Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa
File:                     3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          piQ+Kt4vXK/vmNsqLp+UmigWTKiGeB35znHHpmbJcwE=
Subject key identifier:   D9:C0:EE:65:1C:42:E7:BE:3A:2F:74:92:E9:63:5C:66:7B:55:24:64
Certificate issuer:       /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB
Certificate serial:       03A7ED92F399ABEFA946768245C88AA7F7676B02
Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa
Signing time:             Thu 01 Aug 2024 16:02:12 +0000
ROA not before:           Thu 01 Aug 2024 15:57:12 +0000
ROA not after:            Thu 31 Jul 2025 16:02:12 +0000
asID:                     9341
IP address blocks:        103.229.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl
                          rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a7:ed:92:f3:99:ab:ef:a9:46:76:82:45:c8:8a:a7:f7:67:6b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB
        Validity
            Not Before: Aug  1 15:57:12 2024 GMT
            Not After : Jul 31 16:02:12 2025 GMT
        Subject: CN=D9C0EE651C42E7BE3A2F7492E9635C667B552464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:00:dd:f0:ee:b9:1b:c9:26:5a:91:5f:75:ba:
                    44:86:e6:d1:de:d5:2f:69:59:17:9a:cb:84:7d:21:
                    8b:ad:4b:de:38:a7:7e:96:01:da:60:82:ed:97:02:
                    5d:24:a5:ec:c1:b1:58:9a:76:ce:e4:27:bb:c2:71:
                    b9:9b:c2:83:f2:4b:f8:fc:3a:63:e1:ed:95:86:a2:
                    d9:be:11:8f:ae:ed:dd:18:8a:c5:cb:f1:4b:05:90:
                    f0:25:e7:54:b1:77:fb:70:2a:1a:fc:d2:33:75:94:
                    f7:b0:a3:02:42:93:02:ba:06:80:10:f6:7c:64:c2:
                    72:96:d8:27:55:a3:b0:d7:6f:3e:a6:28:8a:5c:3d:
                    02:84:4f:a5:b1:eb:f7:d7:96:c5:5c:d6:5e:c4:6b:
                    75:bd:72:f8:69:36:7f:15:f0:99:89:28:fe:e2:75:
                    66:d9:c4:2c:6c:91:22:88:a9:5b:40:7a:57:17:9b:
                    af:fa:cb:a8:2f:2e:fc:14:e5:5b:fd:c4:fd:88:d6:
                    65:60:71:f4:19:10:2d:e9:d6:3b:d7:7e:ca:81:fd:
                    5b:11:db:33:42:71:e5:2f:3f:47:7f:5a:c4:e7:9d:
                    42:c1:c1:6c:02:b0:71:b3:97:22:d9:84:86:3d:20:
                    9b:5b:63:3b:55:c0:a4:c6:3f:1a:23:0f:39:a5:d9:
                    41:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C0:EE:65:1C:42:E7:BE:3A:2F:74:92:E9:63:5C:66:7B:55:24:64
            X509v3 Authority Key Identifier:
                keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:de:66:6c:90:a3:7e:16:50:84:ac:d2:de:7d:e2:89:79:77:
         75:e0:93:09:1f:8b:c9:fe:2c:0c:16:08:27:33:28:8c:f3:55:
         65:42:b5:b0:36:6c:5c:ef:99:02:26:e1:92:19:32:bc:3b:41:
         8d:c2:74:44:a9:d7:9e:c0:d7:9e:9a:87:68:62:cf:5a:d0:f4:
         8b:b3:f4:53:67:48:2f:d4:cc:4f:fe:4d:b6:1b:71:46:66:96:
         8d:bb:33:58:bb:38:f0:6d:2e:ef:97:89:7b:ee:5b:7c:8f:e9:
         a2:aa:61:3e:cc:45:01:30:67:a2:88:af:be:7a:ef:a8:d5:8c:
         ec:f6:a9:b1:70:04:2f:39:65:19:38:17:80:45:11:5f:7d:89:
         bc:8f:71:1d:c0:5d:69:b4:6d:6e:1b:1e:c9:1b:52:8d:62:0a:
         bd:88:6a:5d:0c:9d:e6:5d:cf:1a:37:89:90:17:d0:c9:16:56:
         3f:c8:71:3a:a4:62:a3:90:31:2e:8d:fe:0e:24:5f:72:33:28:
         d9:63:ae:2d:9f:cd:fd:64:96:8f:bb:51:99:e5:db:9d:52:5b:
         b9:e8:f6:21:ae:83:5f:cb:b2:6d:34:ac:a3:30:54:04:a6:9b:
         aa:0c:77:5b:9e:60:c1:d3:5b:01:ec:70:af:c0:f5:cc:ad:3f:
         67:cb:d7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org