Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230372e302f32342d3234203d3e203538333937.roa
File:                     3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (raw, json)
Hash identifier:          /5ZnjDo2uinC9TTjfx0reoiz9f4sCWczTxGAg/U2xq4=
Subject key identifier:   B7:61:D3:E4:E7:D6:8C:BA:EA:5D:0F:32:1D:01:62:CB:1C:80:64:56
Certificate issuer:       /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
Certificate serial:       03AF63818EF04893B502651A3E35E499740EBB3C
Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230372e302f32342d3234203d3e203538333937.roa
Signing time:             Fri 08 Nov 2024 22:00:02 +0000
ROA not before:           Fri 08 Nov 2024 21:55:02 +0000
ROA not after:            Fri 07 Nov 2025 22:00:02 +0000
asID:                     58397
IP address blocks:        103.41.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl
                          rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:af:63:81:8e:f0:48:93:b5:02:65:1a:3e:35:e4:99:74:0e:bb:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
        Validity
            Not Before: Nov  8 21:55:02 2024 GMT
            Not After : Nov  7 22:00:02 2025 GMT
        Subject: CN=B761D3E4E7D68CBAEA5D0F321D0162CB1C806456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:0c:08:b2:6c:fd:5f:a7:89:dc:51:10:6f:
                    00:4e:1b:7d:40:58:9d:f1:c2:6d:ae:5c:9a:ba:9e:
                    df:7c:92:b8:c6:24:b8:98:46:d0:e6:58:83:f2:e1:
                    40:31:a1:b3:f5:d3:83:9c:02:39:39:12:f6:68:d7:
                    ee:c5:a3:3f:e9:d3:25:57:50:22:0e:af:70:fa:03:
                    73:9d:74:f8:b5:d6:fe:51:db:be:f1:c7:dc:10:3e:
                    f2:30:3a:0e:b4:17:ec:54:45:29:08:fe:90:57:b5:
                    5d:f4:30:d9:96:5e:1d:41:24:e6:bc:70:53:11:e4:
                    d5:e3:61:bf:be:d3:a9:19:a0:49:88:18:1a:79:d0:
                    dc:1b:31:ca:8d:ef:1e:0a:b2:72:ca:b8:28:4d:19:
                    3c:ed:cf:75:fd:7c:e2:e9:55:bc:c5:1b:cf:a0:43:
                    9b:17:b0:e4:cf:21:ca:a3:62:91:24:8c:ab:ef:86:
                    95:f7:59:b6:37:b7:55:0d:7a:cb:b6:2b:24:f1:21:
                    78:a3:01:02:04:9c:e5:14:8c:76:ba:6c:76:96:71:
                    45:d2:02:de:b3:8a:6f:15:05:d0:bc:7d:29:78:ed:
                    90:06:79:1a:7d:54:57:94:95:71:a4:dd:17:90:66:
                    73:05:22:58:e2:65:1f:3f:ce:4e:e1:6e:0d:d8:a7:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:61:D3:E4:E7:D6:8C:BA:EA:5D:0F:32:1D:01:62:CB:1C:80:64:56
            X509v3 Authority Key Identifier:
                keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230372e302f32342d3234203d3e203538333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:3f:d5:81:3b:ca:90:22:a4:ce:fc:4d:f8:4b:48:04:6a:2a:
         e3:8d:de:e3:54:10:27:d1:50:29:fe:99:ba:0a:e7:b5:87:c6:
         d2:27:78:94:c3:47:2c:e2:0b:75:be:25:c6:cb:f5:a1:c4:ec:
         14:a2:d8:80:d9:93:f1:80:b8:7b:0a:da:ec:3d:95:d7:a8:13:
         97:2e:cf:dc:a2:44:45:f6:44:d9:f0:4b:5b:76:e3:ef:60:41:
         48:2c:11:9b:30:da:86:9a:86:d5:5f:f9:24:7a:4a:44:62:29:
         ae:bd:d6:23:23:cc:37:ef:e8:ed:dd:d9:3d:ad:61:1c:3a:ad:
         3e:2d:7f:cf:46:bd:fa:9a:6f:2b:27:55:19:d3:a4:e7:01:ff:
         00:eb:3f:cd:6e:c5:3d:6a:c2:76:b9:0f:f9:b1:3b:8c:f4:62:
         5f:1d:5b:8a:28:d3:c2:8f:99:47:a8:c2:ea:fe:f3:3a:d1:30:
         16:69:a4:63:48:f2:28:89:fa:78:96:8c:c7:92:93:02:6a:f5:
         b2:26:f4:b1:cb:99:78:0a:97:52:60:7f:5b:02:aa:c5:c7:55:
         09:77:cb:ca:70:a2:23:c1:29:99:18:98:d7:4d:9f:da:39:4d:
         e8:8c:05:f8:f4:e9:ed:36:ba:0d:ab:fc:84:7c:d9:c1:1f:7d:
         e7:42:a0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:01 2024 by rpki-client on console-ams.rpki-client.org