Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31312e3232322e302f32342d3234203d3e203538333936.roa
File:                     3130332e31312e3232322e302f32342d3234203d3e203538333936.roa (raw, json)
Hash identifier:          pZSg4ZcwnxgrWfNtRCnRAOFoso9An1R++e3w158JR+U=
Subject key identifier:   64:C7:43:F6:FE:50:0B:4A:94:5B:36:E0:48:F2:24:C0:1F:D9:5D:93
Certificate issuer:       /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial:       30906F0A3EB7C0D5366D951FE230F9892DC1E51A
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31312e3232322e302f32342d3234203d3e203538333936.roa
Signing time:             Mon 01 Jul 2024 01:05:47 +0000
ROA not before:           Mon 01 Jul 2024 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:05:47 +0000
asID:                     58396
IP address blocks:        103.11.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
                          rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 00:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:90:6f:0a:3e:b7:c0:d5:36:6d:95:1f:e2:30:f9:89:2d:c1:e5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
        Validity
            Not Before: Jul  1 01:00:47 2024 GMT
            Not After : Jun 30 01:05:47 2025 GMT
        Subject: CN=64C743F6FE500B4A945B36E048F224C01FD95D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:64:57:0d:f8:63:de:69:95:3a:58:cb:9a:61:
                    4a:fa:88:7e:f6:10:7b:ce:d9:18:cd:77:34:f7:cd:
                    43:dc:4a:13:e6:01:8b:97:fb:c4:15:ab:9e:29:e6:
                    c4:6b:a7:19:ad:44:1e:29:dd:ff:d4:b3:7e:15:ea:
                    17:e3:74:c6:5f:5b:2f:41:cd:f9:bf:1e:68:b5:84:
                    e8:a7:dc:c5:c6:28:df:4e:d6:96:4d:92:1e:02:45:
                    2d:b9:b9:5b:7d:ca:e3:3b:bd:44:a4:85:ed:fa:a5:
                    5f:e7:69:bd:35:28:87:0d:dd:2e:e9:12:2d:04:58:
                    5b:50:db:3b:82:5e:44:58:1b:b9:15:84:c5:e2:8c:
                    3b:3d:85:37:74:1b:d1:4b:93:3f:8d:7a:f8:ae:cf:
                    b9:48:10:38:06:c5:8d:a1:d7:ae:2c:58:7e:8a:78:
                    49:97:ea:e9:84:f9:f4:9d:b6:6e:8f:8a:9a:2c:3d:
                    30:e9:77:82:64:92:2e:32:d4:8d:f9:ce:4f:e5:2c:
                    a7:59:d7:bc:1b:fe:a1:ab:53:59:44:9c:2d:a4:89:
                    bd:3c:d5:13:2d:e6:99:44:a9:de:17:f9:8b:5d:44:
                    f4:ac:1e:e1:66:2d:2d:34:b8:b7:c0:1f:c4:f5:cd:
                    4d:2e:31:03:dc:34:65:97:84:78:7c:cf:83:d8:64:
                    06:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C7:43:F6:FE:50:0B:4A:94:5B:36:E0:48:F2:24:C0:1F:D9:5D:93
            X509v3 Authority Key Identifier:
                keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31312e3232322e302f32342d3234203d3e203538333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:1e:6a:b9:1e:c6:99:ad:9c:f9:77:a4:8f:78:6b:1d:88:c9:
         53:ea:10:ed:6e:ab:84:81:90:5c:92:6a:b2:e2:4f:43:1d:83:
         11:1a:8d:bb:86:7b:61:5e:53:ac:10:8b:02:dd:f1:32:4b:06:
         31:69:16:75:fe:b0:35:ac:95:ca:96:58:0d:b0:d3:49:a5:e7:
         ec:73:3c:1c:4b:6f:22:cf:b7:fc:b7:1b:87:e2:14:33:7d:30:
         5a:73:15:77:85:74:64:a9:65:a4:71:3c:04:d0:fc:49:1d:f7:
         cd:49:d7:d2:7e:83:c0:de:f4:74:08:8b:b3:03:32:64:db:da:
         42:69:66:f7:26:57:4f:89:d1:6b:d8:c1:14:7c:0b:69:0c:75:
         af:93:9f:b9:92:f4:e3:1c:51:94:db:c4:46:af:d1:0e:e1:20:
         be:af:89:2f:e4:fd:af:33:5f:42:61:63:91:7b:4f:3a:e3:b5:
         4b:08:0d:47:bb:32:96:96:69:ef:3a:0d:9d:b8:af:d6:5b:1d:
         fe:5b:a4:c7:61:f2:75:07:b3:99:7c:69:0f:7b:54:99:55:52:
         08:f4:b5:17:67:7b:f4:72:54:8c:70:60:6f:24:d3:88:ea:ca:
         59:4a:0b:ba:8d:10:d1:27:7c:ed:79:87:89:d4:6f:b2:8d:00:
         e7:28:ce:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org