Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132312e302f32342d3234203d3e203536323436.roa
File:                     3130332e31302e3132312e302f32342d3234203d3e203536323436.roa (raw, json)
Hash identifier:          JCM/xQ99KjPxQdsSlMreBXFm0dVsmCRQihJxJoySw4Y=
Subject key identifier:   C7:22:CF:FD:C7:0F:E8:66:46:4F:78:3C:21:6D:17:C2:E2:41:5A:4F
Certificate issuer:       /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
Certificate serial:       4C0D10320239C25BBE05E5F7990A7DCD3A4CAD5C
Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132312e302f32342d3234203d3e203536323436.roa
Signing time:             Mon 31 Jul 2023 00:03:57 +0000
ROA not before:           Sun 30 Jul 2023 23:58:57 +0000
ROA not after:            Mon 29 Jul 2024 00:03:57 +0000
asID:                     56246
IP address blocks:        103.10.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl
                          rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:0d:10:32:02:39:c2:5b:be:05:e5:f7:99:0a:7d:cd:3a:4c:ad:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
        Validity
            Not Before: Jul 30 23:58:57 2023 GMT
            Not After : Jul 29 00:03:57 2024 GMT
        Subject: CN=C722CFFDC70FE866464F783C216D17C2E2415A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:df:d9:71:bd:b3:df:86:68:b8:b9:d8:63:e1:
                    92:fb:f4:8f:8d:d7:3b:39:ac:03:f9:ef:b6:a2:7c:
                    d9:79:c2:a1:d6:91:f2:89:56:51:42:69:f2:c2:6a:
                    a8:e7:2b:86:bf:f3:1f:22:9f:fb:a0:03:b2:dc:91:
                    ae:84:1c:37:1e:97:33:c2:3b:4a:2f:41:3d:0d:78:
                    fc:20:66:49:64:f1:75:7d:4f:35:69:63:f1:54:fc:
                    27:08:65:17:21:12:72:15:29:5b:62:01:12:a5:d5:
                    50:9c:68:14:cc:bc:09:71:84:ca:cc:05:0c:54:a2:
                    f9:9f:7b:72:fa:7b:8f:0a:56:85:56:3c:34:39:7c:
                    be:98:a5:cd:50:75:6f:f1:ce:02:ba:89:30:9e:13:
                    43:73:4c:6a:98:b6:07:87:a5:42:d2:a4:9d:94:f7:
                    fe:26:29:fb:9c:8f:8f:07:20:d0:4f:62:56:51:73:
                    6b:77:9b:48:9e:58:69:bf:24:72:33:cb:89:e6:43:
                    37:7d:06:1c:70:c3:43:92:5f:48:77:f2:42:8d:e0:
                    56:f3:4a:89:ec:04:ed:1d:9a:89:fc:da:02:d5:56:
                    91:25:cd:84:69:cb:eb:c6:fd:f6:c0:04:6b:0f:e2:
                    ee:d5:0e:1d:7c:94:23:a5:b3:d3:e9:10:a4:41:df:
                    c4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:22:CF:FD:C7:0F:E8:66:46:4F:78:3C:21:6D:17:C2:E2:41:5A:4F
            X509v3 Authority Key Identifier:
                keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132312e302f32342d3234203d3e203536323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:1d:c6:01:9e:f6:94:6f:c5:88:bf:8b:60:79:76:0d:46:c7:
         20:a2:7d:da:40:ef:46:5d:33:0d:3c:73:84:55:76:91:79:03:
         39:b4:05:db:06:8c:cd:31:b9:c6:d1:62:e4:f1:43:e6:67:c6:
         78:32:2d:00:8c:0b:50:c9:90:b2:11:5a:c5:49:c4:e5:68:b0:
         57:6b:e2:1d:71:db:91:77:f5:cf:67:b5:07:4f:e4:af:5e:a3:
         81:71:ad:5a:04:7f:c8:44:02:24:7c:2c:0a:1e:37:3f:36:54:
         98:25:4e:90:04:e8:ca:67:3e:41:e6:8e:62:96:c5:e4:fb:7a:
         78:b8:80:48:a2:81:10:a1:8d:7a:98:54:1c:c9:d6:dd:1b:62:
         e0:f5:5e:2f:dc:7a:88:2a:3d:6b:70:4f:5c:92:dc:78:3e:c0:
         f5:44:14:13:77:61:b6:ba:42:2d:97:ee:8e:55:46:61:1c:e4:
         76:f3:35:9d:e1:43:69:3d:0f:35:35:09:cf:e0:cb:2d:5b:52:
         b0:83:de:1c:6c:d3:04:10:8b:88:2e:82:0c:f9:62:14:9e:05:
         4d:3d:80:1d:79:b0:fd:76:5e:cc:0a:7a:e7:c6:17:c5:83:69:
         5a:55:fd:c9:e2:69:18:74:f8:d5:d5:d6:02:b9:64:a2:a5:be:
         5e:e9:c6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 11:24:28 2024 by rpki-client on console-fra.rpki-client.org