Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa
File:                     3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (raw, json)
Hash identifier:          Kvls3LZDq6ew59sjRAkuhKZ0rt/sP0DdTvBdoCI6jj4=
Subject key identifier:   1C:FF:8F:B8:3A:EB:2E:8D:3C:1E:AA:56:6C:05:6C:48:C6:08:55:90
Certificate issuer:       /CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E
Certificate serial:       71E5533B0D804A929307C509CA31285E25A443CE
Authority key identifier: 0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa
Signing time:             Mon 31 Jul 2023 00:08:37 +0000
ROA not before:           Mon 31 Jul 2023 00:03:37 +0000
ROA not after:            Mon 29 Jul 2024 00:08:37 +0000
asID:                     131778
IP address blocks:        103.246.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl
                          rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Apr 2024 21:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e5:53:3b:0d:80:4a:92:93:07:c5:09:ca:31:28:5e:25:a4:43:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E
        Validity
            Not Before: Jul 31 00:03:37 2023 GMT
            Not After : Jul 29 00:08:37 2024 GMT
        Subject: CN=1CFF8FB83AEB2E8D3C1EAA566C056C48C6085590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:fd:fc:1e:42:90:4f:0d:df:93:dc:10:15:
                    09:47:a8:65:b5:4f:4d:f3:62:94:f9:1c:81:27:d8:
                    aa:c9:f8:e4:bf:91:9f:17:de:5c:5d:08:a9:9e:d1:
                    09:4a:19:60:39:21:11:6a:b7:26:7e:54:eb:ad:66:
                    7e:9b:8b:ef:c0:a5:da:e8:11:3d:88:12:c1:00:b9:
                    e8:50:d4:8c:77:31:18:23:9c:c5:ba:4f:85:e8:be:
                    dc:60:0f:b1:62:ee:11:6e:96:53:be:24:6a:71:a3:
                    6c:65:c7:d9:5e:02:b0:a1:64:90:d3:7f:93:8f:16:
                    29:00:a2:b2:ae:f5:dc:dd:c5:24:58:9f:18:78:75:
                    36:92:99:3c:c3:07:3f:46:60:ef:9b:89:af:8a:f5:
                    d9:dc:d1:fc:4c:80:96:38:37:68:96:37:e5:10:9e:
                    ff:e0:3b:40:d8:e8:e3:f9:1c:7c:54:18:63:70:4a:
                    72:65:59:52:96:47:5c:4b:ee:0d:2d:81:f3:2e:0e:
                    a2:bd:50:3e:9f:52:ca:ac:71:fe:aa:cd:d1:f3:1e:
                    d6:5f:81:ac:c5:2b:13:41:1d:e8:be:f6:e6:09:29:
                    2a:c6:0e:1a:77:40:84:f7:56:eb:46:97:d3:31:98:
                    70:ba:b0:e6:09:00:d5:db:3e:f4:a4:f7:b5:b4:b8:
                    52:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FF:8F:B8:3A:EB:2E:8D:3C:1E:AA:56:6C:05:6C:48:C6:08:55:90
            X509v3 Authority Key Identifier:
                keyid:0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:d4:97:1d:1a:df:c3:1a:68:94:0c:16:3b:c6:b5:1a:64:3c:
         1e:9e:09:9f:65:f0:91:f9:0e:85:95:5c:a4:44:1a:2c:09:7e:
         b3:e5:88:09:78:83:2c:b0:aa:3b:24:88:75:07:99:0c:4c:14:
         87:49:9e:c0:9a:83:12:25:da:a8:ae:9e:26:7b:b5:77:5b:99:
         31:b1:8a:4f:55:63:b6:e5:37:60:47:48:e3:36:aa:df:00:10:
         b4:09:7d:9c:0a:f1:59:0f:aa:3a:b6:27:d7:92:57:06:14:59:
         73:dc:f5:98:dc:c2:4c:ec:c6:55:a8:09:f6:05:1e:9b:69:de:
         66:39:24:0f:0f:fc:08:ec:a2:7d:0e:b7:bb:fc:14:a7:7f:57:
         7b:a8:df:15:0c:21:f9:bf:3e:c8:f0:36:b6:3c:45:95:89:46:
         fb:5c:d3:6e:59:d9:dd:62:25:20:4c:32:ca:6a:1c:fc:6f:7b:
         43:b6:91:20:10:19:41:62:9a:d8:25:f7:f5:73:8e:0c:51:53:
         fa:5b:3a:2d:c8:90:b4:a2:bf:33:49:5a:c2:91:ed:51:51:96:
         40:51:03:34:fe:3c:13:84:c2:b2:36:7e:11:1f:37:bb:94:68:
         a5:7e:95:23:9a:a1:a1:64:65:95:8c:66:e0:f3:81:0e:14:d2:
         ca:5a:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 04:01:59 2024 by rpki-client on console-ams.rpki-client.org