Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e31342e32312e302f32342d3234203d3e20313331373137.roa
File:                     3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          Rb28NXlYt2i42cKjjOk5iENFCUNoEfsw3NtDJbjO8H8=
Subject key identifier:   A4:BC:F3:39:AA:76:31:85:7A:85:0C:A1:2F:54:E0:C8:01:F0:C6:F1
Certificate issuer:       /CN=882209E37356E0512FBE4E81B00E4F2481865087
Certificate serial:       06DD4D3700426DC9B72F0D4D11AE98EE9022C78A
Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e31342e32312e302f32342d3234203d3e20313331373137.roa
Signing time:             Mon 01 Jul 2024 01:02:43 +0000
ROA not before:           Mon 01 Jul 2024 00:57:43 +0000
ROA not after:            Mon 30 Jun 2025 01:02:43 +0000
asID:                     131717
IP address blocks:        103.14.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
                          rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 19:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:dd:4d:37:00:42:6d:c9:b7:2f:0d:4d:11:ae:98:ee:90:22:c7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087
        Validity
            Not Before: Jul  1 00:57:43 2024 GMT
            Not After : Jun 30 01:02:43 2025 GMT
        Subject: CN=A4BCF339AA7631857A850CA12F54E0C801F0C6F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:43:7f:8b:3e:64:eb:41:25:a8:d5:4f:e2:df:
                    2d:56:60:71:46:b7:87:47:ff:08:eb:f6:c6:d7:12:
                    ff:43:ed:72:23:cd:65:84:22:d1:be:0e:d1:35:54:
                    c6:5a:1a:99:c2:6f:a6:c1:46:eb:c0:86:81:db:d9:
                    8f:3a:87:79:d3:a4:88:81:df:95:49:d7:b4:c0:3f:
                    00:32:df:45:37:82:44:fa:6b:e8:76:a2:74:b8:97:
                    ac:21:ba:b6:f3:2e:65:c9:12:1b:cd:52:aa:e3:8a:
                    87:91:1d:1f:fc:fc:25:10:34:c2:dd:c1:f1:41:1e:
                    ae:56:75:ff:72:61:48:55:cb:cc:87:1a:0d:a3:a9:
                    c8:45:c8:1b:c4:0c:ff:dd:bb:f1:76:12:90:bb:1d:
                    a1:f2:f2:79:c0:4c:36:db:a1:71:26:b3:12:4f:90:
                    9a:f9:c4:3e:28:27:c6:6a:90:59:8d:bc:92:07:95:
                    3d:dd:7f:f1:ae:2c:b9:16:41:d7:cc:e8:4a:4c:0f:
                    47:bd:93:46:a4:5a:72:62:fe:07:cc:fe:8b:d7:c0:
                    de:97:04:1f:c3:ab:df:91:5a:4a:ff:a7:9f:cf:9e:
                    21:2a:b1:28:5b:3b:9d:54:47:ad:71:6d:c9:0c:d9:
                    f5:30:ea:9e:21:c5:69:2d:9c:ab:a4:62:ea:d4:1c:
                    fd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BC:F3:39:AA:76:31:85:7A:85:0C:A1:2F:54:E0:C8:01:F0:C6:F1
            X509v3 Authority Key Identifier:
                keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e31342e32312e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:d8:4b:06:83:3a:1b:05:fb:0d:a3:a4:02:05:f6:60:35:85:
         b9:2c:8a:c5:b1:0d:4c:bd:0e:83:2b:4b:85:8a:a8:ef:32:0f:
         7a:b1:6c:8d:a5:6f:27:0c:1e:ef:a5:ca:ec:1b:b2:02:bd:d0:
         2d:a3:2e:eb:49:15:2c:3d:95:c5:ef:87:1b:f2:af:92:cd:2a:
         ab:f6:3a:62:f9:86:67:d9:80:cc:c7:cd:e8:e3:2d:24:fd:d4:
         6f:f4:65:ea:87:1b:8d:42:c1:8c:e8:6c:94:78:29:94:ad:66:
         7b:b8:82:85:5d:71:2d:56:57:89:68:02:7a:86:1a:8f:28:13:
         ef:8a:27:4c:cd:ef:bb:59:32:c8:13:24:d3:97:a8:50:54:22:
         cf:49:fd:6c:1f:b6:0c:7f:2d:b0:7b:e4:a4:b0:d1:6d:2a:bc:
         27:a5:1b:d5:f4:57:e4:01:d0:d0:49:e1:db:5a:e2:e6:1d:7e:
         78:28:55:47:12:f7:95:71:f7:09:ed:1e:94:e2:39:89:c7:33:
         2b:36:7c:0e:85:c8:69:21:25:73:6e:72:1e:e2:88:d2:c3:3c:
         a5:7c:bb:a6:c0:ed:a9:7a:ac:aa:e7:2c:20:19:59:af:fb:2a:
         b0:0b:ee:2e:a8:7b:36:46:03:2d:27:e4:61:4f:b5:da:22:0a:
         e2:c5:16:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:20 2024 by rpki-client on console-fra.rpki-client.org