Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/3130332e372e3130342e302f32342d3234203d3e20313531353933.roa
File:                     3130332e372e3130342e302f32342d3234203d3e20313531353933.roa (raw, json)
Hash identifier:          Pp05Le3/SJbeFB+88418w73fpvvmK1Gfjl+mJ0AjkKg=
Subject key identifier:   F9:6C:67:E4:5D:41:FF:CC:EF:E3:5A:B1:65:C4:05:3A:DB:62:81:EC
Certificate issuer:       /CN=82FB9CE597D61EC382BA2D63909426959C43F18F
Certificate serial:       7D23FFB1023BF78CD92376BC60EC0C7FBBB6D628
Authority key identifier: 82:FB:9C:E5:97:D6:1E:C3:82:BA:2D:63:90:94:26:95:9C:43:F1:8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82FB9CE597D61EC382BA2D63909426959C43F18F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/3130332e372e3130342e302f32342d3234203d3e20313531353933.roa
Signing time:             Wed 02 Oct 2024 04:01:35 +0000
ROA not before:           Wed 02 Oct 2024 03:56:35 +0000
ROA not after:            Wed 01 Oct 2025 04:01:35 +0000
asID:                     151593
IP address blocks:        103.7.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.crl
                          rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82FB9CE597D61EC382BA2D63909426959C43F18F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:23:ff:b1:02:3b:f7:8c:d9:23:76:bc:60:ec:0c:7f:bb:b6:d6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FB9CE597D61EC382BA2D63909426959C43F18F
        Validity
            Not Before: Oct  2 03:56:35 2024 GMT
            Not After : Oct  1 04:01:35 2025 GMT
        Subject: CN=F96C67E45D41FFCCEFE35AB165C4053ADB6281EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:eb:60:cc:7a:95:0d:09:36:b2:d2:34:f4:56:
                    4c:bf:1b:fd:15:0f:85:8f:2c:69:3f:6b:89:88:b9:
                    91:c7:b9:1e:2a:ee:77:d7:57:68:e6:2f:ca:0a:26:
                    5d:95:a4:97:15:b4:a3:35:8a:b8:7b:99:13:23:7b:
                    77:0e:e6:07:fa:c3:a9:6a:ad:a9:a5:ef:e0:c2:04:
                    6a:57:a9:09:9d:21:2a:09:cc:b4:c2:25:92:07:a7:
                    b3:83:4d:7e:77:05:63:fc:33:d2:bc:a7:83:3b:7e:
                    57:f8:fa:54:47:5e:71:ba:a7:f9:a3:6f:69:87:55:
                    e1:c6:f9:f2:99:6c:34:ae:ad:f6:72:41:14:33:b2:
                    b5:ef:09:1f:08:7b:91:a4:06:f6:ab:e3:47:d2:f3:
                    95:4a:de:a7:fd:84:d2:cf:30:53:71:6d:3d:89:3d:
                    06:bd:87:cd:b2:06:ba:a4:bd:fb:40:ed:f2:ea:ee:
                    94:c5:b0:b9:64:06:dc:6c:49:49:d8:f6:45:d9:10:
                    54:ca:9b:dd:d4:95:ce:8d:33:c5:59:81:38:06:67:
                    85:b2:f8:91:72:9d:a9:6f:70:86:9a:68:27:6c:5a:
                    83:e4:69:00:f6:fd:e4:c5:58:7d:1f:67:c4:51:a7:
                    3e:d0:80:0a:df:7a:ed:93:5b:a9:3b:a2:a9:ce:fb:
                    d2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6C:67:E4:5D:41:FF:CC:EF:E3:5A:B1:65:C4:05:3A:DB:62:81:EC
            X509v3 Authority Key Identifier:
                keyid:82:FB:9C:E5:97:D6:1E:C3:82:BA:2D:63:90:94:26:95:9C:43:F1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82FB9CE597D61EC382BA2D63909426959C43F18F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/3130332e372e3130342e302f32342d3234203d3e20313531353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:5c:6b:b6:6b:2b:19:b8:fe:c8:b7:3a:96:66:9b:cc:df:58:
         f9:2c:a2:55:8a:4f:50:c9:4c:b7:30:81:13:85:4b:a1:c4:f7:
         6f:fd:18:40:33:ee:07:00:eb:61:65:16:6c:4e:a9:ae:a2:b4:
         74:b8:5b:c4:72:85:fd:7e:16:d1:ac:96:17:d9:38:71:db:4a:
         e3:9e:d7:24:80:03:51:72:77:6d:d2:cd:97:bf:23:5a:24:3d:
         69:0c:05:70:5b:bb:2b:dc:ba:93:cb:71:a5:5a:f6:32:d3:44:
         fe:44:0e:cd:9b:e8:95:4f:0e:31:35:58:1c:f7:c0:70:31:3e:
         ea:f4:64:88:8e:10:a5:39:89:fc:6b:ba:2f:69:a3:6b:bb:2f:
         07:b8:0f:5a:e0:3a:f8:8a:35:b2:ee:ce:20:ca:ef:f9:04:f5:
         f1:54:64:08:b4:e0:b9:dc:67:58:44:96:df:6d:3a:77:2d:66:
         e3:e1:cf:24:6f:95:c0:77:8d:27:51:c4:62:a1:b6:89:a4:ab:
         75:b9:45:15:95:29:bb:19:d6:3e:9e:16:2d:76:e6:39:c4:9b:
         57:65:a6:6c:1d:8a:94:d4:91:d8:64:6a:1a:b3:95:14:fc:5d:
         ec:1f:d2:05:cb:a6:13:13:2f:ed:22:d4:c1:09:59:7c:2f:72:
         c4:d7:f0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org