Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa
File:                     3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa (raw, json)
Hash identifier:          wiRxcPe4GfEbjgK/5kbeuDZCueaBIhkX2z+dtn05PUg=
Subject key identifier:   A8:2C:9B:BB:B6:78:89:AF:9B:D7:F2:A1:0A:E0:02:92:89:6A:FC:3E
Certificate issuer:       /CN=08435803278DC5796EE67697996454D656195D4C
Certificate serial:       7C1B9CFD49AB5538E485BFCC81A8E04BB4026A14
Authority key identifier: 08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa
Signing time:             Tue 19 Mar 2024 06:16:02 +0000
ROA not before:           Tue 19 Mar 2024 06:11:02 +0000
ROA not after:            Tue 18 Mar 2025 06:16:02 +0000
asID:                     131775
IP address blocks:        103.230.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl
                          rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 May 2024 17:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1b:9c:fd:49:ab:55:38:e4:85:bf:cc:81:a8:e0:4b:b4:02:6a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08435803278DC5796EE67697996454D656195D4C
        Validity
            Not Before: Mar 19 06:11:02 2024 GMT
            Not After : Mar 18 06:16:02 2025 GMT
        Subject: CN=A82C9BBBB67889AF9BD7F2A10AE00292896AFC3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3d:76:03:f8:1e:53:b8:43:d4:97:2e:62:80:
                    82:52:2c:ce:dd:2d:17:4e:ea:43:5c:c2:ed:38:af:
                    f4:83:5e:1f:54:2f:33:bc:d2:e0:25:76:59:08:b6:
                    0b:6b:71:3e:6b:b2:75:42:ba:5e:ab:0e:81:e8:b4:
                    94:d6:91:72:a0:87:d4:44:34:08:e2:e5:88:2d:f3:
                    c5:da:d8:e1:c2:6b:7a:fd:10:e1:44:2a:31:1f:a2:
                    a2:58:12:1b:79:c9:fd:4e:ee:31:47:33:f1:49:bf:
                    6f:cd:22:f9:b8:f3:cd:fc:87:db:67:96:3d:5a:42:
                    24:6a:b7:4b:22:1c:5e:da:e0:bc:1e:b2:16:ec:d6:
                    37:f2:0d:7d:62:95:9f:bd:4b:32:f6:8e:6d:80:d8:
                    c2:ca:aa:3d:39:26:ca:82:fb:2d:14:e5:35:fa:f5:
                    38:ea:0a:88:35:af:2b:f4:8b:4d:85:55:f9:3c:5d:
                    5a:c2:3e:38:57:ea:f0:06:93:9b:18:f9:c4:81:10:
                    c0:10:ae:1a:be:f2:21:f7:24:e3:b5:95:cd:4e:fa:
                    de:5a:13:73:91:46:2e:72:7f:4d:54:43:ad:d7:21:
                    c7:f3:08:83:75:2a:62:a4:df:55:ef:9b:57:fd:fd:
                    b8:e1:35:98:cd:a9:1b:5e:5a:79:38:a4:69:7d:02:
                    2f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2C:9B:BB:B6:78:89:AF:9B:D7:F2:A1:0A:E0:02:92:89:6A:FC:3E
            X509v3 Authority Key Identifier:
                keyid:08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:e7:da:0d:82:32:6e:8f:fe:81:b7:38:e6:54:77:8c:ac:05:
         16:d5:5f:5f:a1:3f:22:c6:04:ba:da:63:cd:43:d6:c1:58:04:
         ac:db:b9:b1:30:4f:62:f7:f0:90:3b:a4:64:f8:b4:17:7d:78:
         9c:03:16:9f:0a:3e:f1:8a:72:99:14:5a:eb:6c:84:12:01:9f:
         6a:d7:af:ba:4b:21:99:2b:67:04:fb:a3:eb:0a:85:2d:df:46:
         c0:e5:4f:90:e0:ce:ff:1b:88:d7:49:a6:8c:e2:31:11:64:1c:
         65:dd:4b:58:d0:ac:a5:2a:c4:32:a6:27:30:48:45:7b:cf:18:
         1e:b7:13:bf:95:3f:db:1e:60:6a:6c:1b:b6:d0:c7:59:eb:76:
         e9:f2:ea:01:e9:6d:96:24:06:e2:48:0d:a1:e4:62:d6:1b:eb:
         ef:bc:3e:a3:64:c3:7f:88:40:e2:b9:5f:dd:43:de:29:73:9f:
         fa:02:9d:ff:e3:4a:21:99:d1:ca:7e:42:17:33:06:d9:b7:94:
         5c:72:33:43:00:8a:eb:96:f9:bd:4a:29:88:05:86:c6:99:ee:
         8d:a4:4d:14:02:53:94:97:8c:76:7c:b5:d9:73:d4:46:8e:cc:
         30:df:fe:cf:a3:ed:ce:37:d7:4c:94:b4:16:b0:98:93:dc:11:
         04:f4:1f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:40:14 2024 by rpki-client on console-fra.rpki-client.org