Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa
File:                     3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa (raw, json)
Hash identifier:          UxImY6HpT72HM7/SWrmMW8eGS8ajjlGrhCQ+Yi8RyRE=
Subject key identifier:   BB:65:CF:29:63:6F:C3:03:F7:CC:9F:89:90:B5:F0:0D:C2:46:CE:1A
Certificate issuer:       /CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA
Certificate serial:       42E5F36C20CF9FEC4D53A9747336A937A5FC365C
Authority key identifier: 82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa
Signing time:             Mon 01 Jul 2024 00:02:14 +0000
ROA not before:           Sun 30 Jun 2024 23:57:14 +0000
ROA not after:            Mon 30 Jun 2025 00:02:14 +0000
asID:                     136835
IP address blocks:        103.100.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl
                          rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e5:f3:6c:20:cf:9f:ec:4d:53:a9:74:73:36:a9:37:a5:fc:36:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA
        Validity
            Not Before: Jun 30 23:57:14 2024 GMT
            Not After : Jun 30 00:02:14 2025 GMT
        Subject: CN=BB65CF29636FC303F7CC9F8990B5F00DC246CE1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7b:f6:2f:60:86:40:ca:33:92:d3:7e:84:5e:
                    a6:7b:56:7d:f8:dd:ab:24:f6:8d:37:47:f7:a3:dc:
                    ed:13:f2:6d:a9:69:52:eb:6d:cd:53:00:dc:ae:ae:
                    97:cc:4d:b9:d4:96:57:7a:f9:a2:88:81:82:d7:32:
                    36:68:4d:e7:b9:0d:91:4b:ef:85:56:04:02:38:49:
                    f1:09:1d:00:06:4e:f1:d1:a1:1c:45:75:60:71:1c:
                    ee:77:a3:8f:10:dd:46:42:f0:f2:f2:11:1f:f1:46:
                    54:6b:3a:d6:dc:47:0b:b7:70:86:71:dc:1e:d6:2b:
                    f0:4b:17:05:df:8a:ee:ca:7b:f0:6f:c2:95:b2:f2:
                    02:aa:3e:e2:4e:3b:dd:3f:b5:da:79:f8:2f:0a:4f:
                    63:05:19:f8:06:08:d9:f6:61:4a:5f:d8:4f:ac:18:
                    b9:53:22:e8:a8:bf:09:c5:f4:0e:d7:d9:85:30:c3:
                    59:27:c6:20:5e:4a:04:a6:a2:8a:e4:3d:45:d9:ad:
                    68:ad:6e:e3:73:10:22:f0:af:06:8b:96:73:61:1a:
                    f8:9e:48:42:29:ab:a0:89:63:02:23:b0:db:f6:5e:
                    4c:06:21:16:e2:95:69:b1:55:85:f9:45:d6:21:79:
                    e5:03:e0:3f:7f:4c:27:37:80:72:49:04:a2:c0:fe:
                    dd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:65:CF:29:63:6F:C3:03:F7:CC:9F:89:90:B5:F0:0D:C2:46:CE:1A
            X509v3 Authority Key Identifier:
                keyid:82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:0b:eb:22:0e:99:2b:82:e3:83:ae:45:70:0b:4a:60:66:80:
         a7:79:1c:88:d2:eb:2f:61:ef:f9:b3:bf:fb:10:5e:ac:06:88:
         49:bb:45:2f:8a:c7:f9:a1:f5:3d:40:0e:28:92:b3:69:ae:a4:
         0d:43:f2:f2:ad:98:90:87:78:40:3e:a8:3f:a8:dd:fc:9c:cc:
         23:c7:f0:db:f7:6a:7f:05:03:5e:fb:2b:af:03:77:7b:81:0f:
         52:28:e7:3a:01:4a:f6:8e:8d:3f:fa:8f:c5:6f:fe:1c:c2:d0:
         cd:8e:ea:e6:15:79:91:48:98:38:b6:85:f8:c4:6e:8b:13:f0:
         35:0a:58:2e:69:4b:81:08:f3:62:55:03:ef:b4:e3:85:05:02:
         1f:3c:b0:4d:09:f8:c9:98:50:e7:88:7d:6c:6a:65:65:ba:48:
         dd:24:8e:16:a9:b5:52:a5:49:9e:b3:1b:61:8e:e7:fa:18:c5:
         9f:1b:c6:99:37:48:66:73:4b:70:ab:e2:d1:83:88:65:8b:55:
         cb:48:23:dc:2a:ca:1a:e6:9a:2d:94:3b:28:aa:76:9f:03:9c:
         29:d5:5c:ef:f2:1c:33:07:3d:c2:2d:11:2e:ce:fa:f0:45:c8:
         60:f4:20:5a:65:c0:5c:27:8f:76:29:26:cc:ae:2c:e3:34:b0:
         42:b9:15:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org