Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231372e302f32342d3234203d3e20313337333239.roa
File:                     3130332e3130362e3231372e302f32342d3234203d3e20313337333239.roa (raw, json)
Hash identifier:          Krq9WF53H3XZs2/ue8YsWLU+Fw7IsEdn4zF3HAMTLX4=
Subject key identifier:   32:63:29:0C:BE:B8:7F:40:4B:5D:0B:27:B2:29:0C:66:27:0B:2E:0F
Certificate issuer:       /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial:       6883BA843D63150D2E935E0E1918742D5F48F0C6
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231372e302f32342d3234203d3e20313337333239.roa
Signing time:             Wed 04 Sep 2024 18:00:02 +0000
ROA not before:           Wed 04 Sep 2024 17:55:02 +0000
ROA not after:            Wed 03 Sep 2025 18:00:02 +0000
asID:                     137329
IP address blocks:        103.106.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
                          rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:83:ba:84:3d:63:15:0d:2e:93:5e:0e:19:18:74:2d:5f:48:f0:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
        Validity
            Not Before: Sep  4 17:55:02 2024 GMT
            Not After : Sep  3 18:00:02 2025 GMT
        Subject: CN=3263290CBEB87F404B5D0B27B2290C66270B2E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:80:5c:73:1a:09:72:71:c8:12:11:c5:be:
                    ff:8f:07:20:c4:f2:8f:a4:e9:e6:41:e8:57:d4:80:
                    f3:f7:62:da:64:c7:61:29:b0:b1:d6:40:d2:dd:a2:
                    1b:8b:95:9b:79:ea:70:7b:83:1d:9c:e4:25:b0:11:
                    94:59:df:8b:e9:36:a5:0d:8e:3f:ec:de:2e:b3:a8:
                    a8:20:f4:6f:d4:40:06:78:c1:28:f4:30:d7:eb:b0:
                    9e:23:3f:bf:9e:64:89:a9:78:47:ce:0c:7b:b6:26:
                    db:d2:a4:a0:aa:56:13:b3:ac:67:8a:b9:51:bf:da:
                    db:53:45:e3:0e:52:8f:60:0a:7e:de:c5:fb:9e:a5:
                    f8:33:af:65:6a:9c:0f:55:b6:40:8e:9f:64:bd:53:
                    b1:f6:aa:9c:f5:7a:50:92:70:42:40:ac:5b:28:b5:
                    d5:83:c6:e3:e9:fe:68:e7:8b:92:c9:52:e5:69:94:
                    fb:ec:37:d1:2f:ff:be:b0:bd:c3:b8:cf:5c:b6:27:
                    1f:a8:4c:de:e6:96:cf:41:93:87:16:7a:0c:74:63:
                    01:fe:54:62:c7:01:e8:81:54:a7:25:6a:68:51:0a:
                    ce:6a:63:fe:47:a2:21:de:27:13:81:7f:8b:91:6f:
                    35:08:f4:c2:0b:60:db:0f:4a:16:40:bb:12:40:ac:
                    d6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:63:29:0C:BE:B8:7F:40:4B:5D:0B:27:B2:29:0C:66:27:0B:2E:0F
            X509v3 Authority Key Identifier:
                keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231372e302f32342d3234203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:df:08:71:02:14:28:a0:fd:49:3a:26:1c:45:e6:e0:3b:b7:
         ce:37:e0:6a:36:d6:d0:bd:80:7d:61:29:ac:27:4f:00:ba:d3:
         37:31:be:3a:46:80:88:d8:6f:0a:e2:bb:f3:47:65:60:bc:5a:
         ff:93:3b:9f:46:08:45:52:2f:e5:22:f3:c6:12:5b:df:4b:c0:
         f6:5e:cf:c8:eb:c2:18:29:40:e8:a0:87:c8:2a:89:9e:ae:f0:
         f5:64:67:18:0a:71:58:88:a2:4b:cb:af:f2:d9:40:b8:a0:59:
         05:a3:96:30:ba:73:29:59:9f:9e:f3:e9:aa:16:c4:46:e2:97:
         35:d8:f2:04:f6:e7:df:3f:fd:28:e9:60:a6:1b:c6:3a:88:a5:
         8e:bc:14:9c:60:fa:ec:e3:d5:1f:cb:8a:e3:17:c4:df:32:6d:
         4c:06:ba:66:fe:6b:9b:cb:64:6b:17:ad:0b:49:ef:70:f4:7e:
         79:a1:db:f8:7d:11:a8:45:9a:80:b0:e5:b3:85:47:0b:b9:bd:
         86:14:ff:92:39:0b:de:54:9d:38:29:61:26:88:fd:dd:8d:95:
         28:bf:2a:c5:95:6a:28:79:93:65:eb:51:ce:c2:33:d2:42:4f:
         35:4d:6b:e6:60:42:ad:b1:78:73:f8:88:ae:36:38:10:39:a8:
         86:16:f8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:58 2024 by rpki-client on console-fra.rpki-client.org