Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139322e302f32342d3234203d3e20313432333534.roa
File:                     3130332e37332e3139322e302f32342d3234203d3e20313432333534.roa (raw, json)
Hash identifier:          6UmbcQrJvX+rhtVX0lJCW3tBnv9gc19yaReWk5PaV5w=
Subject key identifier:   FF:33:68:D7:30:64:17:39:50:FD:9F:48:F0:8F:55:FF:C2:02:6C:97
Certificate issuer:       /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8
Certificate serial:       6A30BA079B59E2C2371D2FA7F5A3124574DD6C45
Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139322e302f32342d3234203d3e20313432333534.roa
Signing time:             Thu 06 Jun 2024 00:24:13 +0000
ROA not before:           Thu 06 Jun 2024 00:19:13 +0000
ROA not after:            Thu 05 Jun 2025 00:24:13 +0000
asID:                     142354
IP address blocks:        103.73.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl
                          rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:30:ba:07:9b:59:e2:c2:37:1d:2f:a7:f5:a3:12:45:74:dd:6c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8
        Validity
            Not Before: Jun  6 00:19:13 2024 GMT
            Not After : Jun  5 00:24:13 2025 GMT
        Subject: CN=FF3368D73064173950FD9F48F08F55FFC2026C97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:d6:03:c0:3e:9b:47:95:88:80:c4:ed:18:
                    76:fb:87:c2:c2:81:27:03:db:ce:a7:8e:b7:4e:f6:
                    79:db:6c:1c:3d:5c:6a:b9:8d:26:22:79:10:7e:2b:
                    74:c2:a3:80:f9:a4:6e:6b:02:98:33:19:f8:c9:ea:
                    34:35:39:d8:28:cd:e7:3c:d6:90:6c:a6:6d:47:5b:
                    9b:85:18:be:17:0d:9d:93:ea:8b:3c:11:fc:dc:d0:
                    30:3f:45:fb:a0:ea:f9:af:b4:72:8a:95:7e:73:56:
                    0b:13:5a:d7:84:46:2c:bc:16:d0:fa:ed:ba:4a:e8:
                    4e:54:0f:db:d2:eb:2f:4a:df:04:95:70:f2:14:51:
                    f0:d8:99:2b:c3:71:b6:da:44:da:42:1e:5f:1b:01:
                    b6:4d:c2:a9:be:54:84:b2:c5:de:48:b2:7c:10:3f:
                    b7:14:df:55:0e:20:16:d1:e0:6a:37:82:d8:79:52:
                    0c:dc:c2:a4:bc:83:86:41:59:56:7f:34:d4:b3:48:
                    7c:2d:14:3b:c8:fb:07:4d:6d:db:b9:2e:40:81:96:
                    d7:bf:90:55:1f:82:28:89:e3:67:f5:5c:73:1d:c4:
                    0f:3f:14:cf:b4:58:83:0b:89:d3:b8:96:da:07:fd:
                    c4:db:cd:e3:91:71:7f:55:c4:90:1d:5a:64:57:38:
                    56:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:33:68:D7:30:64:17:39:50:FD:9F:48:F0:8F:55:FF:C2:02:6C:97
            X509v3 Authority Key Identifier:
                keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139322e302f32342d3234203d3e20313432333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:f2:2b:d9:fb:a8:9a:13:98:c5:65:ce:6b:b8:d8:c7:1c:d8:
         0b:39:b0:ba:9c:46:b4:93:c9:68:3d:b3:87:cb:fd:d6:53:16:
         f0:a4:a4:32:b2:8f:3a:c5:29:6a:0d:30:fe:74:cb:f0:47:68:
         ba:74:c0:87:a9:a8:53:44:02:fd:10:29:65:65:2a:00:28:46:
         3c:2d:48:a7:8e:83:01:be:04:17:c8:e0:76:eb:84:fc:40:31:
         d7:e9:22:2c:5c:d0:ea:15:db:d0:58:83:13:f1:b7:5d:d6:2b:
         a0:5a:8a:6f:c7:bc:49:ad:cf:b4:b0:94:aa:7b:99:e0:c5:38:
         57:e3:d2:9c:1e:ce:6f:7a:b5:d0:99:b4:00:4e:41:cc:4c:35:
         d8:3e:cb:b1:bb:10:5c:cd:64:24:8a:cf:a8:e8:b2:48:5e:f5:
         f6:d0:e6:c9:96:87:43:db:cb:a6:db:9c:df:13:8a:a1:5d:8a:
         9c:18:41:76:9f:fc:b3:b3:7a:8b:f5:5a:f5:77:bf:53:ab:46:
         3e:ce:97:ea:2b:34:a6:6a:ea:26:44:7d:8e:94:9f:f6:f6:9b:
         93:19:f7:95:b6:dc:a9:1b:52:db:87:08:59:80:04:d4:20:16:
         e7:d0:56:a0:f9:6a:45:a3:cd:1f:b1:7e:c5:4f:54:84:ce:04:
         7b:eb:ac:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org