Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa
File:                     3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          tJ8ZvI46pqkm8zQNc8mw5mnCsJpq72czgdRpZYAABAU=
Subject key identifier:   46:1F:FD:25:DF:97:88:B0:A7:B0:CF:07:37:FC:8F:24:9A:37:15:94
Certificate issuer:       /CN=882209E37356E0512FBE4E81B00E4F2481865087
Certificate serial:       1DAB14C56D1011ADA078D9EFB80EEFC4ACA284A7
Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa
Signing time:             Mon 01 Jul 2024 01:02:44 +0000
ROA not before:           Mon 01 Jul 2024 00:57:44 +0000
ROA not after:            Mon 30 Jun 2025 01:02:44 +0000
asID:                     131717
IP address blocks:        103.25.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
                          rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 19:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ab:14:c5:6d:10:11:ad:a0:78:d9:ef:b8:0e:ef:c4:ac:a2:84:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087
        Validity
            Not Before: Jul  1 00:57:44 2024 GMT
            Not After : Jun 30 01:02:44 2025 GMT
        Subject: CN=461FFD25DF9788B0A7B0CF0737FC8F249A371594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:02:2b:29:a3:5a:50:a7:0f:c0:6f:85:5f:c3:
                    b2:62:65:99:6e:e2:ee:2f:b3:c6:ec:5c:f2:18:8f:
                    be:ae:42:8c:ef:14:a7:e5:b2:09:d9:cc:34:6a:92:
                    94:0c:58:b5:22:a3:9c:57:0f:96:c1:08:3f:cd:18:
                    3e:78:26:46:b9:be:52:91:20:f8:0a:77:96:d6:db:
                    03:f7:c3:72:70:51:52:14:e9:7a:15:06:fb:67:9b:
                    3f:b3:e1:7a:0c:c6:6a:84:2b:3e:e6:82:c3:cc:08:
                    db:bf:16:37:f2:b1:c1:f7:ba:65:9a:38:04:8e:fe:
                    68:4e:44:65:90:22:15:62:6b:15:88:49:ab:ed:ed:
                    09:9f:f6:8a:31:62:46:a5:77:01:e6:d5:bd:56:02:
                    82:a8:fe:3f:ec:b2:8f:c7:84:40:92:35:1c:07:aa:
                    5d:8d:74:47:42:3c:dc:b6:88:9d:67:63:ec:c6:87:
                    c2:b2:d3:93:75:e3:df:3e:01:04:ea:5c:b1:81:9e:
                    15:6b:71:ce:5b:19:49:a9:5f:5a:f6:e2:a1:1a:b4:
                    fb:d8:a8:ca:50:6d:a8:f4:91:d0:4d:6b:46:b9:35:
                    6c:08:ee:91:57:b8:cc:78:1f:49:75:dc:4c:54:e1:
                    d4:8b:08:ea:b0:a2:76:81:d4:61:64:fe:2f:8d:b0:
                    f4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1F:FD:25:DF:97:88:B0:A7:B0:CF:07:37:FC:8F:24:9A:37:15:94
            X509v3 Authority Key Identifier:
                keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:99:69:d5:66:d2:98:94:0d:d8:40:e2:4a:30:da:95:a8:56:
         9d:7b:29:b4:50:13:f5:58:72:eb:69:80:08:3e:e2:06:d0:d3:
         e6:30:87:9b:35:00:2e:d4:e4:f4:60:f0:21:ec:37:88:bd:5d:
         9c:5a:fd:36:e7:55:85:29:48:b8:7c:48:c2:58:56:3b:f1:cf:
         49:2e:9c:48:dc:d5:a5:4f:fb:a5:11:5c:15:72:21:6c:a5:3f:
         45:53:3d:fb:ad:e3:72:a7:66:40:ff:45:b0:18:30:3c:cf:90:
         04:a6:db:3f:b8:bd:1d:5f:d9:3c:22:cb:b0:df:c1:d0:f3:b8:
         bf:a2:60:98:17:f4:82:5c:6d:33:de:ee:81:59:3b:81:04:85:
         13:b1:64:bb:af:ad:cc:f4:e7:0b:53:7c:98:0d:24:c4:30:f0:
         74:c4:4d:a9:47:d4:42:09:60:7f:59:db:25:20:6d:61:49:93:
         93:0a:bc:ae:6f:d7:26:09:ab:94:33:fa:fe:8e:cf:1d:65:a4:
         bf:bd:cf:65:86:3c:ed:59:b8:e7:28:a8:3f:35:20:d6:24:c6:
         d2:38:bd:e6:72:e6:13:38:a6:99:ba:6d:0e:d7:ae:5e:7c:78:
         c6:3d:fc:9c:37:1c:f4:c9:d7:8b:ec:09:19:3a:bc:ed:25:69:
         dd:92:37:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:20 2024 by rpki-client on console-fra.rpki-client.org