Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230352e302f32342d3234203d3e203538333937.roa
File:                     3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (raw, json)
Hash identifier:          bzqLwXgqRc5lqIH8QIxSqfc9LTb/899srIuuHKEc/bE=
Subject key identifier:   1E:7D:8F:21:CD:EE:B0:F9:9D:A9:8E:FB:9F:A0:69:86:02:FF:60:82
Certificate issuer:       /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
Certificate serial:       03585CF79E9FCDC84591F2D535DB1833B6AD309E
Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230352e302f32342d3234203d3e203538333937.roa
Signing time:             Fri 08 Nov 2024 22:00:01 +0000
ROA not before:           Fri 08 Nov 2024 21:55:01 +0000
ROA not after:            Fri 07 Nov 2025 22:00:01 +0000
asID:                     58397
IP address blocks:        103.41.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl
                          rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:58:5c:f7:9e:9f:cd:c8:45:91:f2:d5:35:db:18:33:b6:ad:30:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
        Validity
            Not Before: Nov  8 21:55:01 2024 GMT
            Not After : Nov  7 22:00:01 2025 GMT
        Subject: CN=1E7D8F21CDEEB0F99DA98EFB9FA0698602FF6082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e7:a2:20:eb:fc:ea:9f:de:c2:92:23:67:c7:
                    8d:b7:c9:6e:95:66:65:65:18:e5:1a:b5:83:ef:91:
                    2d:51:ea:14:dd:f7:e6:7f:77:da:af:8f:d7:27:76:
                    28:25:18:cb:68:20:01:ce:01:4d:f2:b7:49:fe:59:
                    7f:e9:5c:6b:b6:60:f1:0a:70:af:c7:6b:9b:64:c1:
                    a7:b1:6b:36:70:8d:d9:4e:5f:46:05:2e:90:32:d9:
                    84:65:b9:71:47:f7:a4:24:7b:c2:42:d8:6b:71:6a:
                    de:70:ef:29:f7:32:40:93:05:6c:74:c1:c3:66:dc:
                    48:93:0a:25:0b:1d:6b:bf:1a:bf:7a:cc:8c:2a:28:
                    9f:6e:72:52:bb:84:eb:c9:43:d3:8d:a8:16:af:cc:
                    34:bd:cf:41:8c:e2:4f:79:84:93:0a:a7:67:18:a4:
                    3c:f1:c3:6f:95:86:b9:2d:fb:8f:18:18:6a:b9:79:
                    35:9f:21:13:e3:59:c7:7c:57:e6:b4:21:c7:29:8a:
                    5d:e6:7d:ac:78:9f:22:79:48:07:ee:de:9c:48:c9:
                    39:c9:df:26:d1:03:ba:50:61:08:ed:7c:5a:35:d2:
                    5c:94:03:90:06:2f:e7:30:b3:a3:ef:94:22:2c:b1:
                    23:91:13:ae:d3:28:6c:15:74:a2:a7:c9:bf:51:4f:
                    ac:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7D:8F:21:CD:EE:B0:F9:9D:A9:8E:FB:9F:A0:69:86:02:FF:60:82
            X509v3 Authority Key Identifier:
                keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230352e302f32342d3234203d3e203538333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:af:45:ba:96:27:fa:23:cd:c3:ae:7e:70:9d:17:cb:a5:55:
         b6:42:78:eb:5d:bf:b9:78:47:1b:e5:63:49:01:91:ee:01:7c:
         56:b7:fc:3f:05:1d:4b:e4:03:a2:30:c6:d4:50:62:fc:35:6b:
         d0:0e:2a:8f:f6:51:9b:7f:ad:3e:98:7e:07:37:08:8f:9b:ef:
         18:f4:b3:5f:52:34:39:ab:d0:e2:49:16:d7:3d:bf:cf:4b:b6:
         84:b2:83:fd:9d:67:35:4c:70:77:26:cf:a2:6e:9f:1e:72:eb:
         e9:df:e1:f5:fc:19:5c:ae:95:47:e9:9c:c0:2a:75:1d:93:ff:
         4e:d1:1b:d3:23:b7:95:26:bf:fa:61:52:17:bf:07:52:b9:05:
         6e:cd:6b:23:58:63:c3:fd:2a:97:65:c6:18:01:5b:5e:95:53:
         62:91:e0:2e:ff:a4:59:c7:2a:79:58:af:cb:3b:f0:17:cf:cb:
         14:cd:19:c6:22:7e:e1:88:3c:34:16:44:ad:e7:17:30:00:35:
         8d:eb:91:65:fd:43:99:f1:d3:79:dc:08:7a:7e:4d:fb:79:ea:
         1a:51:b1:9d:1a:19:58:cf:d9:1f:8f:c8:0d:9f:85:eb:3a:f9:
         e8:67:43:9a:68:cf:1d:31:7a:0d:07:05:81:55:1c:7c:a9:57:
         d3:ba:e9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:58 2024 by rpki-client on console-fra.rpki-client.org