Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa
File:                     3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (raw, json)
Hash identifier:          JsesZ2XEjGD90Q6rb53op1u+M0C8ZTvk1vBXUWFrpwg=
Subject key identifier:   0A:57:71:05:EF:AE:4C:AF:8F:E7:6A:BA:87:B7:66:A3:3A:36:30:1E
Certificate issuer:       /CN=95966A8DB250307CF9852483F96922EE520F6E2A
Certificate serial:       01D2C499CFAB6987884ACB015BAFB66622BB2FAE
Authority key identifier: 95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa
Signing time:             Thu 08 Aug 2024 08:01:08 +0000
ROA not before:           Thu 08 Aug 2024 07:56:08 +0000
ROA not after:            Thu 07 Aug 2025 08:01:08 +0000
asID:                     132668
IP address blocks:        103.19.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl
                          rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 20:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d2:c4:99:cf:ab:69:87:88:4a:cb:01:5b:af:b6:66:22:bb:2f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95966A8DB250307CF9852483F96922EE520F6E2A
        Validity
            Not Before: Aug  8 07:56:08 2024 GMT
            Not After : Aug  7 08:01:08 2025 GMT
        Subject: CN=0A577105EFAE4CAF8FE76ABA87B766A33A36301E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a5:ca:24:ee:5f:7b:a3:b7:53:1f:56:e4:98:
                    35:21:8d:31:55:fd:e7:fe:df:52:a7:08:05:aa:3c:
                    44:41:eb:29:4b:b1:59:a9:2c:e0:3a:fa:76:85:48:
                    dc:67:77:51:82:ee:9c:44:c5:86:52:ec:8c:49:f5:
                    b0:66:1b:05:7b:49:c7:94:a1:ca:f2:f3:0e:24:2b:
                    e1:6e:c7:d2:5e:c9:f2:8c:14:93:ad:22:c1:18:f7:
                    6f:55:dc:d7:ae:35:a2:80:c2:3d:de:8a:fa:d8:36:
                    da:22:96:78:5e:fe:db:3b:95:ff:7f:e8:8f:ec:d3:
                    c3:c6:b9:ad:d4:04:5c:ba:94:73:8c:34:22:ca:29:
                    71:51:c0:d4:f4:04:68:cd:34:8c:11:40:ec:8f:03:
                    9a:b9:39:29:f7:5b:26:a8:f4:0c:ca:e8:c7:79:8d:
                    31:53:6a:13:df:ec:65:0b:66:b7:69:d4:b8:09:1f:
                    62:96:56:91:c3:81:51:f1:76:88:6e:a8:02:df:41:
                    fe:1c:ed:cb:49:1e:8e:8f:2c:9d:c6:c2:63:0d:2e:
                    37:f9:b0:e3:59:62:99:34:84:f6:f1:23:f4:c8:11:
                    76:a4:8e:de:2e:22:de:5e:43:77:1a:2d:48:7b:42:
                    05:92:61:de:34:c9:a2:4f:e1:6b:7b:37:1c:f8:11:
                    0a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:57:71:05:EF:AE:4C:AF:8F:E7:6A:BA:87:B7:66:A3:3A:36:30:1E
            X509v3 Authority Key Identifier:
                keyid:95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:70:4b:8c:d1:86:30:2e:47:eb:2c:de:e0:53:bf:ac:cf:bf:
         7a:08:ae:bc:d0:51:94:26:f3:89:24:9f:61:5c:7c:8c:f1:b4:
         f8:8b:87:c5:3d:be:90:04:14:1c:7e:cf:29:61:4b:9c:e6:c1:
         6d:25:cf:4f:e2:37:1e:55:2b:43:6b:7d:5f:03:de:8a:0d:ab:
         b8:41:86:59:4a:09:57:27:7b:e6:2d:85:a9:c2:3b:9c:d5:37:
         57:f3:2f:e6:99:81:1e:58:7b:8d:6d:e9:4d:f3:a6:52:55:54:
         0d:ac:84:d5:ec:f7:91:ca:88:ed:56:2c:95:3e:9d:bb:10:c5:
         20:6b:63:ef:be:43:5b:f2:42:f8:17:70:37:f7:df:b1:5c:fa:
         50:f7:71:71:8e:cb:99:d4:8d:d1:87:e7:b2:2b:07:b0:c4:75:
         e5:46:3c:5f:3c:95:7a:79:0f:c3:2e:e1:c1:f7:56:fe:c3:b5:
         55:77:d4:e0:95:2f:e4:a2:4c:64:82:62:ae:52:dd:f6:41:d6:
         77:b5:9b:05:19:0b:1a:60:12:60:b1:e0:b3:b1:f5:a3:f5:4b:
         a6:1c:6e:7e:63:07:5e:97:28:17:cc:6b:ef:cb:4b:d8:2a:0c:
         be:fc:da:d1:e0:bf:dc:d0:a1:23:fb:90:98:42:a3:da:fe:fd:
         a4:a2:01:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org