Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa
File:                     3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (raw, json)
Hash identifier:          qq/bBbe3IiCxD990Ap9csNsNIb9hOsP2lHF9VR4M/LM=
Subject key identifier:   39:C2:27:59:21:A0:B1:4A:1C:A9:B4:7C:FF:AC:B0:25:1F:BD:AE:89
Certificate issuer:       /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9
Certificate serial:       0E71BCBB46C565873769792A24068741A979FE31
Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa
Signing time:             Tue 30 Jul 2024 10:00:02 +0000
ROA not before:           Tue 30 Jul 2024 09:55:02 +0000
ROA not after:            Tue 29 Jul 2025 10:00:02 +0000
asID:                     64024
IP address blocks:        103.210.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl
                          rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 09:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:71:bc:bb:46:c5:65:87:37:69:79:2a:24:06:87:41:a9:79:fe:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9
        Validity
            Not Before: Jul 30 09:55:02 2024 GMT
            Not After : Jul 29 10:00:02 2025 GMT
        Subject: CN=39C2275921A0B14A1CA9B47CFFACB0251FBDAE89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:5b:c0:44:f2:e4:31:57:e5:db:2a:c9:d1:
                    3c:6b:99:48:b5:9c:54:bc:fc:b2:7c:34:d2:1d:dc:
                    c9:92:46:18:80:9e:68:6d:cd:45:0c:e5:87:51:60:
                    03:ee:4b:24:30:6d:ff:bc:d0:ff:2f:50:31:11:cb:
                    38:d8:f9:56:5a:42:e8:44:0f:f3:f3:6a:82:ce:a1:
                    fb:e5:d0:c6:21:fe:ea:ce:c3:78:33:c1:a8:52:9d:
                    a3:cb:bd:f6:4b:c3:16:68:76:36:81:82:02:f2:8f:
                    cc:e5:cc:e1:2c:0a:80:e8:7a:29:30:94:46:dd:a0:
                    24:c8:72:8a:0c:3a:1f:0b:55:e8:9a:b3:e2:24:0e:
                    42:3c:a3:b8:a8:23:e1:a4:ba:d3:54:f3:ab:3b:0f:
                    c2:a0:08:ac:fb:c0:c9:90:5a:fa:87:6d:60:ab:5a:
                    93:eb:4a:18:dc:77:93:82:24:59:24:92:e9:b8:e1:
                    31:93:28:da:25:78:d1:0b:b5:68:2a:2e:42:b4:4f:
                    a3:d6:55:d3:35:a0:77:35:46:37:ff:7c:65:6a:b7:
                    51:94:8e:b3:92:1c:dd:9b:03:82:98:6d:fd:3b:5b:
                    8a:1a:bd:f6:c7:00:59:31:46:c6:b4:57:84:62:4e:
                    25:1d:0c:2a:b3:97:12:e8:8d:4f:d9:23:b3:63:46:
                    62:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C2:27:59:21:A0:B1:4A:1C:A9:B4:7C:FF:AC:B0:25:1F:BD:AE:89
            X509v3 Authority Key Identifier:
                keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:83:a2:77:bc:16:f7:a7:e3:32:f8:13:59:a6:a0:78:b0:b4:
         e8:d6:36:ef:dc:de:98:2c:13:0d:22:e7:ba:67:57:0e:82:42:
         16:b3:a9:f1:4a:d3:e5:3c:25:f6:ea:ca:ea:4c:3e:08:21:ea:
         dd:66:66:22:e3:bf:f1:01:27:d9:e5:95:bf:d2:0b:90:cd:ae:
         e4:3a:9e:d3:4d:fc:d3:ec:2e:5b:f8:af:e2:fa:81:02:fa:88:
         be:18:3f:43:5e:fd:1a:b7:66:48:66:34:c3:2d:c8:a2:ca:a5:
         cb:a2:d2:f6:24:86:fa:42:9d:df:4b:5f:6d:f3:d0:c5:60:7c:
         13:6e:66:9c:44:1a:de:11:59:23:5a:54:48:c7:16:4d:c3:2f:
         c7:3e:9c:7d:df:b4:9c:70:6d:0d:7c:ae:1c:2c:93:cb:07:90:
         db:dc:7f:7b:54:00:94:d2:18:23:e4:e6:a0:97:33:70:2e:2e:
         6e:b8:9a:44:6b:50:90:8c:a2:0e:08:ac:b5:0f:e2:d0:ad:8d:
         00:6a:63:1b:55:4a:0b:96:3a:bb:7d:d0:a0:e6:67:37:42:71:
         18:fa:19:ed:5a:7a:0c:75:40:12:d8:c1:99:00:ec:fd:e2:a8:
         4f:cd:be:c9:fd:5e:3b:bf:3f:a8:00:3d:df:c0:46:96:05:22:
         61:3c:ae:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:03 2024 by rpki-client on console-fra.rpki-client.org