Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32322d3232203d3e20313337333239.roa
File:                     3130332e3130362e3231362e302f32322d3232203d3e20313337333239.roa (raw, json)
Hash identifier:          BFD2jW//jRL90aGYu5FEtnB5QCD3NJh+6CidBwGgCaE=
Subject key identifier:   AE:55:18:A0:A0:B5:8D:B7:8F:DD:D6:32:8C:2B:DF:34:BE:16:E0:33
Certificate issuer:       /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial:       589DDFC12001970BAA4571330AABE74451F4CEE1
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32322d3232203d3e20313337333239.roa
Signing time:             Wed 04 Sep 2024 18:00:02 +0000
ROA not before:           Wed 04 Sep 2024 17:55:02 +0000
ROA not after:            Wed 03 Sep 2025 18:00:02 +0000
asID:                     137329
IP address blocks:        103.106.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
                          rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:9d:df:c1:20:01:97:0b:aa:45:71:33:0a:ab:e7:44:51:f4:ce:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
        Validity
            Not Before: Sep  4 17:55:02 2024 GMT
            Not After : Sep  3 18:00:02 2025 GMT
        Subject: CN=AE5518A0A0B58DB78FDDD6328C2BDF34BE16E033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9b:0f:6a:a3:2e:e9:e7:c0:3c:46:cc:21:10:
                    6e:c1:dd:d0:25:f8:3f:67:2b:5c:81:0d:55:d8:46:
                    36:6a:92:46:80:6f:d0:31:62:d6:5f:d7:5b:5a:5c:
                    58:42:53:92:c5:ae:c6:b4:a1:82:8e:b7:a1:f9:f9:
                    ea:c5:2c:94:e9:c1:ae:67:66:d9:e6:24:8f:51:01:
                    1f:d9:08:c0:67:96:fe:e8:35:9f:57:03:1c:79:12:
                    43:63:b0:c3:b7:53:30:06:f6:0c:f9:48:be:8b:1f:
                    2f:75:03:45:b0:42:d6:af:a9:86:bd:bd:fc:39:e4:
                    39:8d:44:80:ae:7e:a1:a5:97:3b:ec:e9:3e:25:fd:
                    d2:88:fc:89:6c:ec:fc:e0:21:a6:78:f9:d4:7c:da:
                    31:02:bf:f7:3f:46:d2:f9:f2:d1:27:e3:1e:bf:7a:
                    5f:44:f0:3f:0a:f1:c7:49:9c:d3:6d:8f:74:2f:32:
                    73:e3:9a:63:80:ac:79:c0:3b:90:b9:99:02:a0:0c:
                    d4:cf:28:c4:c4:88:27:f2:31:73:c6:20:9d:c7:f6:
                    52:3e:f1:41:d6:1d:8c:10:93:84:18:40:ef:6a:0a:
                    69:54:31:84:cb:7e:c8:bb:2b:15:56:70:1d:b0:dc:
                    b7:a5:bc:e2:43:76:9f:5f:8d:72:d6:4b:25:a1:30:
                    66:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:55:18:A0:A0:B5:8D:B7:8F:DD:D6:32:8C:2B:DF:34:BE:16:E0:33
            X509v3 Authority Key Identifier:
                keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32322d3232203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:c9:c5:b1:b9:fe:bb:11:61:b4:dc:bc:84:f7:48:fe:cf:54:
         a2:1e:2a:62:f2:50:2a:fd:23:ce:68:03:16:47:e0:25:ae:72:
         8b:17:87:92:b6:19:2e:48:a4:38:ae:c1:4a:80:86:ca:c1:c6:
         06:15:c9:a2:8b:34:11:99:ea:19:a8:db:36:80:68:cf:e8:58:
         2d:fa:86:d5:ba:8f:d8:85:d8:8f:39:43:2b:d3:06:c1:6a:53:
         50:68:f0:fa:1b:d1:42:6e:d6:c1:fc:ae:07:16:fa:5c:45:6c:
         6d:4c:fc:e4:38:26:87:2e:2f:36:3d:36:f8:e2:84:21:1f:44:
         bb:01:be:d8:6e:7a:73:12:4c:d5:07:af:ec:25:e3:e2:74:4d:
         7f:a9:8c:65:df:22:14:f3:2d:ff:ff:a7:70:af:9b:43:72:05:
         3c:2a:81:74:66:8f:f6:cf:64:45:d6:b2:3a:58:93:5f:6e:36:
         02:e8:10:3e:f4:2b:f4:e2:dd:f5:27:77:18:72:de:a3:d9:65:
         e1:f6:99:cf:e0:75:5c:8e:ec:23:a3:b4:13:00:9f:66:cf:20:
         8e:35:8f:1b:6c:7f:37:e4:b6:ae:a6:79:ea:c1:b9:7f:7d:f7:
         48:ea:cb:1c:cc:bb:fd:cf:89:18:c5:5b:7f:65:1a:f9:81:39:
         0e:0b:24:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:58 2024 by rpki-client on console-fra.rpki-client.org