Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa
File:                     3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (raw, json)
Hash identifier:          y7Qq0j4EfiWZTERAoMjrFjVuVHwxk6tWtmZhqDzPKGU=
Subject key identifier:   EF:5F:BD:55:16:1C:F3:82:42:F8:38:79:04:13:7C:AF:F1:BD:68:76
Certificate issuer:       /CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Certificate serial:       693F3162DEBC9C867A6745769291CBF4F8B903CA
Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa
Signing time:             Mon 01 Jul 2024 01:02:38 +0000
ROA not before:           Mon 01 Jul 2024 00:57:38 +0000
ROA not after:            Mon 30 Jun 2025 01:02:38 +0000
asID:                     132649
IP address blocks:        103.24.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl
                          rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:3f:31:62:de:bc:9c:86:7a:67:45:76:92:91:cb:f4:f8:b9:03:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E
        Validity
            Not Before: Jul  1 00:57:38 2024 GMT
            Not After : Jun 30 01:02:38 2025 GMT
        Subject: CN=EF5FBD55161CF38242F8387904137CAFF1BD6876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2a:83:64:e3:8c:da:41:66:90:42:08:f3:4e:
                    6d:e0:d6:ba:40:ea:35:1e:8a:ca:c9:04:7e:2b:b2:
                    73:ff:62:bf:22:99:04:f1:56:ec:0b:05:81:aa:8d:
                    bd:65:49:86:8e:09:6c:ce:1c:34:5e:f3:74:8e:8f:
                    8e:71:a1:ec:a7:00:43:9a:16:b8:20:44:8d:21:4a:
                    f8:e2:07:b0:78:51:c6:ea:09:ac:b5:bc:79:88:04:
                    d2:be:4e:66:f1:de:b6:d4:8f:f7:65:fb:46:9b:e4:
                    6a:39:53:35:1d:9f:97:64:84:de:e1:4b:01:c9:9e:
                    de:00:73:c3:e9:f5:1c:f6:da:31:64:0c:44:fb:f6:
                    97:03:19:c5:ff:72:08:34:cd:65:5a:ad:c4:11:fc:
                    b5:7b:52:01:ee:15:ea:7b:87:51:50:f9:32:fe:dd:
                    d1:de:93:2b:f4:d1:e3:89:62:17:37:7d:88:d9:48:
                    61:84:9d:73:5c:fb:56:88:6d:05:f3:32:36:ec:6a:
                    25:4d:16:ad:fe:b5:4b:43:53:ce:75:34:27:29:64:
                    a9:3d:92:8e:aa:fb:a4:7a:8f:de:dd:4e:56:4e:9e:
                    95:3c:aa:66:e3:ce:d8:5d:7e:30:c0:fc:53:0c:c4:
                    0e:9a:0d:7a:c0:ec:29:05:fc:3a:a3:2d:1c:1b:17:
                    a9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5F:BD:55:16:1C:F3:82:42:F8:38:79:04:13:7C:AF:F1:BD:68:76
            X509v3 Authority Key Identifier:
                keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:30:6b:12:07:91:73:ec:f6:e3:7a:7b:70:e6:d7:80:9f:d1:
         d9:b5:b3:c9:ff:1f:fc:84:1f:f5:3a:ab:31:bd:10:ba:95:f6:
         11:dc:94:38:ae:03:5f:eb:bf:59:71:0f:b2:9c:aa:a1:15:a3:
         d2:df:8f:da:f4:f2:e9:ed:6c:a5:ba:98:1d:2c:15:0b:ff:11:
         5b:ae:50:e4:b4:be:b9:33:b2:0f:64:ae:7c:be:ba:a7:20:4d:
         c2:e6:c2:1c:7f:cd:16:aa:6b:c1:18:ef:c2:6d:a8:87:7b:30:
         d7:31:50:24:c6:51:61:6b:9a:8a:71:36:54:43:8c:4b:b4:8f:
         1b:b7:ec:84:bb:f4:b5:75:01:6f:9b:ee:18:75:17:77:64:0a:
         00:65:50:c1:0f:09:f9:75:80:d9:72:67:6e:54:aa:ed:09:37:
         7e:fd:73:89:81:e9:21:c2:6f:65:83:68:da:2f:ea:d7:75:2e:
         80:d1:0c:03:87:56:7e:8f:7c:1f:13:e2:ac:9f:48:b4:19:2d:
         0c:70:c4:93:5e:a8:b2:b7:6f:ba:d7:4c:df:da:19:e6:85:40:
         e0:8c:68:52:4d:84:4c:cf:d4:f9:02:f0:bf:2e:84:12:90:08:
         98:a5:f1:66:23:61:ce:e2:b9:18:dc:62:ac:4e:f3:95:58:8d:
         30:92:09:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:37 2024 by rpki-client on console-ams.rpki-client.org