62:83:21:77:dd:25:4b:78:c8:fb:48:
         0b:50:b8:87:5f:5d:1e:7e:6e:3d:4f:20:ee:e3:fb:f5:e7:84:
         83:bc:7d:aa:e9:e7:15:d7:b4:3d:31:d9:6d:c2:f0:5b:18:7b:
         7c:55:ce:e1:82:e4:2f:49:4b:e9:44:24:6b:5a:07:94:b0:c1:
         e7:4e:7a:ee:9c:c0:1d:07:af:08:b0:7d:b9:e1:56:8f:78:8c:
         a9:37:9a:48:9c:b9:41:36:94:2f:97:e8:0c:77:c3:b3:13:f3:
         27:ee:c5:5e:df:2d:00:db:ef:17:04:1c:b2:52:9d:01:5d:b6:
         c4:86:03:f5:13:b3:da:1d:93:f2:f1:54:a6:7b:ab:f1:e7:54:
         d4:44:3a:41:cf:65:b0:b6:83:a3:f8:cf:17:b6:fb:69:bc:e2:
         04:60:bd:c4:b1:e2:09:4b:56:8d:3e:ca:1d:61:db:0d:f1:3b:
         ab:92:ed:d7:19:01:70:e6:7c:1c:a4:95:0e:af:e8:39:f6:25:
         16:4f:fc:91:e8:d2:08:ec:c9:94:a2:8f:4b:0c:71:31:f7:8c:
         15:90:89:44:00:ae:e3:f0:1a:24:d7:de:36:1f:c4:da:97:27:
         e2:82:0b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org