Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/3130332e32392e3137312e302f32342d3234203d3e203538333738.roa
File:                     3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (raw, json)
Hash identifier:          QR99bpkNi6RTuao/nP6wZnGnAu8oh/o8GpHp0qj3Yxs=
Subject key identifier:   1D:9D:F1:50:A0:27:B9:D0:36:49:EA:43:83:AA:F9:9A:14:4C:6B:6B
Certificate issuer:       /CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11
Certificate serial:       118DF14D64989C9C5A29FD90B45E622C51321317
Authority key identifier: 89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/3130332e32392e3137312e302f32342d3234203d3e203538333738.roa
Signing time:             Fri 07 Jun 2024 04:38:52 +0000
ROA not before:           Fri 07 Jun 2024 04:33:52 +0000
ROA not after:            Fri 06 Jun 2025 04:38:52 +0000
asID:                     58378
IP address blocks:        103.29.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl
                          rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8d:f1:4d:64:98:9c:9c:5a:29:fd:90:b4:5e:62:2c:51:32:13:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11
        Validity
            Not Before: Jun  7 04:33:52 2024 GMT
            Not After : Jun  6 04:38:52 2025 GMT
        Subject: CN=1D9DF150A027B9D03649EA4383AAF99A144C6B6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:57:27:6a:ee:59:0d:81:82:11:5b:8e:f5:f7:
                    57:bc:37:5c:db:68:7c:80:ac:02:77:59:c9:e9:2d:
                    6f:9c:5c:77:d0:75:a3:19:10:41:e0:2f:02:8f:40:
                    4e:e8:93:3f:e5:5f:fc:c0:46:70:50:d8:c8:b7:b8:
                    70:12:ef:2d:eb:0a:14:1f:de:c8:e8:f9:40:69:d1:
                    cb:c3:c2:ef:06:80:cb:43:73:4f:ce:de:81:56:f6:
                    60:54:66:0a:5e:ea:28:f0:d1:92:75:93:d7:12:fb:
                    1a:3c:91:16:c7:b1:84:de:9f:dd:6d:f5:42:67:0d:
                    7e:f7:ed:dc:cb:52:47:9d:b7:88:bb:ae:81:66:3e:
                    d9:5f:c2:7d:c6:54:c2:52:37:65:fd:bc:51:78:6c:
                    39:88:1c:45:3a:aa:45:25:94:ba:ab:4d:4b:d6:a9:
                    40:70:d0:a7:3c:72:31:ff:b3:63:4a:90:bd:5e:57:
                    e1:3d:a2:ff:cf:b8:9f:40:bd:9a:42:a0:c0:b4:aa:
                    95:c7:05:40:0f:66:1e:21:1d:17:1f:1b:e4:ef:45:
                    91:f5:e3:ee:a5:10:de:2e:fd:22:33:2f:7b:46:a3:
                    0c:21:93:22:78:05:34:21:5c:28:67:c7:bb:0a:d1:
                    8d:93:6f:c6:41:df:6a:90:fe:e6:9b:80:0a:6a:76:
                    cd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9D:F1:50:A0:27:B9:D0:36:49:EA:43:83:AA:F9:9A:14:4C:6B:6B
            X509v3 Authority Key Identifier:
                keyid:89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/3130332e32392e3137312e302f32342d3234203d3e203538333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:95:32:86:81:32:e5:00:12:69:a5:92:44:fc:ad:dd:89:42:
         db:b7:ca:34:1e:bb:35:17:07:35:f3:81:9b:54:d5:88:9a:ef:
         b0:88:02:8a:5a:c6:cb:8d:0c:c8:1c:28:db:76:ac:5b:10:13:
         5b:cc:39:85:6a:8a:a3:27:21:48:b4:18:89:32:93:86:84:40:
         b9:85:1e:6e:54:72:03:b7:f1:da:a8:5c:6c:9d:ff:5d:28:8b:
         13:87:78:bc:11:5b:d0:4c:9e:56:8c:45:22:4b:ce:72:ed:a4:
         cf:9b:fd:d1:1a:5f:f9:43:76:a3:4c:df:7a:35:86:5f:9b:8e:
         68:46:01:6e:0b:7b:de:b4:4e:13:ec:9f:5c:7c:23:03:54:78:
         3f:42:d9:2d:a6:97:2e:a2:dd:16:a3:d7:76:70:fd:df:0c:37:
         48:30:8b:79:12:62:33:02:05:75:8f:f2:16:af:90:07:cd:5c:
         06:ed:93:6b:c4:0d:7f:54:9e:4c:28:7c:cd:39:2c:79:d2:33:
         c0:b2:99:0f:5e:22:70:7a:e8:ba:b7:36:89:1f:d5:99:07:3b:
         2b:78:01:d5:70:31:e7:71:03:a4:af:e4:7f:95:2c:98:ee:a8:
         52:b2:d1:dc:76:a5:f5:c2:73:d2:9a:d3:95:55:14:97:8e:07:
         3a:7b:9c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:27 2024 by rpki-client on console-ams.rpki-client.org