Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa
File:                     3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          l9zJUbcUQzAgBZ+HyXEIEbQ+42jDa7SiCHzZNC1m0V0=
Subject key identifier:   C8:09:0B:4E:2E:64:07:A0:68:AE:A3:5D:7B:F1:F0:44:C9:FD:D0:18
Certificate issuer:       /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB
Certificate serial:       19F6EC4A40798460DDCB989018FEB0F21CA191F8
Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa
Signing time:             Thu 01 Aug 2024 16:02:12 +0000
ROA not before:           Thu 01 Aug 2024 15:57:12 +0000
ROA not after:            Thu 31 Jul 2025 16:02:12 +0000
asID:                     9341
IP address blocks:        103.229.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl
                          rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f6:ec:4a:40:79:84:60:dd:cb:98:90:18:fe:b0:f2:1c:a1:91:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB
        Validity
            Not Before: Aug  1 15:57:12 2024 GMT
            Not After : Jul 31 16:02:12 2025 GMT
        Subject: CN=C8090B4E2E6407A068AEA35D7BF1F044C9FDD018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a6:5b:a7:d9:fa:9a:42:67:7d:26:8e:7c:2f:
                    0c:55:49:fc:ec:a9:bd:e8:cb:b1:63:79:46:3e:7f:
                    4c:88:8c:79:dc:f0:a0:0f:05:db:c9:b1:ef:a2:cf:
                    e8:87:e0:d3:a4:d2:ab:34:2d:8c:70:bc:ae:fa:4a:
                    90:23:78:d1:57:47:e4:99:30:5f:2d:ff:36:72:b4:
                    d8:fb:63:08:38:ce:b2:c8:8d:4e:17:5d:93:47:cd:
                    7a:57:83:0a:d8:bf:33:11:1f:81:4e:e4:12:73:7a:
                    a3:a4:d3:42:2a:7d:19:79:5c:c4:c0:a7:20:35:02:
                    40:a5:16:19:36:0e:4e:c8:6e:7d:77:ef:3e:08:4b:
                    47:92:f7:86:32:73:53:3d:35:36:8a:5f:56:31:ab:
                    f7:f3:2f:be:50:52:26:79:b8:b2:ac:5c:15:f0:ad:
                    ce:32:b7:9f:73:99:2c:54:88:b9:4d:49:28:1b:a8:
                    07:69:2b:05:05:a9:a9:89:8e:dc:27:e0:62:24:4c:
                    c8:91:ee:68:82:da:ac:f5:f0:c1:07:88:c7:8d:8b:
                    2d:06:57:4c:29:4a:46:f7:e2:46:cc:98:76:ab:74:
                    fe:4d:19:53:74:36:12:be:4b:f9:cf:eb:b6:81:ac:
                    fd:29:af:06:42:32:8f:ea:bb:f8:72:db:bf:a0:07:
                    0a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:09:0B:4E:2E:64:07:A0:68:AE:A3:5D:7B:F1:F0:44:C9:FD:D0:18
            X509v3 Authority Key Identifier:
                keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:d1:98:83:26:5e:85:bc:13:bc:c3:49:64:97:5d:03:d1:65:
         3d:1b:73:cc:28:a1:e0:51:69:b7:e0:dc:f0:74:27:ca:d8:59:
         7c:c4:68:95:bf:b3:38:ef:f1:4c:6b:bf:11:ce:0d:63:4d:98:
         90:d6:de:d1:a2:7c:20:96:fa:da:99:0d:45:03:9c:ab:7a:d2:
         02:ff:b6:be:ca:ab:25:41:b7:a8:13:75:65:c4:f0:04:8b:64:
         5f:fc:22:d7:f6:a4:85:c5:04:81:80:a5:ad:9e:c8:62:3d:6e:
         9a:bb:59:21:3f:a6:0a:ea:fe:69:06:b4:e1:4a:19:08:74:65:
         df:55:ed:06:40:be:ab:2e:5d:06:43:79:25:53:04:1f:e6:09:
         94:14:b4:3d:de:b4:c6:5f:84:9d:47:27:93:f9:46:7e:40:47:
         5e:27:78:f3:59:09:21:36:53:28:95:50:72:31:cf:f2:f6:c8:
         16:6c:48:c8:2b:69:b7:58:3d:ad:c6:f0:36:ab:75:13:0e:59:
         35:fd:c0:c0:77:4f:07:ff:36:43:3e:c1:2b:a4:6c:5e:19:6f:
         80:31:39:77:6a:a4:a0:e1:ef:35:29:20:ae:75:aa:84:b6:2c:
         dc:e6:e3:dc:90:de:a3:ab:10:1b:9c:54:4e:4e:36:da:74:fa:
         e9:6e:09:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org