Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa
File:                     3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (raw, json)
Hash identifier:          HlgbW9gkz13icnKW2d2xBb3AX+CGjyH3NCrEPNHBPP4=
Subject key identifier:   D4:27:95:04:5D:E4:BE:B6:F1:5F:10:6A:D4:FF:A2:93:AA:BF:DB:5E
Certificate issuer:       /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF
Certificate serial:       531DD017255C2436BF06CB641B239F3A6D75BF13
Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa
Signing time:             Fri 13 Oct 2023 08:00:01 +0000
ROA not before:           Fri 13 Oct 2023 07:55:01 +0000
ROA not after:            Fri 11 Oct 2024 08:00:01 +0000
asID:                     136842
IP address blocks:        103.100.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl
                          rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 23:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:1d:d0:17:25:5c:24:36:bf:06:cb:64:1b:23:9f:3a:6d:75:bf:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF
        Validity
            Not Before: Oct 13 07:55:01 2023 GMT
            Not After : Oct 11 08:00:01 2024 GMT
        Subject: CN=D42795045DE4BEB6F15F106AD4FFA293AABFDB5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4c:2d:79:c0:b0:eb:54:16:09:4b:50:c0:14:
                    1f:32:b9:93:46:a5:4a:21:4a:4e:4b:7f:d0:0e:39:
                    43:d3:61:8d:d1:de:88:69:03:02:3a:fd:67:de:d6:
                    d5:f5:ef:ff:d9:22:15:cf:84:c2:79:36:37:7b:95:
                    c5:ed:03:e2:62:6f:07:3d:e5:2d:e1:3a:38:6f:24:
                    11:9d:57:c6:a2:bf:85:95:72:41:00:71:4f:5c:9f:
                    5c:ea:32:27:24:2e:7e:83:4a:13:0e:8a:6f:3f:10:
                    06:bf:10:c9:88:df:bf:71:26:30:e8:6c:5d:8f:b3:
                    cb:58:f8:33:e0:c4:13:55:d4:5b:eb:0f:6d:19:4b:
                    d4:1f:6e:ab:82:31:b9:3f:50:4b:88:c8:6d:47:47:
                    f7:de:b4:f3:78:20:6a:1d:42:eb:be:5b:72:d1:b6:
                    0c:35:ed:5c:7b:66:26:a8:b3:ce:bc:16:6e:ab:e2:
                    93:39:ac:48:d4:2d:ef:e6:ba:41:6b:3f:fa:2f:0e:
                    84:8c:58:eb:ec:15:be:50:8c:dc:85:80:c0:eb:de:
                    98:17:e5:50:04:ac:a0:9d:f2:c6:ec:d0:63:e8:45:
                    3c:e1:6b:de:65:9e:fe:40:d4:55:e2:08:6a:24:94:
                    81:78:28:13:24:67:cd:9e:be:f5:95:88:e3:b3:81:
                    85:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:27:95:04:5D:E4:BE:B6:F1:5F:10:6A:D4:FF:A2:93:AA:BF:DB:5E
            X509v3 Authority Key Identifier:
                keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:07:b0:70:73:ac:2d:bd:46:e3:02:20:e1:86:77:6e:19:a3:
         7a:db:5a:d1:7f:c6:ae:89:09:22:2e:00:cf:6c:d4:11:7f:1c:
         0b:33:c3:55:f6:89:b2:5e:38:6f:8d:15:92:dc:a7:65:96:b9:
         47:ea:4b:df:70:25:6a:6c:c4:f8:bc:fa:e2:e9:ce:9e:1a:46:
         14:55:0c:14:71:7d:e0:a8:79:55:70:89:4e:ca:ab:d5:8f:b7:
         74:39:2b:a3:63:b1:e8:f1:72:64:ac:cf:ef:99:c3:65:e3:f0:
         67:7c:38:37:57:7a:9c:30:00:3c:73:e6:5f:4e:43:3f:24:54:
         c9:c0:0b:fa:04:9d:49:68:08:05:f8:e4:f7:a0:fd:93:bc:98:
         ef:80:e6:1e:1f:81:c4:fc:44:69:7f:dc:3e:9b:1e:32:41:6e:
         44:4e:b4:8c:ad:39:5f:98:36:67:0c:a6:6a:db:87:50:3f:4c:
         89:3b:09:1e:65:10:93:d2:b9:ad:08:dd:d5:64:09:f0:3a:e7:
         52:5e:64:bc:7a:ac:a6:6a:86:3c:9f:e9:d2:1f:e9:8b:e7:4a:
         cc:79:e1:16:f8:70:40:b4:17:4f:0f:9a:2c:51:0d:ef:da:ac:
         c2:39:0e:c3:cf:03:0b:6f:d9:b9:86:aa:3c:31:d3:e6:7b:98:
         dc:05:e5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:01:11 2024 by rpki-client on console-fra.rpki-client.org