Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa
File:                     3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (raw, json)
Hash identifier:          tDwbS64GJLMjSrxPmtcS9jOCO+Z5cxTCif0yhGzEoUE=
Subject key identifier:   3C:BC:8D:96:1D:F1:28:17:AC:26:BB:23:F9:83:FA:AB:99:C7:4D:83
Certificate issuer:       /CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45
Certificate serial:       76B7A21974903DCAA5D3E92D5FC9B9E42AFA650A
Authority key identifier: 81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa
Signing time:             Mon 01 Jul 2024 01:04:16 +0000
ROA not before:           Mon 01 Jul 2024 00:59:16 +0000
ROA not after:            Mon 30 Jun 2025 01:04:16 +0000
asID:                     24532
IP address blocks:        103.116.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl
                          rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b7:a2:19:74:90:3d:ca:a5:d3:e9:2d:5f:c9:b9:e4:2a:fa:65:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45
        Validity
            Not Before: Jul  1 00:59:16 2024 GMT
            Not After : Jun 30 01:04:16 2025 GMT
        Subject: CN=3CBC8D961DF12817AC26BB23F983FAAB99C74D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4e:8f:37:4b:27:33:b8:a1:83:ad:91:58:c6:
                    44:d0:65:34:57:9e:ac:60:51:42:8f:50:8a:98:ce:
                    86:ca:b5:b4:8b:8d:c7:65:b8:9b:8a:e2:e8:f2:82:
                    39:9c:2a:3b:58:df:d2:ff:eb:06:9f:6c:4a:c4:cf:
                    b2:7e:80:fd:6a:6b:0d:58:fc:0f:2c:d0:a8:9c:53:
                    36:b0:fc:d3:3a:70:78:f4:03:9b:27:29:2c:3e:cb:
                    1d:ed:73:56:90:d4:be:61:1a:79:97:92:e2:07:59:
                    21:df:27:7a:9b:06:cb:08:bf:17:f6:4d:96:6c:03:
                    31:bc:df:7f:70:4f:8c:d4:1e:62:4a:93:58:09:c1:
                    ad:5f:ec:02:5e:35:6b:a1:3d:8e:9c:c5:66:21:4f:
                    09:f3:91:b7:ba:54:10:ec:25:d6:ec:bd:66:a0:3b:
                    0b:19:d3:43:67:b3:84:7f:13:00:bc:9f:bb:38:42:
                    26:d2:4a:a3:17:79:3d:3c:f8:5c:b4:04:28:e6:16:
                    b1:2d:e5:ac:f4:b1:ec:b5:97:b1:39:8a:ad:7a:76:
                    0c:6c:63:82:de:3f:c3:d7:18:77:ed:9c:b6:fd:20:
                    f9:c1:cc:34:90:bb:8b:2c:ee:0e:be:9b:fc:c7:d4:
                    5a:0b:74:69:e8:34:e1:4a:89:6c:1b:ca:67:67:97:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BC:8D:96:1D:F1:28:17:AC:26:BB:23:F9:83:FA:AB:99:C7:4D:83
            X509v3 Authority Key Identifier:
                keyid:81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:ae:a7:32:2f:f2:26:13:47:73:01:de:90:33:5f:bd:c7:39:
         ef:6b:f4:6c:e0:5b:68:52:2d:65:ca:41:9f:82:a2:94:b8:1c:
         da:a0:f0:e7:80:c3:dd:b9:97:76:ec:c3:83:39:cd:6c:66:17:
         5c:e7:99:62:c4:c3:07:40:af:00:03:87:ea:03:4b:81:bd:f6:
         17:aa:3b:b4:53:56:27:67:87:3d:1f:17:19:39:60:73:2b:78:
         b8:f4:1a:ed:cf:fe:09:a9:b3:da:b8:05:ce:ca:bf:5c:c0:8c:
         ec:93:39:77:28:2f:84:30:72:db:b3:ee:05:3b:cd:e0:58:cf:
         07:03:71:9f:f4:ea:a9:57:ca:97:5c:97:f7:e3:e2:15:f0:d1:
         bb:47:06:a2:97:a5:08:48:6c:df:8c:42:7f:f7:88:08:bd:ef:
         d1:e4:32:12:36:6d:9b:d5:cc:f9:29:5b:60:27:c3:fb:0a:aa:
         b9:05:a6:b7:40:88:bb:65:46:ff:c1:ab:7f:3c:52:98:29:90:
         a1:3d:c0:f4:da:a4:dd:f5:6b:80:d8:2f:01:89:9a:7e:f1:b3:
         1d:c1:be:20:72:ce:a3:f2:43:b4:38:96:6c:4f:3c:55:a8:e8:
         69:d7:3c:d7:b4:e2:8a:b0:d9:a8:22:93:c9:f5:95:51:4e:ee:
         3f:df:80:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:43 2024 by rpki-client on console-ams.rpki-client.org