Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131392e302f32342d3234203d3e20313432333935.roa
File:                     3130332e3137322e3131392e302f32342d3234203d3e20313432333935.roa (raw, json)
Hash identifier:          f6VwJmzZk1P56fNNxlF+HWl8yqikb30Rmun1UijW418=
Subject key identifier:   21:9C:2C:4C:75:F7:DD:7B:05:E9:EE:5C:F9:48:8E:B2:45:59:1E:37
Certificate issuer:       /CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
Certificate serial:       3473A40ED90A9E978887F1AECE4243274F681831
Authority key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131392e302f32342d3234203d3e20313432333935.roa
Signing time:             Thu 07 Nov 2024 07:04:15 +0000
ROA not before:           Thu 07 Nov 2024 06:59:15 +0000
ROA not after:            Thu 06 Nov 2025 07:04:15 +0000
asID:                     142395
IP address blocks:        103.172.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl
                          rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:73:a4:0e:d9:0a:9e:97:88:87:f1:ae:ce:42:43:27:4f:68:18:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
        Validity
            Not Before: Nov  7 06:59:15 2024 GMT
            Not After : Nov  6 07:04:15 2025 GMT
        Subject: CN=219C2C4C75F7DD7B05E9EE5CF9488EB245591E37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:b2:8d:02:ca:63:44:fe:c0:94:35:37:94:
                    2e:fc:40:fc:df:50:f7:84:d3:5e:aa:f6:25:04:21:
                    95:49:db:66:9c:b1:4e:c0:a0:3c:62:ae:5d:ff:72:
                    b9:fa:7d:fd:cf:a4:fb:49:7a:3c:b3:9b:e4:96:be:
                    a7:7f:73:89:54:f8:50:85:59:82:2b:79:fb:9a:ea:
                    20:7e:a9:53:f7:65:c7:1d:f3:64:61:2d:d5:e2:5d:
                    d6:0a:f4:cd:d9:69:5c:0f:83:b4:32:e2:00:5a:0c:
                    7a:80:28:d2:af:95:b8:5b:f2:76:2c:46:8a:77:92:
                    ec:8c:f5:07:ca:af:dc:ba:09:88:d8:2d:33:ac:0f:
                    1e:67:d5:fa:28:2a:31:cc:61:70:a1:84:05:bf:17:
                    31:eb:22:9f:44:9d:d7:24:87:6d:ff:90:7f:af:31:
                    a4:d9:e7:d2:fe:a6:c5:fa:2e:70:ea:52:7b:c3:82:
                    d4:46:40:81:d3:3c:dd:40:bd:35:82:d3:75:40:d5:
                    0c:0d:23:1c:55:75:d2:b9:f0:0b:c6:c0:20:e5:95:
                    55:17:73:97:e0:6e:0b:7b:3f:8b:57:72:2f:16:1a:
                    b4:b5:10:7d:52:b9:ec:0e:53:b2:16:9a:ff:50:b3:
                    8f:db:02:a2:d7:ec:fd:34:68:8d:5f:03:4e:cc:a7:
                    64:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9C:2C:4C:75:F7:DD:7B:05:E9:EE:5C:F9:48:8E:B2:45:59:1E:37
            X509v3 Authority Key Identifier:
                keyid:08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131392e302f32342d3234203d3e20313432333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:92:f6:19:2e:00:d7:f5:0e:9f:c2:e8:b2:83:c2:7e:98:5d:
         6f:49:af:90:03:89:11:3d:92:d5:a8:99:48:9b:a2:f6:7d:47:
         f2:14:c1:5b:28:3e:a8:22:5a:0b:4e:fc:e6:18:39:5e:09:2d:
         8b:84:ec:17:ec:48:ac:80:fd:e1:63:c7:f1:dc:55:d7:76:f3:
         cd:3e:cd:23:6f:98:6b:7b:c1:58:5a:f0:60:76:9e:5d:23:db:
         d6:e4:8f:09:1c:e0:9a:55:53:bb:80:92:26:d9:0f:f2:fe:ff:
         28:1b:83:cb:60:a2:74:14:01:e3:77:5a:ab:b8:28:e4:6d:23:
         8d:7f:e8:28:67:10:9c:ff:e7:29:30:47:73:b5:fc:2b:e5:f5:
         c6:9f:3e:44:86:08:f0:06:e2:2e:9f:05:d1:52:07:0b:26:b9:
         7b:7f:66:01:ea:d6:d9:79:21:c6:c2:91:e9:8d:3e:40:6d:a4:
         10:cc:6b:14:5a:05:2a:c1:22:44:68:17:57:f9:69:53:57:a4:
         d2:d8:95:8e:2b:5f:84:90:0d:19:bc:4d:3e:21:44:44:dc:09:
         92:48:ec:7d:d7:5f:50:e3:f0:08:33:80:26:21:c9:93:21:58:
         92:1b:58:e9:38:3e:44:61:63:80:4e:78:00:9b:af:48:ef:5b:
         07:1b:86:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:53 2024 by rpki-client on console-fra.rpki-client.org