Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/3130332e3130352e382e302f32342d3234203d3e20313530393339.roa
File:                     3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (raw, json)
Hash identifier:          Ngf97b6eVOOghIrKYoHd1u514Tn6G7ERIKEUPXQVPJE=
Subject key identifier:   3F:4E:9D:8B:5A:56:42:84:60:5C:7C:EC:28:63:30:F3:92:2C:AD:79
Certificate issuer:       /CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98
Certificate serial:       18B22C19E090F81C30B05AEFB0B114ADE15CC531
Authority key identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/3130332e3130352e382e302f32342d3234203d3e20313530393339.roa
Signing time:             Tue 18 Jul 2023 09:50:51 +0000
ROA not before:           Tue 18 Jul 2023 09:45:51 +0000
ROA not after:            Tue 16 Jul 2024 09:50:51 +0000
asID:                     150939
IP address blocks:        103.105.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl
                          rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b2:2c:19:e0:90:f8:1c:30:b0:5a:ef:b0:b1:14:ad:e1:5c:c5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98
        Validity
            Not Before: Jul 18 09:45:51 2023 GMT
            Not After : Jul 16 09:50:51 2024 GMT
        Subject: CN=3F4E9D8B5A564284605C7CEC286330F3922CAD79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4b:a0:54:10:9f:e1:c8:0a:d4:85:09:af:7c:
                    a8:5b:f4:e0:95:83:90:8f:8a:08:86:3e:96:b6:18:
                    1a:92:f4:9d:e0:4c:7b:68:45:14:b3:fb:09:0c:92:
                    60:45:00:d2:8e:dc:88:6f:aa:50:6b:4b:42:46:94:
                    9e:3f:8b:2e:a1:eb:3a:e5:b7:5a:47:7f:75:3b:ee:
                    ad:96:51:ac:eb:4c:6b:94:e1:a4:29:1f:4e:f6:dc:
                    c5:49:07:9a:06:62:a6:43:5b:08:f0:ad:f2:fd:42:
                    c1:f8:15:68:3f:d2:74:f1:31:ba:13:c1:71:ec:2f:
                    a4:ba:9a:bb:e9:e4:88:c6:27:64:9f:9d:e4:a6:f5:
                    f5:1b:05:1b:00:24:b3:37:0b:a6:66:4d:2e:29:d6:
                    de:bc:3e:42:47:a4:c5:2c:95:81:71:35:2b:a5:fe:
                    55:b6:2a:0b:c4:03:35:ce:14:3d:d1:f4:7f:e1:1d:
                    b1:6c:bb:a1:e2:f0:60:b3:ff:96:b6:7d:47:8d:76:
                    1d:65:ae:d8:09:d1:60:9f:6c:a5:e0:11:5e:be:8b:
                    b8:69:dd:50:14:22:71:4e:69:94:55:d1:eb:e0:db:
                    24:c2:5b:ca:fb:92:45:33:8d:d8:c0:ad:13:08:34:
                    b0:fa:4e:05:e8:42:ad:d6:f5:34:06:7c:f1:f8:2a:
                    7b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4E:9D:8B:5A:56:42:84:60:5C:7C:EC:28:63:30:F3:92:2C:AD:79
            X509v3 Authority Key Identifier:
                keyid:F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/3130332e3130352e382e302f32342d3234203d3e20313530393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:3b:e8:19:42:74:96:f2:7d:28:2e:79:0e:e2:b0:d7:47:52:
         59:94:17:a0:03:83:9c:ef:9a:23:2f:55:80:8b:44:e3:4c:0b:
         ae:ca:3c:e4:2d:6d:71:0a:59:e0:a8:73:4e:0a:6b:2c:c1:be:
         0d:b6:a6:c1:ee:81:16:b9:2d:41:78:94:21:21:d2:27:4a:10:
         ab:a9:be:54:5f:d9:1b:c0:21:88:3c:52:ec:a2:d0:1b:a6:f3:
         15:5d:af:6a:b1:50:28:97:39:a2:c8:f2:fa:ab:76:3e:a1:7e:
         82:92:69:44:d9:e9:bd:9b:7b:41:8c:30:b1:b7:61:fc:0d:31:
         aa:56:f7:58:08:4f:a8:8b:c3:54:0e:16:85:d8:42:a6:83:bc:
         b1:ab:4d:4f:9c:da:cc:ab:d0:5f:a5:38:6a:70:0e:10:a7:76:
         5d:7d:9f:20:dc:02:da:be:01:86:7b:e0:0d:51:7f:e5:62:f0:
         70:db:30:47:c3:d4:cc:ac:0e:23:57:dd:1d:ef:6a:bf:de:5d:
         4f:d9:ac:97:23:99:8a:11:0e:b1:53:f0:5c:49:1a:28:8d:e4:
         29:c1:fc:a2:9d:36:e3:5e:16:9a:38:6d:5f:bb:17:97:ab:d2:
         bc:fd:dd:5a:5f:9f:7f:88:14:91:ef:d1:92:dd:37:65:ba:8b:
         64:74:78:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 18:43:44 2024 by rpki-client on console-ams.rpki-client.org