Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/3130332e3130352e382e302f32342d3234203d3e20313530393339.roa
File:                     3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (raw, json)
Hash identifier:          2aCyKX1iBxnyY9EZhM3M0omFNolyDyS7e4AnP91bc1s=
Subject key identifier:   56:DD:4C:9F:1C:37:12:2A:18:17:FC:64:D6:38:1B:95:0C:98:5B:B2
Certificate issuer:       /CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98
Certificate serial:       1680E743D175A141501133BA8609EFC46802A57B
Authority key identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/3130332e3130352e382e302f32342d3234203d3e20313530393339.roa
Signing time:             Tue 18 Jun 2024 10:00:01 +0000
ROA not before:           Tue 18 Jun 2024 09:55:01 +0000
ROA not after:            Tue 17 Jun 2025 10:00:01 +0000
asID:                     150939
IP address blocks:        103.105.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl
                          rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:80:e7:43:d1:75:a1:41:50:11:33:ba:86:09:ef:c4:68:02:a5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98
        Validity
            Not Before: Jun 18 09:55:01 2024 GMT
            Not After : Jun 17 10:00:01 2025 GMT
        Subject: CN=56DD4C9F1C37122A1817FC64D6381B950C985BB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a8:ab:4f:6c:f0:eb:a1:d8:69:8a:d3:15:5a:
                    5d:df:87:27:27:a8:08:b9:51:fb:a8:0b:48:00:4d:
                    87:2f:77:f3:39:c0:a2:ea:06:34:2c:1c:08:14:b1:
                    b6:58:f4:b6:99:0a:dc:e6:2f:9a:cb:97:10:21:52:
                    3e:b6:63:5a:17:79:90:f2:9b:a5:ad:97:3f:89:a1:
                    dd:90:70:b2:78:86:05:c9:c6:61:27:20:48:54:6a:
                    78:2a:9e:65:29:21:9e:95:7a:21:f4:b8:76:cf:ec:
                    5a:ca:d6:87:f6:ee:9f:9e:e7:d7:8f:ae:df:eb:79:
                    2a:b2:20:53:32:7d:6d:ed:1a:4d:a9:1d:a0:83:f5:
                    ae:a6:d9:59:32:e7:33:dd:d0:69:02:73:fe:72:be:
                    83:48:20:73:5a:2c:3f:b9:46:40:a0:c4:80:20:33:
                    30:44:a4:a5:e4:a2:a7:64:e5:33:1a:17:70:3f:c8:
                    5c:da:de:8a:f8:65:fb:c4:09:ed:af:67:a8:df:0d:
                    d0:3b:db:2f:4e:04:bb:57:50:a7:de:69:4e:a1:d1:
                    72:5a:c5:b1:17:2f:04:55:81:c5:cc:b6:9e:91:e2:
                    2b:35:c5:4c:e5:3f:35:13:75:2c:e9:c3:2b:04:86:
                    e6:78:dd:e6:eb:ff:5f:09:0c:ce:cd:8e:56:89:90:
                    78:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DD:4C:9F:1C:37:12:2A:18:17:FC:64:D6:38:1B:95:0C:98:5B:B2
            X509v3 Authority Key Identifier:
                keyid:F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/3130332e3130352e382e302f32342d3234203d3e20313530393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:b8:4d:c3:a6:b7:51:e0:b3:f8:84:ef:03:77:df:46:36:02:
         d4:f7:09:72:09:dd:b5:38:f5:b5:bb:94:b2:c5:51:52:39:b8:
         2c:fd:c2:fd:3d:e2:c6:53:ea:97:68:e4:2b:ae:88:47:e7:cb:
         f7:b0:6e:7b:73:7c:46:32:98:ac:25:81:ff:01:60:54:b8:ce:
         49:de:97:ca:16:f0:93:ec:0b:af:a6:db:2b:db:1c:06:ef:83:
         29:70:10:32:39:93:f5:bc:8f:d1:15:4f:de:33:92:2a:5a:89:
         3f:61:88:d6:0a:15:c0:af:5d:ff:6a:55:79:29:71:37:71:40:
         94:b2:39:64:06:ad:f6:c7:52:f9:92:6d:5a:7d:7c:df:af:ef:
         51:66:38:23:5a:0d:67:03:b8:60:09:3a:a7:93:cf:d9:62:87:
         ee:e5:8d:aa:96:eb:9b:df:b6:0a:c0:d9:f0:ba:17:15:eb:8e:
         66:e2:7d:7f:61:75:e2:19:8d:6e:ea:52:8e:22:75:fb:3c:72:
         f9:1f:0a:a8:4f:c1:c4:36:0a:55:53:a7:b1:4f:ea:06:c8:91:
         ef:29:bf:5b:f7:8b:96:83:d0:18:53:4a:dd:1f:02:5b:38:48:
         7c:6a:69:63:59:93:86:ab:c7:60:59:86:bc:a4:a9:45:07:65:
         16:e3:34:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:45 2024 by rpki-client on console-fra.rpki-client.org