Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa
File:                     3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (raw, json)
Hash identifier:          RTnhI30e0+wVJg3wwSc+DV3WBIt7hKNuWTy9wOhuvP4=
Subject key identifier:   D1:73:01:D5:26:A5:B8:B6:8D:7D:42:CE:31:77:71:5B:2D:7E:7A:46
Certificate issuer:       /CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Certificate serial:       240A4C61616BC9817899953A96CA0E510943EC40
Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa
Signing time:             Mon 01 Jul 2024 01:02:38 +0000
ROA not before:           Mon 01 Jul 2024 00:57:38 +0000
ROA not after:            Mon 30 Jun 2025 01:02:38 +0000
asID:                     132649
IP address blocks:        103.24.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl
                          rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0a:4c:61:61:6b:c9:81:78:99:95:3a:96:ca:0e:51:09:43:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E
        Validity
            Not Before: Jul  1 00:57:38 2024 GMT
            Not After : Jun 30 01:02:38 2025 GMT
        Subject: CN=D17301D526A5B8B68D7D42CE3177715B2D7E7A46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:64:62:b5:1b:b1:ad:db:2b:7f:f7:07:7c:ff:
                    b4:5f:8a:40:88:b3:2c:46:85:76:52:25:e8:ea:f7:
                    00:57:8e:4f:40:3f:49:04:fb:40:16:10:56:3a:82:
                    35:32:67:a1:e7:e8:c9:f9:ae:8d:b6:67:42:d8:5d:
                    ea:82:ea:5e:a7:2e:01:e0:1a:fb:38:90:4b:52:00:
                    77:43:5a:47:23:ce:e9:10:99:de:04:43:ca:5a:fc:
                    8b:36:4b:27:80:0e:77:c0:da:26:8e:9a:74:b3:7c:
                    cb:53:1a:cc:fd:72:ad:9c:5d:7c:6f:81:e7:f5:ae:
                    a4:8a:d7:4f:52:0f:0d:fb:64:15:6b:33:aa:42:b0:
                    91:29:3a:03:5e:b7:f6:fb:40:9b:06:d3:30:c2:17:
                    88:33:27:b2:7b:67:ce:56:a8:52:7b:60:44:08:8e:
                    fc:a6:5b:bd:06:00:15:d3:ca:2d:cb:f8:8a:f5:e9:
                    ee:6a:81:03:f4:3a:16:07:cd:40:56:5d:21:ba:cf:
                    0b:59:66:d5:58:10:bf:1c:26:84:e6:5c:21:a1:bc:
                    76:c8:e2:33:33:c6:10:bb:f6:a0:0b:d6:66:6d:4a:
                    74:85:6c:b2:a8:02:ec:9c:c5:fb:03:09:ac:ea:c2:
                    7c:c0:a0:6f:6c:23:89:29:e2:de:a8:ca:0d:8e:93:
                    a3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:73:01:D5:26:A5:B8:B6:8D:7D:42:CE:31:77:71:5B:2D:7E:7A:46
            X509v3 Authority Key Identifier:
                keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:a5:82:9e:3f:0d:e3:3c:f7:30:b3:2a:fb:fe:f4:fe:78:58:
         cc:be:74:77:b8:5e:b5:6f:75:44:67:00:d2:23:05:bf:1c:c9:
         8f:bb:21:1b:2b:3b:3f:4c:2a:9d:bf:d5:24:af:89:59:20:10:
         91:b3:3c:18:27:16:6f:eb:bb:88:f1:c6:bf:f6:51:cb:19:65:
         4a:b6:94:dc:8d:fe:0e:0c:76:88:94:75:79:c1:0d:a0:93:e0:
         ba:44:c7:87:73:58:6f:90:b6:53:77:e9:1e:8e:32:9d:ed:2c:
         3f:61:b8:05:3e:d4:d2:8e:d1:73:70:1d:dc:05:af:f0:d2:28:
         c6:ec:6a:e4:53:c5:6d:60:2f:90:54:41:03:ca:cf:86:25:c3:
         a4:36:7f:84:86:25:93:98:d0:4b:c5:3c:ee:d5:51:e7:de:1c:
         c6:66:a0:58:40:fe:06:bd:70:5f:60:05:1a:61:01:50:74:07:
         34:19:6b:88:31:07:37:84:ea:31:db:ef:95:20:f6:bd:8a:c2:
         0f:5a:51:6b:2b:83:f9:ba:75:fe:41:e0:db:45:d4:01:00:f0:
         91:a5:bc:b8:bd:b6:2e:b8:c1:a8:84:f9:bd:81:0b:8c:59:31:
         2f:dd:0a:30:4d:78:d0:ac:8f:eb:60:82:4a:60:89:39:8b:ec:
         e0:b1:a8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:56 2024 by rpki-client on console-fra.rpki-client.org