Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa
File:                     3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (raw, json)
Hash identifier:          JItEHoor78bk8eKE6uIWHGxot7yqmmgrVWLEENpjLZI=
Subject key identifier:   2D:CF:11:77:CF:B5:CE:F1:22:B6:BD:F8:A8:8B:39:1E:C6:71:98:39
Certificate issuer:       /CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Certificate serial:       3C58457CD25F033FAA0A06EECA54C93D1E86F010
Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa
Signing time:             Mon 31 Jul 2023 00:03:07 +0000
ROA not before:           Sun 30 Jul 2023 23:58:07 +0000
ROA not after:            Mon 29 Jul 2024 00:03:07 +0000
asID:                     132649
IP address blocks:        103.24.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl
                          rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Mar 2024 14:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:58:45:7c:d2:5f:03:3f:aa:0a:06:ee:ca:54:c9:3d:1e:86:f0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E
        Validity
            Not Before: Jul 30 23:58:07 2023 GMT
            Not After : Jul 29 00:03:07 2024 GMT
        Subject: CN=2DCF1177CFB5CEF122B6BDF8A88B391EC6719839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:eb:95:a5:30:92:86:b8:76:22:35:23:35:4c:
                    64:97:fe:a0:e7:73:09:10:f1:7d:42:36:74:7d:2c:
                    0c:db:00:74:46:93:1e:31:11:ed:03:0e:9f:b8:de:
                    15:ef:27:3f:f4:34:d6:69:35:05:26:0d:d2:66:8b:
                    92:59:09:1b:0b:c0:b3:c3:02:36:ad:6f:40:57:5a:
                    94:90:73:48:57:9b:fe:87:67:9b:0b:c2:1c:45:75:
                    19:24:7b:fb:6b:d9:d7:1b:71:dc:44:82:d9:02:bd:
                    de:aa:a4:61:9b:c9:14:1e:28:1a:6c:5b:4b:e6:46:
                    08:4c:a4:1d:f8:d5:46:9e:05:9e:4c:ab:b0:3f:2e:
                    e8:73:8f:8e:c3:e9:f8:ad:c7:b0:f1:b1:db:f4:fe:
                    cc:ba:0c:06:1f:c7:b9:c7:e6:c0:f9:82:99:9d:ac:
                    89:25:b5:2b:b7:91:57:c7:51:b1:c9:c1:8e:46:88:
                    fb:04:79:98:8c:fc:7d:9b:3e:36:cb:7c:f8:b8:be:
                    10:2d:97:a2:11:8a:3b:fa:6e:ae:47:82:25:1d:e1:
                    33:c1:75:b9:b3:ad:27:d1:32:56:b6:98:76:d6:23:
                    d4:93:5e:59:4c:cf:b4:b6:30:4f:6d:11:d0:38:96:
                    90:51:95:b5:93:4f:be:40:74:0f:a8:13:d8:fc:52:
                    91:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CF:11:77:CF:B5:CE:F1:22:B6:BD:F8:A8:8B:39:1E:C6:71:98:39
            X509v3 Authority Key Identifier:
                keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:d9:71:59:88:15:0d:27:36:4e:c1:59:8d:ac:1a:41:38:d9:
         e2:64:e7:21:fc:d7:a7:44:91:8a:df:cc:76:25:af:a0:6a:37:
         03:cd:7c:52:de:06:06:9a:1a:66:cf:36:d2:31:bd:98:15:03:
         13:f6:15:23:3d:9e:5d:cd:8e:1b:e1:5a:f0:86:99:7e:52:f6:
         d0:be:f1:8f:4b:0a:68:5e:48:0b:f6:2c:d7:c8:c9:8f:25:d1:
         6a:90:43:29:91:75:01:25:6c:d9:c1:3a:78:57:fb:bf:32:2b:
         ff:33:1a:67:91:3d:70:81:d6:37:bb:7e:54:26:14:95:58:04:
         b8:fb:d4:3c:cb:eb:b0:8b:98:22:e3:19:b6:78:3b:2b:c0:5a:
         67:d1:86:a4:5f:64:82:be:db:23:0b:79:d6:50:78:af:2a:81:
         6d:c4:2b:72:8e:65:94:53:61:a8:90:20:7d:f3:7e:e1:96:f4:
         1b:c0:6b:27:66:f0:f8:36:21:4e:04:9a:8b:24:5f:72:18:8f:
         8f:57:1d:7a:94:6c:13:5d:90:5b:46:27:33:99:d3:df:37:05:
         a5:58:f6:78:62:19:63:4e:60:2a:63:45:a6:a1:6b:6b:a4:1f:
         75:6e:20:2b:e6:8e:04:49:c8:4f:8c:16:d6:47:b7:75:80:cb:
         b7:69:48:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:34:05 2024 by rpki-client on console-fra.rpki-client.org