Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/3130332e3134322e38392e302f32342d3234203d3e20313339333638.roa
File:                     3130332e3134322e38392e302f32342d3234203d3e20313339333638.roa (raw, json)
Hash identifier:          qW/QO2V7oxhmZt2Z5c2RtUuN+nwEGAPtb/kKM6keH14=
Subject key identifier:   4B:4C:89:F3:E3:A2:DA:FF:1B:53:B7:3E:0E:42:EA:51:79:87:5A:DB
Certificate issuer:       /CN=6E77582BC25A225D744F9E7A58CA279875307F2F
Certificate serial:       685F6EDB5CD7F83EBD8B8AA62C3141B7AEEE4667
Authority key identifier: 6E:77:58:2B:C2:5A:22:5D:74:4F:9E:7A:58:CA:27:98:75:30:7F:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E77582BC25A225D744F9E7A58CA279875307F2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/3130332e3134322e38392e302f32342d3234203d3e20313339333638.roa
Signing time:             Wed 07 Aug 2024 03:56:45 +0000
ROA not before:           Wed 07 Aug 2024 03:51:45 +0000
ROA not after:            Wed 06 Aug 2025 03:56:45 +0000
asID:                     139368
IP address blocks:        103.142.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/6E77582BC25A225D744F9E7A58CA279875307F2F.crl
                          rsync://repo-rpki.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/6E77582BC25A225D744F9E7A58CA279875307F2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E77582BC25A225D744F9E7A58CA279875307F2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5f:6e:db:5c:d7:f8:3e:bd:8b:8a:a6:2c:31:41:b7:ae:ee:46:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E77582BC25A225D744F9E7A58CA279875307F2F
        Validity
            Not Before: Aug  7 03:51:45 2024 GMT
            Not After : Aug  6 03:56:45 2025 GMT
        Subject: CN=4B4C89F3E3A2DAFF1B53B73E0E42EA5179875ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7e:7d:5b:8d:24:b3:27:32:9d:f1:32:e9:c2:
                    18:8b:3d:3e:c8:ac:d8:cf:80:4e:3b:65:f5:98:f4:
                    60:6e:1c:23:1b:bc:e9:d5:16:f9:37:c0:4e:d6:2f:
                    7c:5c:d1:3c:5b:0f:51:07:6e:54:c3:00:8a:88:38:
                    fb:83:3d:26:67:92:61:73:83:ab:82:91:ed:a0:8d:
                    e2:4a:83:d9:a5:9d:39:8a:77:6f:4c:13:e3:96:14:
                    23:08:70:6e:e6:14:9f:ae:26:bf:6e:70:09:90:09:
                    ba:15:83:a4:8d:43:07:db:11:25:bb:a9:c9:76:2a:
                    4c:0f:33:f4:11:23:e1:dc:21:d8:62:13:06:8b:a9:
                    fd:34:18:85:03:06:b8:f5:ec:63:e2:9e:48:46:70:
                    76:5f:f2:1e:be:77:19:c4:04:8c:8c:a3:a5:17:a5:
                    99:d2:f3:9e:45:36:4f:43:92:b4:bc:ff:e1:8d:6e:
                    bb:44:14:da:b6:91:be:24:31:f6:fe:3c:07:2a:b7:
                    6c:19:92:32:c3:94:9d:b2:9f:5f:44:e2:9e:ee:c2:
                    b4:2d:15:cb:b7:e2:cd:d1:c6:5d:a8:35:34:e8:0e:
                    8d:57:97:0d:83:96:7d:11:b5:4b:28:c6:17:33:15:
                    48:e8:13:20:4f:12:f2:82:20:61:e5:1a:e2:ea:d1:
                    da:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4C:89:F3:E3:A2:DA:FF:1B:53:B7:3E:0E:42:EA:51:79:87:5A:DB
            X509v3 Authority Key Identifier:
                keyid:6E:77:58:2B:C2:5A:22:5D:74:4F:9E:7A:58:CA:27:98:75:30:7F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/6E77582BC25A225D744F9E7A58CA279875307F2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E77582BC25A225D744F9E7A58CA279875307F2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/3130332e3134322e38392e302f32342d3234203d3e20313339333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:73:af:e7:7c:c7:72:ac:9d:f4:b4:dc:72:cc:36:4b:09:29:
         4a:16:19:da:a0:8a:b7:8c:4b:c2:1f:9d:14:32:11:df:47:76:
         95:07:d7:f3:0f:39:74:c6:6e:9a:de:c4:24:c2:6b:42:c7:cd:
         d8:4f:cc:91:f5:3a:ad:d2:5f:15:2c:8b:52:0c:b0:7a:72:25:
         4a:4b:43:cb:2b:c7:5b:b4:d0:79:f1:89:bb:09:f3:24:19:f6:
         1f:58:8b:7d:c8:3c:2e:e7:03:c3:5f:50:47:a5:55:0e:6e:fd:
         3d:a2:a4:20:7a:a0:0b:2c:48:f5:85:fb:9a:b9:12:f7:2f:2c:
         2d:39:1c:51:4d:fd:91:db:68:24:61:d6:36:22:5e:04:8c:1c:
         8c:7f:26:b9:0c:bd:35:3e:ed:52:6d:0d:8b:32:53:f6:de:41:
         7a:93:fc:36:80:2e:f1:59:f4:5c:8f:ba:35:49:c4:2a:fb:ea:
         b8:a4:54:7b:0d:48:0e:8e:22:6c:3c:65:04:45:da:05:6e:05:
         e0:f3:ec:15:72:3b:4c:13:ee:53:38:db:a1:36:0e:cc:00:8e:
         14:10:d0:d4:c9:40:21:f5:77:5c:ef:6f:0c:d8:04:80:ef:98:
         94:e1:c4:5b:58:2f:7b:1c:71:97:32:aa:a3:c7:85:f7:f6:0e:
         56:e9:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:00 2024 by rpki-client on console-fra.rpki-client.org