Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa
File:                     3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (raw, json)
Hash identifier:          IGI3ClctmWaFL0gfdzUyLJyt5YIqDflj0CAxtPruJMM=
Subject key identifier:   83:36:C4:A7:58:61:9F:19:E0:58:34:1A:E2:82:1B:33:C2:28:31:51
Certificate issuer:       /CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4
Certificate serial:       7A82D0253DD6411862607D374669121D7F4A5553
Authority key identifier: C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa
Signing time:             Wed 03 Jul 2024 14:00:58 +0000
ROA not before:           Wed 03 Jul 2024 13:55:58 +0000
ROA not after:            Wed 02 Jul 2025 14:00:58 +0000
asID:                     23954
IP address blocks:        103.191.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl
                          rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 05:33:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:82:d0:25:3d:d6:41:18:62:60:7d:37:46:69:12:1d:7f:4a:55:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4
        Validity
            Not Before: Jul  3 13:55:58 2024 GMT
            Not After : Jul  2 14:00:58 2025 GMT
        Subject: CN=8336C4A758619F19E058341AE2821B33C2283151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fa:ba:b2:07:09:9f:c4:1e:80:fd:fa:56:48:
                    54:6b:01:fb:23:72:c0:75:1b:c5:8d:6a:fd:d4:9b:
                    82:9c:93:3a:76:df:b0:b6:50:c8:75:39:d1:6e:12:
                    f0:bb:3b:0f:ea:b6:19:58:e5:8c:84:1a:e7:74:ba:
                    0d:bf:8b:3c:81:ca:75:02:9f:7d:a4:28:15:a7:70:
                    40:1f:a7:aa:4d:d3:23:a8:4f:30:60:6e:54:b8:c6:
                    40:92:0c:29:23:db:e1:77:f8:0d:f1:f0:ba:dc:10:
                    08:1b:4b:11:c2:9c:eb:25:71:b5:2c:4d:d5:09:b8:
                    3c:60:db:70:b3:cd:27:85:2f:4a:f6:da:6d:08:ef:
                    32:aa:79:00:b4:d3:cc:7e:13:3e:80:62:68:af:f8:
                    42:c0:d5:eb:78:ce:a1:48:46:b1:a7:3d:d8:1e:db:
                    9f:87:97:8b:c4:fb:ee:72:80:c7:d2:72:8c:ac:89:
                    9e:ac:55:ce:12:09:39:30:40:ff:6d:b0:a2:be:80:
                    13:e0:1b:cf:48:ed:35:a5:62:06:dc:5e:22:27:7f:
                    e3:9e:7a:07:91:ea:2d:91:b6:3f:8d:83:f7:f6:96:
                    31:54:6c:53:24:db:42:f7:cd:5d:c7:0b:7a:92:2a:
                    a4:ba:66:2c:0f:b0:c4:cf:c4:d2:b3:1e:72:83:2f:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:36:C4:A7:58:61:9F:19:E0:58:34:1A:E2:82:1B:33:C2:28:31:51
            X509v3 Authority Key Identifier:
                keyid:C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:4c:e6:aa:82:f4:59:b4:e7:63:57:24:2f:ef:ff:ea:29:a7:
         55:9d:7d:c9:9e:08:b6:c6:22:79:98:f1:7f:ec:02:62:7b:87:
         62:01:3f:13:9e:d9:01:58:1e:c9:1a:c0:9e:08:32:38:ee:a3:
         9f:1e:73:ab:ce:e5:5b:7b:6a:92:b5:85:57:e4:5d:59:34:74:
         b1:04:f5:8a:c6:44:07:9d:32:d6:76:4a:2b:a6:32:20:5e:5f:
         0d:9e:ca:61:c3:84:b7:8e:75:bb:48:0c:3c:2d:94:57:0c:b1:
         3f:79:64:6b:b6:cc:12:f7:87:a7:05:2e:6a:51:3b:57:8a:f6:
         2f:58:10:d2:aa:df:c0:be:d0:ac:a9:c7:54:53:44:86:17:fe:
         ea:cf:05:8d:ff:dc:c3:8b:e0:14:40:e2:92:e7:ca:1a:1f:44:
         aa:3b:a0:b2:10:92:5b:23:0d:ed:ad:af:80:13:fd:c2:42:3b:
         1e:80:9b:b4:ea:f6:37:73:6a:b4:cb:c4:fa:60:6b:34:dc:58:
         b0:4d:3e:64:1e:1e:74:95:52:45:19:a0:cb:db:10:33:d4:46:
         70:73:53:0d:49:ef:dd:89:07:03:8e:a9:6e:cc:61:8a:0b:9e:
         66:52:8d:f7:74:9d:a2:e1:f3:f9:13:c7:9c:f9:33:93:27:64:
         0c:af:60:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 28 03:17:26 2024 by rpki-client on console-ams.rpki-client.org