Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3130332e3139352e31382e302f32342d3234203d3e203535363833.roa
File:                     3130332e3139352e31382e302f32342d3234203d3e203535363833.roa (raw, json)
Hash identifier:          cGLu2UMdrJRPRQG7pt7UtR/38tRpV8ciHNgw5Tldj8w=
Subject key identifier:   DB:62:AE:BA:0A:95:FB:46:83:09:E1:58:B6:F0:D3:80:30:01:56:A0
Certificate issuer:       /CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28
Certificate serial:       032C2DD8677E8B9396F357497143F15DAE8F8DF7
Authority key identifier: 35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3130332e3139352e31382e302f32342d3234203d3e203535363833.roa
Signing time:             Mon 01 Jul 2024 01:04:14 +0000
ROA not before:           Mon 01 Jul 2024 00:59:14 +0000
ROA not after:            Mon 30 Jun 2025 01:04:14 +0000
asID:                     55683
IP address blocks:        103.195.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl
                          rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2c:2d:d8:67:7e:8b:93:96:f3:57:49:71:43:f1:5d:ae:8f:8d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28
        Validity
            Not Before: Jul  1 00:59:14 2024 GMT
            Not After : Jun 30 01:04:14 2025 GMT
        Subject: CN=DB62AEBA0A95FB468309E158B6F0D380300156A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c7:66:a7:33:38:cc:6d:e9:fd:49:4f:fe:ab:
                    1d:91:61:c4:e5:43:1c:e7:4a:3a:5c:91:be:49:0e:
                    a0:a7:bb:41:bc:18:d8:b5:1b:36:05:c5:75:48:a5:
                    fd:5c:ab:8b:40:62:e7:83:2e:53:29:5f:cb:c6:82:
                    b2:2b:3b:e2:2b:77:c5:0c:7a:f6:ad:92:ba:13:0c:
                    d5:94:8f:d8:94:6a:c3:2b:f1:f1:2e:23:7e:ec:14:
                    c2:56:3f:1e:f6:47:f5:b5:29:d3:2b:29:3f:aa:4d:
                    92:cc:da:12:78:5e:66:3e:0b:7c:5a:20:5f:ba:f3:
                    23:0e:1c:4c:42:07:6f:15:0c:3e:f6:01:16:51:c7:
                    d9:9f:c8:f2:26:5f:0d:71:d2:8d:33:75:d4:30:ce:
                    0d:3a:d8:d2:97:a0:42:69:1d:cf:0e:9f:1d:dd:fb:
                    dd:3e:05:2f:49:1c:e6:01:2d:7a:a4:35:a8:99:d4:
                    fb:7b:dd:16:9d:bb:4a:35:8d:4d:b0:c8:c8:14:1c:
                    6c:82:5a:69:81:57:d1:eb:8e:31:51:67:66:99:6c:
                    e3:c1:d0:eb:83:09:8b:d4:a6:48:24:c8:00:b9:1c:
                    e4:7c:aa:9e:8a:20:7f:95:5b:ad:5a:a9:e0:a4:9a:
                    6f:29:f3:5e:e4:e7:1c:e3:b6:84:5e:b9:50:56:03:
                    cd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:62:AE:BA:0A:95:FB:46:83:09:E1:58:B6:F0:D3:80:30:01:56:A0
            X509v3 Authority Key Identifier:
                keyid:35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3130332e3139352e31382e302f32342d3234203d3e203535363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e4:70:5c:5f:f2:df:5d:ba:5a:92:5e:32:b3:b3:2c:d2:f1:3f:
         77:2d:27:ff:df:54:9e:18:55:fb:e6:93:f9:18:e0:f1:0e:e1:
         a3:9c:4c:3d:1f:6b:e3:fc:3b:61:94:54:d3:3b:fa:f8:7a:75:
         a7:10:df:51:3f:cd:f8:4d:9b:8d:c5:4e:cb:3d:8f:a5:9d:3e:
         0c:56:97:2d:20:cf:8d:13:0c:2b:3f:29:1a:21:75:82:19:7e:
         91:22:cc:2b:b1:89:33:a0:8a:b2:f9:bb:2b:06:5e:78:9c:e1:
         f6:07:4f:8f:fe:28:a2:9c:96:1a:2c:6d:65:8d:43:88:02:b8:
         b6:01:97:04:ec:8b:38:fd:4a:6c:4e:19:da:2e:2b:f0:6b:80:
         a8:a8:c2:fb:8d:2f:88:4a:6d:a3:a6:77:09:6e:7e:2d:7e:de:
         49:77:61:9f:6c:7f:12:5b:fc:ac:82:60:74:d8:64:dc:8b:a6:
         c6:30:c8:d0:9e:79:94:9f:0d:a8:87:5a:78:d2:8b:f8:3c:ee:
         d4:f7:1c:1c:b3:6e:4d:aa:46:14:cd:98:f0:6b:30:fe:f1:7d:
         40:b8:ff:81:23:bc:97:f8:05:0e:da:94:e1:c9:16:fb:20:35:
         c0:33:b0:b4:f2:dd:08:2c:82:99:fb:3e:4a:ad:4b:0d:21:99:
         33:11:32:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:42:07 2024 by rpki-client on console-ams.rpki-client.org