Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/3130332e3233392e32322e302f32342d3234203d3e20313531353339.roa
File:                     3130332e3233392e32322e302f32342d3234203d3e20313531353339.roa (raw, json)
Hash identifier:          Bjc1vkthHbDR26mBjAwO6eaTrNsmFfcssoUm7h8okEo=
Subject key identifier:   DB:26:56:21:DB:E7:64:09:E3:03:7E:70:A9:64:85:B4:76:B5:51:B1
Certificate issuer:       /CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B
Certificate serial:       2F9447F4FBBABA8AA278E61BE1B7CD97A7DDC4CB
Authority key identifier: 4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/3130332e3233392e32322e302f32342d3234203d3e20313531353339.roa
Signing time:             Sat 05 Oct 2024 03:00:02 +0000
ROA not before:           Sat 05 Oct 2024 02:55:02 +0000
ROA not after:            Sat 04 Oct 2025 03:00:02 +0000
asID:                     151539
IP address blocks:        103.239.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl
                          rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:94:47:f4:fb:ba:ba:8a:a2:78:e6:1b:e1:b7:cd:97:a7:dd:c4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B
        Validity
            Not Before: Oct  5 02:55:02 2024 GMT
            Not After : Oct  4 03:00:02 2025 GMT
        Subject: CN=DB265621DBE76409E3037E70A96485B476B551B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:ea:27:d4:7e:7e:74:58:0c:87:eb:e0:ae:
                    1c:17:1f:80:65:dc:cc:fe:21:40:c1:f9:83:39:0d:
                    36:8c:10:0b:8e:40:71:e8:2b:4e:91:80:6f:6c:81:
                    c6:48:eb:11:65:8a:14:d4:5c:37:2c:3b:01:6e:a4:
                    7e:7d:20:6b:2e:af:70:74:8a:d3:98:b2:7b:b7:51:
                    50:3f:83:f7:a1:04:b1:8a:9e:eb:7a:52:84:c9:72:
                    56:56:99:fb:45:ba:5e:63:06:cc:10:b1:86:5f:0e:
                    90:99:de:fd:4f:fb:e1:0a:bf:82:21:13:bf:3e:f1:
                    9c:f3:0c:1f:c0:ce:ad:47:2e:60:5c:7a:f5:44:a9:
                    66:56:2c:c1:88:fe:5c:7c:df:69:95:f6:da:f4:8b:
                    e0:ee:d0:57:67:30:c3:07:7b:e7:62:74:96:0e:b7:
                    93:f3:da:15:26:d5:bf:3e:1f:9f:ef:2d:9c:d2:a5:
                    3e:8c:2d:31:63:73:5c:22:65:26:8a:22:38:c8:1f:
                    b7:c1:7f:be:51:a6:a0:06:5d:27:ed:a3:8e:45:db:
                    7d:4e:81:d7:3f:36:9d:94:7f:7c:96:ca:59:53:a7:
                    be:6b:0c:d4:f2:3e:39:d8:f1:46:1e:ad:25:08:5f:
                    96:75:cd:0d:3d:73:d0:43:f8:4c:78:f5:51:79:e9:
                    56:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:26:56:21:DB:E7:64:09:E3:03:7E:70:A9:64:85:B4:76:B5:51:B1
            X509v3 Authority Key Identifier:
                keyid:4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/3130332e3233392e32322e302f32342d3234203d3e20313531353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:39:90:c0:d0:de:e6:c4:8d:02:26:c1:2f:f3:bf:25:29:73:
         4c:30:54:9f:a8:4f:a9:70:35:45:24:bc:08:1c:15:56:1b:c0:
         27:fa:92:a8:42:8a:96:2c:f6:37:02:28:be:14:fe:0c:25:56:
         43:e6:72:53:f2:52:3a:e4:f3:6c:c7:d6:6a:c5:bd:d6:d6:83:
         e4:5e:96:c5:00:1c:69:fe:cd:27:1f:ba:33:70:b5:fc:d9:40:
         ce:da:39:21:c5:4a:f5:ca:8c:9c:19:17:c8:31:56:bc:73:3b:
         4c:b5:74:3b:a6:f1:48:ad:42:b5:c9:e7:28:f7:cc:fb:0a:69:
         ee:0a:f6:9f:00:03:59:2b:b0:e7:cb:2a:9e:d6:13:0f:96:f3:
         af:5a:27:5d:91:1b:4a:f1:f5:f7:59:24:d6:36:8b:b9:58:5b:
         78:bf:7c:fb:10:b7:2b:c5:02:5a:74:0a:09:21:6e:63:0b:b4:
         95:a1:e5:d2:88:c0:29:fa:e5:55:30:ab:e8:8a:cb:53:45:ee:
         35:85:a1:68:38:fe:65:8b:0f:6c:f6:cb:b6:91:d9:50:e2:c5:
         70:a0:d4:3d:af:9f:73:d4:bd:22:48:32:cf:d3:70:0e:81:57:
         72:ee:46:b5:b7:4e:59:c0:02:6a:67:8e:de:05:d2:80:56:6b:
         8d:63:6c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org