Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa
File:                     3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (raw, json)
Hash identifier:          nneooXPaIrH4zqrLr1J8eKBYR1yVEb34+Gdwbaa0/Jk=
Subject key identifier:   3B:5C:D1:74:2F:02:9A:49:F1:1C:A8:F7:F8:1B:50:CE:70:47:EA:F3
Certificate issuer:       /CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06
Certificate serial:       19BF83FBC221322D94C31018C7B971A0230349D6
Authority key identifier: AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa
Signing time:             Mon 31 Jul 2023 00:14:27 +0000
ROA not before:           Mon 31 Jul 2023 00:09:27 +0000
ROA not after:            Mon 29 Jul 2024 00:14:27 +0000
asID:                     46056
IP address blocks:        103.245.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl
                          rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 09:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:bf:83:fb:c2:21:32:2d:94:c3:10:18:c7:b9:71:a0:23:03:49:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06
        Validity
            Not Before: Jul 31 00:09:27 2023 GMT
            Not After : Jul 29 00:14:27 2024 GMT
        Subject: CN=3B5CD1742F029A49F11CA8F7F81B50CE7047EAF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b3:e2:8f:23:04:8f:70:e0:fc:9e:b3:c9:4a:
                    61:7d:4a:4d:41:50:a2:f7:15:d9:5c:a5:97:4e:7d:
                    f5:d0:91:6f:34:fd:25:8d:73:2a:87:2d:0e:4a:9c:
                    a8:39:23:ea:5f:4b:4e:e4:4a:72:da:ee:99:47:dc:
                    be:f7:fa:c6:e6:7d:35:a3:8f:70:05:83:fb:36:09:
                    1a:fa:e1:05:3a:98:62:cc:ff:93:43:70:0a:00:62:
                    89:a0:d5:f2:c0:11:1a:84:a0:66:44:dd:e0:d2:e3:
                    30:fd:44:3b:27:45:9c:1b:f7:70:fd:f9:cd:7f:a7:
                    dc:ea:45:10:96:0d:76:5d:68:bd:ec:86:1d:f2:00:
                    41:dc:37:06:76:85:df:2c:55:5e:1e:42:a6:83:52:
                    4c:a0:cb:6e:65:28:5a:3a:7e:2d:81:c4:01:96:f5:
                    c6:d0:52:23:84:b7:eb:13:6a:b5:4d:e7:c1:b4:9b:
                    7d:2c:bd:45:90:55:6f:ee:78:a9:fb:09:ef:25:47:
                    04:ab:86:8c:bb:e2:f5:c3:1c:bf:2a:30:07:ed:96:
                    da:94:85:0b:ff:75:be:de:03:2e:a4:bb:e7:00:a6:
                    42:60:6c:38:99:dd:13:66:1d:40:05:9a:be:26:8d:
                    58:02:b8:15:60:78:46:6e:49:ea:ca:08:5a:87:65:
                    81:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5C:D1:74:2F:02:9A:49:F1:1C:A8:F7:F8:1B:50:CE:70:47:EA:F3
            X509v3 Authority Key Identifier:
                keyid:AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:cb:de:9c:04:29:ac:cc:ce:7d:15:b6:c3:f0:41:ad:07:1a:
         f4:6a:8f:14:ae:41:39:a8:eb:f6:90:30:eb:3b:3d:59:ba:0e:
         21:39:64:20:7d:56:05:a4:a6:0e:0a:a6:33:cd:8e:9e:87:f4:
         ef:f8:99:cc:5b:c2:12:98:d1:65:68:ba:20:80:32:3e:6f:ce:
         15:34:aa:c0:88:10:f2:d3:86:d2:66:31:85:68:61:a1:13:3d:
         d8:dd:92:b1:35:aa:84:10:48:1e:d8:e6:21:1f:73:a5:8c:53:
         76:41:e5:9a:3e:c2:26:a2:43:d9:05:18:a6:37:66:63:8c:e0:
         6e:dc:af:37:05:8b:68:b2:34:dc:33:87:e9:37:e5:ef:9a:69:
         19:1b:09:8a:7d:7e:5a:ee:a8:f8:ed:ff:a9:10:66:7b:00:87:
         c8:a9:d2:60:a4:6b:00:ba:2e:de:ad:24:ae:bc:26:cb:6c:12:
         f4:db:be:24:ea:3e:7a:c2:8d:e8:b4:50:d8:bb:49:a2:21:d0:
         88:89:2c:4e:76:a2:6a:f4:9b:cd:1e:df:57:32:fc:31:95:0d:
         23:a4:41:9c:f9:60:0c:62:95:5b:1e:c4:d6:8a:84:d9:2d:60:
         64:f8:3c:a3:45:21:a3:ee:44:3d:53:23:89:d9:4b:4a:1e:7f:
         f9:31:14:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 11:35:10 2024 by rpki-client on console-ams.rpki-client.org