Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/3130332e3134362e33302e302f32332d3234203d3e203634333135.roa
File:                     3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (raw, json)
Hash identifier:          nIdx/CkGkDE11C1yZ5NWr3yO0PZgfsi4TR1nKgQMjiY=
Subject key identifier:   C5:A5:FE:1E:44:FD:BB:9C:5B:1B:87:57:90:5E:9C:84:67:62:0A:22
Certificate issuer:       /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5
Certificate serial:       11C64AF8A1C0C8E4B4747992F7EF14DD6372048C
Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/3130332e3134362e33302e302f32332d3234203d3e203634333135.roa
Signing time:             Mon 31 Jul 2023 00:09:02 +0000
ROA not before:           Mon 31 Jul 2023 00:04:02 +0000
ROA not after:            Mon 29 Jul 2024 00:09:02 +0000
asID:                     64315
IP address blocks:        103.146.30.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl
                          rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 20:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c6:4a:f8:a1:c0:c8:e4:b4:74:79:92:f7:ef:14:dd:63:72:04:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5
        Validity
            Not Before: Jul 31 00:04:02 2023 GMT
            Not After : Jul 29 00:09:02 2024 GMT
        Subject: CN=C5A5FE1E44FDBB9C5B1B8757905E9C8467620A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ef:cc:a7:14:31:ae:ad:dc:d5:42:fc:8f:fc:
                    cc:a3:9d:cd:e0:43:8a:2c:22:a5:54:63:fa:82:1f:
                    d3:ee:0d:ae:08:bf:d1:43:d8:79:ed:72:55:84:fa:
                    a7:b8:b9:f6:f8:ff:00:d8:d7:c0:96:11:aa:aa:14:
                    1b:f1:42:1e:7a:e8:9a:a0:10:89:14:bf:7d:30:e1:
                    ee:8d:32:17:28:aa:9e:36:19:55:f3:db:86:a9:4c:
                    71:5b:14:7b:64:97:31:33:be:25:7f:c3:5a:31:de:
                    7c:04:2a:7f:16:eb:88:c4:4a:ab:ae:de:80:32:f8:
                    47:87:18:bf:7e:71:17:fe:26:9c:95:3e:d1:10:ad:
                    e2:9b:3a:d5:c2:c5:95:13:68:2d:68:98:27:2a:31:
                    06:be:eb:a9:c2:66:df:41:bb:56:d0:0a:17:68:68:
                    7b:2f:9c:f5:0b:30:e7:7c:69:cb:d5:28:e3:bf:68:
                    65:09:a9:b6:0a:36:da:63:af:d6:f4:83:e6:85:da:
                    1c:6f:72:82:a3:34:52:d1:cd:c1:92:24:7e:17:e7:
                    05:6f:50:8b:52:14:00:fc:58:4e:94:b1:a6:00:d8:
                    a6:b8:23:3e:d6:15:16:9a:db:7f:ec:70:5a:12:49:
                    f0:fc:a8:af:81:52:6a:99:53:f5:bb:12:6b:ef:d0:
                    84:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A5:FE:1E:44:FD:BB:9C:5B:1B:87:57:90:5E:9C:84:67:62:0A:22
            X509v3 Authority Key Identifier:
                keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/3130332e3134362e33302e302f32332d3234203d3e203634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:c9:b8:0e:a3:5b:b3:45:e2:91:26:6b:10:d5:22:42:fa:1a:
         be:4a:45:7a:e0:ce:51:d0:a8:fc:7c:e5:63:4c:33:cb:d7:15:
         d5:af:ac:cf:2e:13:4c:05:93:11:c4:04:27:66:72:87:fb:91:
         4b:95:bb:bf:a2:ea:ba:ba:d5:17:3c:3a:79:37:ba:00:d4:8e:
         bc:04:dd:9d:2f:df:2d:c2:04:b3:e6:4c:b6:97:a7:2c:1f:86:
         59:d9:38:15:7d:fb:4d:25:19:29:0b:22:9c:1f:9d:af:69:e4:
         7d:a9:dd:12:4a:12:79:43:fe:f1:2c:c1:53:30:f2:13:d7:19:
         5c:e1:0e:31:02:62:a0:be:7d:c0:99:05:da:fb:e3:46:eb:8f:
         53:a0:f8:4d:62:29:50:8e:a0:20:93:51:4c:65:7a:17:8e:ac:
         50:1f:a7:d8:87:f9:61:92:c9:f5:32:f7:f1:21:a9:18:9c:c2:
         1d:d5:e1:d0:a2:2c:86:09:02:77:94:90:1c:4a:00:6e:1b:36:
         76:96:e7:90:45:3a:92:2e:9e:b6:03:b6:29:e4:63:44:07:0e:
         9c:b4:ca:e0:7c:b7:b2:b2:35:c5:de:d6:6f:96:b5:b8:df:01:
         3c:70:48:9e:bb:a3:63:5c:11:68:55:d0:af:0a:9b:6b:32:11:
         55:db:a7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 10:26:11 2024 by rpki-client on console-ams.rpki-client.org