Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa
File:                     3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (raw, json)
Hash identifier:          XpglAwkQi/mmeRBmmgLpRXWxBCU9ho4ITnZcy1pKQMA=
Subject key identifier:   46:D7:76:61:86:D1:F1:DC:14:FF:27:A4:40:22:A7:56:6C:2A:D4:74
Certificate issuer:       /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED
Certificate serial:       35B9B06DF60074190F974948628080CADE956545
Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa
Signing time:             Mon 11 Dec 2023 04:00:02 +0000
ROA not before:           Mon 11 Dec 2023 03:55:02 +0000
ROA not after:            Mon 09 Dec 2024 04:00:02 +0000
asID:                     45318
IP address blocks:        103.211.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl
                          rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 18:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b9:b0:6d:f6:00:74:19:0f:97:49:48:62:80:80:ca:de:95:65:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED
        Validity
            Not Before: Dec 11 03:55:02 2023 GMT
            Not After : Dec  9 04:00:02 2024 GMT
        Subject: CN=46D7766186D1F1DC14FF27A44022A7566C2AD474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:00:49:06:4b:7f:5c:6e:0d:33:bc:03:6c:42:
                    4a:46:94:f2:c9:fc:00:06:09:46:5f:e7:61:ca:ff:
                    14:b9:ba:26:38:fa:e6:c4:cc:c9:5b:f9:95:c2:d0:
                    cb:94:51:fb:b8:82:43:ed:b2:5d:48:59:32:e6:08:
                    33:8d:7c:f6:53:e3:95:d1:a4:ba:32:00:71:e4:b3:
                    c9:7b:60:82:68:7b:c6:43:22:de:2e:32:66:dc:f3:
                    05:e9:21:fc:d8:13:3b:5d:8f:c7:f4:6d:9f:a0:dc:
                    5b:e2:ac:06:76:79:98:e6:bb:95:8f:72:36:3f:94:
                    81:5c:cb:2a:94:7a:04:6d:fc:1f:ca:e6:d6:c4:5d:
                    d5:18:9b:d4:8e:9c:0e:91:34:70:db:cf:fa:5d:f1:
                    3a:e8:f6:03:15:d1:87:a3:83:9f:2b:96:73:55:ea:
                    49:a3:2b:72:41:b5:ad:87:4b:37:d4:fb:9d:6c:4a:
                    59:86:df:4a:ff:6c:b4:10:d2:01:af:4e:50:ae:aa:
                    f5:34:40:6b:a4:5f:99:08:f0:e6:23:dd:13:d5:5b:
                    13:c6:9d:12:c4:97:f3:3f:d5:36:4a:7b:bb:38:38:
                    42:a9:29:2b:6a:62:25:cb:14:77:f5:40:5b:a3:a7:
                    75:19:39:4f:e8:87:98:6e:aa:f9:da:dd:c9:61:16:
                    73:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D7:76:61:86:D1:F1:DC:14:FF:27:A4:40:22:A7:56:6C:2A:D4:74
            X509v3 Authority Key Identifier:
                keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:36:5b:d2:cb:3b:05:8e:27:6f:7f:6b:ba:fc:29:d4:35:e3:
         85:d0:57:98:5b:6d:07:e0:13:34:81:66:50:da:0d:b8:ed:fe:
         58:30:43:5c:a5:02:6d:17:3e:3a:5d:6f:78:27:7d:a3:b8:f8:
         61:d6:d1:5d:5a:0e:83:4e:c4:3d:44:2b:ac:3b:37:29:d5:e9:
         7c:75:7a:bc:ec:2c:81:02:1f:b3:54:3f:85:e9:0d:be:48:f5:
         25:af:9a:aa:c5:e7:3a:ea:cf:2e:c1:ca:eb:0a:86:c6:36:a3:
         43:9d:f8:57:83:38:f1:b9:4f:e7:26:fd:7b:79:7a:4a:d9:61:
         a1:50:17:74:c8:8b:cb:32:5a:4f:4a:95:56:2a:e6:81:dd:0d:
         aa:d6:58:81:ef:4f:19:a9:41:a1:3c:ba:f8:3b:ce:04:5c:0a:
         f3:01:ab:5a:61:1e:62:d5:17:c3:ef:b8:a3:78:7d:9d:7c:5d:
         52:3c:24:25:48:dc:e2:6a:ff:05:2a:67:ed:4d:55:71:b2:62:
         62:ea:77:ad:64:6c:f6:79:6a:e4:4d:f5:4e:dd:ba:91:9a:88:
         e2:02:07:61:83:72:4f:ca:6f:b2:ae:04:6a:ed:78:4d:40:e4:
         10:99:70:58:5b:8a:ea:f0:03:40:40:22:ce:a6:75:2e:ee:f5:
         38:22:ce:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 13:32:23 2024 by rpki-client on console-ams.rpki-client.org