Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa
File:                     3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (raw, json)
Hash identifier:          F1X4boFtxn/EgnpkVQWCKt75oCjM/gmO/k75zwrcQVs=
Subject key identifier:   49:3B:06:F4:67:6E:65:AD:57:3E:07:B8:01:EC:A9:84:E5:06:A7:B4
Certificate issuer:       /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1
Certificate serial:       50DD40E48472A454B587706A09DE1EA3347147A6
Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa
Signing time:             Mon 01 Jul 2024 01:04:15 +0000
ROA not before:           Mon 01 Jul 2024 00:59:15 +0000
ROA not after:            Mon 30 Jun 2025 01:04:15 +0000
asID:                     132637
IP address blocks:        103.143.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl
                          rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:dd:40:e4:84:72:a4:54:b5:87:70:6a:09:de:1e:a3:34:71:47:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1
        Validity
            Not Before: Jul  1 00:59:15 2024 GMT
            Not After : Jun 30 01:04:15 2025 GMT
        Subject: CN=493B06F4676E65AD573E07B801ECA984E506A7B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c3:b9:a6:6c:24:bb:33:8b:45:9f:b8:19:c2:
                    4f:61:91:4b:dd:a6:4f:5c:91:a8:3f:d9:4c:19:9a:
                    9d:e8:61:a0:76:90:58:c9:5d:22:63:8d:0d:83:35:
                    db:f2:70:12:81:cd:20:a9:d0:3d:76:9e:13:d9:4b:
                    6e:d7:f5:75:73:af:f0:d8:4f:25:4d:de:45:11:a4:
                    f5:84:1b:a7:bf:d4:46:56:70:93:2b:6a:c4:93:a5:
                    4f:fc:e6:18:da:96:78:3a:5a:a1:71:c7:ae:4e:6a:
                    e2:54:7b:13:27:c1:9b:e5:f5:34:24:02:a4:01:c1:
                    ca:d8:bd:43:7a:5e:7c:8c:c1:e8:df:bc:2a:6b:48:
                    53:39:44:a8:f0:a6:5c:c1:31:d8:53:16:be:e8:6a:
                    ae:58:8b:01:61:e0:b5:78:17:ef:66:9e:cd:1c:32:
                    72:8d:07:db:22:94:e8:85:4e:19:d6:65:46:19:9e:
                    97:f6:e0:65:ed:de:1f:ba:b1:7f:e6:16:3d:66:ae:
                    58:ce:46:63:d4:38:31:c3:bd:38:29:fe:21:5b:2f:
                    ff:ab:f0:53:2f:b2:b4:77:02:ec:c1:e3:39:d6:a2:
                    b8:c0:1e:07:9d:e8:c8:d3:75:fb:38:ce:fe:9e:58:
                    c4:1c:6c:2b:b2:59:61:13:7c:0d:66:1f:68:e5:b0:
                    a4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3B:06:F4:67:6E:65:AD:57:3E:07:B8:01:EC:A9:84:E5:06:A7:B4
            X509v3 Authority Key Identifier:
                keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:7d:1e:5a:d7:b5:21:cf:6b:be:0a:89:9f:cc:fc:0d:b5:d7:
         5a:4d:e7:ce:60:4c:fd:4b:55:34:da:a4:41:66:fd:81:c6:5b:
         7d:a3:a0:8c:d3:89:f8:dd:d7:06:a6:b0:18:26:a0:52:fb:3e:
         5b:2b:a4:c6:ca:d4:70:50:e8:44:bd:81:ef:6f:d6:41:96:71:
         94:60:13:ea:67:98:3d:c7:ce:13:96:cf:1e:9c:3e:6f:a5:0c:
         17:63:bc:82:ad:90:a1:eb:44:9a:90:ac:7f:65:89:18:65:32:
         64:47:86:b1:60:3a:e3:1a:2d:06:75:b1:0a:0a:0d:0b:e1:ea:
         a9:23:29:91:e5:a1:e6:16:f8:47:18:0d:5c:e5:93:81:6a:0d:
         17:17:85:a9:de:a7:02:fb:11:c2:59:27:17:51:1f:e8:20:c3:
         e9:93:91:9c:65:ea:51:41:91:9e:cb:b8:0b:f1:93:1a:71:92:
         84:65:62:89:2b:bb:f9:e0:84:56:5c:82:f1:04:cf:79:f6:d4:
         6d:a6:07:53:9e:a8:62:6e:a2:49:a6:cc:91:c2:e5:9f:55:c2:
         cc:87:de:77:79:e0:a4:1e:1f:12:3a:99:ef:14:e6:ba:cd:c1:
         e2:46:a4:ef:d9:f6:b9:53:ec:8c:e5:41:7f:0e:a2:90:09:82:
         e7:89:be:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:01 2024 by rpki-client on console-ams.rpki-client.org