Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa
File:                     3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (raw, json)
Hash identifier:          04xBjtc/vZuiiRaG8+uIvcHQrSW+6SjnVSRRHd3NWHQ=
Subject key identifier:   52:9F:A7:4B:9A:4F:06:FA:49:62:9D:B1:F2:9A:A6:70:12:B5:C2:B5
Certificate issuer:       /CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26
Certificate serial:       0E648B13A80AA14360D0AA481B14E035AC1FF259
Authority key identifier: EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa
Signing time:             Sat 25 Nov 2023 08:00:01 +0000
ROA not before:           Sat 25 Nov 2023 07:55:01 +0000
ROA not after:            Sat 23 Nov 2024 08:00:01 +0000
asID:                     137342
IP address blocks:        103.219.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl
                          rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 17:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:64:8b:13:a8:0a:a1:43:60:d0:aa:48:1b:14:e0:35:ac:1f:f2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26
        Validity
            Not Before: Nov 25 07:55:01 2023 GMT
            Not After : Nov 23 08:00:01 2024 GMT
        Subject: CN=529FA74B9A4F06FA49629DB1F29AA67012B5C2B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:16:5e:6d:e7:8b:2f:29:57:4f:b9:50:f2:2c:
                    e6:f2:51:08:49:06:87:fd:42:b5:1a:85:c3:81:71:
                    70:f2:48:07:89:25:87:ea:4f:3f:b8:4e:61:86:a1:
                    d7:d8:23:ec:23:8e:b0:9f:fa:67:5a:31:74:00:77:
                    a3:a7:f6:5d:8c:4c:8f:5c:d9:83:4c:9a:9e:65:d6:
                    f4:c2:87:0b:c8:46:7a:90:1e:c9:76:fb:e0:1a:06:
                    69:0d:39:77:2f:d3:e2:28:91:c2:c5:77:79:b9:7e:
                    c1:ed:61:97:1d:19:86:ce:a2:c5:21:ca:52:80:42:
                    94:d6:04:65:cb:92:4d:d0:eb:11:28:f1:12:6a:de:
                    62:fe:6f:a6:5a:21:84:e8:a3:99:18:bd:b4:fe:13:
                    dd:56:2a:03:ea:3c:97:27:5f:dc:d1:14:0c:fe:20:
                    30:5d:c7:e7:56:65:40:d6:5b:8c:db:04:9f:73:38:
                    63:18:97:a2:7d:61:d2:a6:bd:c4:9d:e3:38:31:e5:
                    5e:da:00:a4:e6:75:64:5a:8e:87:92:88:e2:b1:61:
                    ec:3d:f7:25:d6:a2:05:0b:88:75:31:2a:7d:66:14:
                    32:96:51:c8:08:df:50:dd:d2:4c:b4:78:bf:3a:33:
                    a2:db:e5:8f:f3:21:12:39:ef:7d:3b:46:d5:50:3b:
                    28:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9F:A7:4B:9A:4F:06:FA:49:62:9D:B1:F2:9A:A6:70:12:B5:C2:B5
            X509v3 Authority Key Identifier:
                keyid:EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:3e:8b:e4:0e:7f:ee:6f:84:22:9a:88:2c:16:ed:ba:15:da:
         85:ad:87:ad:f2:a4:ee:77:6f:14:c2:7f:ca:e8:aa:8f:4c:a0:
         d7:26:69:29:5a:c2:fd:22:da:1f:19:6f:b5:3b:f9:bf:7e:f7:
         ce:07:b8:01:c5:75:ec:fc:43:e1:d3:3a:3a:e9:b3:2a:03:89:
         cd:84:7e:22:69:87:08:77:09:fe:7e:bd:12:58:a9:c8:c5:e3:
         18:79:fb:40:fe:ac:6c:36:66:70:08:26:9c:96:32:d4:d4:2c:
         79:c4:1c:fc:fd:d9:05:7e:59:2a:b5:7d:be:45:b5:d4:21:77:
         c6:e0:b7:50:13:fa:e3:ce:4b:1c:d0:83:46:c7:20:34:62:46:
         d5:b4:b1:d7:2a:14:58:71:5d:63:d3:0d:82:22:93:70:cd:08:
         42:ee:9e:52:d7:56:04:c4:7d:47:ce:f8:0c:d5:47:61:2d:28:
         fe:d3:69:5e:11:4f:dd:aa:67:21:d2:8f:18:ac:4e:cf:ac:47:
         03:8f:d2:f4:c2:18:7b:3f:a9:02:78:9d:42:c7:96:3b:b0:af:
         d9:ff:3f:d6:4f:bb:0e:87:42:fc:51:7c:1d:e7:2d:82:c2:31:
         c7:44:cd:df:94:09:ef:32:7b:2b:2b:4c:e2:71:0e:57:2f:b7:
         ff:35:14:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 17:43:04 2024 by rpki-client on console-fra.rpki-client.org