Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/3130332e3134372e3131352e302f32342d3234203d3e203438343635.roa
File:                     3130332e3134372e3131352e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          w2tRSLiLgHJy1W/6XsyVINn6a4HucZp7ol94fDbTiO8=
Subject key identifier:   0C:09:4E:97:7F:DF:5D:34:06:9E:40:4E:AD:45:21:12:8E:46:82:1D
Certificate issuer:       /CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74
Certificate serial:       3CCDEAD0AA59181B7CD9C8ABE0AB20FBB340A9EB
Authority key identifier: CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/3130332e3134372e3131352e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 15 Jul 2024 02:49:20 +0000
ROA not before:           Mon 15 Jul 2024 02:44:20 +0000
ROA not after:            Mon 14 Jul 2025 02:49:20 +0000
asID:                     48465
IP address blocks:        103.147.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl
                          rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:37:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cd:ea:d0:aa:59:18:1b:7c:d9:c8:ab:e0:ab:20:fb:b3:40:a9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74
        Validity
            Not Before: Jul 15 02:44:20 2024 GMT
            Not After : Jul 14 02:49:20 2025 GMT
        Subject: CN=0C094E977FDF5D34069E404EAD4521128E46821D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:ff:89:cc:87:b8:62:f4:6b:90:e1:0a:e9:
                    54:67:43:d2:b6:08:56:91:3f:12:2e:d9:43:b7:e7:
                    0d:87:e1:e2:52:3d:48:a9:d6:67:a7:40:11:4c:47:
                    02:71:c5:c1:76:ca:de:8b:d9:da:2d:87:48:96:8b:
                    37:55:16:b7:5a:a4:6d:c3:00:26:ef:05:f7:c2:13:
                    54:94:82:a5:95:f3:fd:d8:0e:b7:83:b9:68:e7:28:
                    0d:ae:8e:3e:9c:72:db:49:48:ce:72:a3:49:10:4f:
                    50:f9:c6:fd:06:0c:55:4c:6c:f1:e2:f9:59:22:75:
                    31:a3:89:d5:0c:8e:c9:9e:45:4e:57:ef:2a:1d:36:
                    3f:d0:03:dd:fe:3f:8b:28:1c:ed:0b:99:5d:05:20:
                    05:3a:63:91:cf:0d:0c:3b:26:c8:65:15:b6:16:47:
                    f4:5a:9b:70:0c:24:16:c3:0e:3a:8e:04:d3:71:9e:
                    6b:9b:6f:05:a5:d7:b2:8c:1a:80:e9:1d:b3:d4:6a:
                    87:1e:71:1c:0d:22:ab:c2:d9:d6:01:d4:99:98:08:
                    9d:5c:5e:5d:5e:aa:ce:e2:ba:0b:7e:63:37:d7:f4:
                    8b:cd:04:3c:ab:5c:90:74:8f:12:22:30:fa:57:c3:
                    20:0a:83:77:d2:73:0b:27:e1:13:e1:eb:b9:01:2a:
                    6d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:09:4E:97:7F:DF:5D:34:06:9E:40:4E:AD:45:21:12:8E:46:82:1D
            X509v3 Authority Key Identifier:
                keyid:CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/3130332e3134372e3131352e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:c7:e2:d1:a1:cb:6e:2f:0b:12:a2:d7:81:22:9a:c7:5f:50:
         65:16:1e:16:73:d8:ab:04:cf:9b:88:92:8d:06:bc:13:7e:dc:
         07:7a:02:44:38:70:17:68:2b:32:0f:37:6d:f5:04:73:0a:5c:
         0d:08:ea:ee:5f:75:b6:75:8e:a3:c6:73:9a:93:53:9f:d1:f0:
         b0:d0:9f:c3:49:30:a9:09:db:a8:36:d9:5d:23:df:07:e2:29:
         af:db:a6:fb:c7:24:cc:0e:f0:f1:f8:f4:e9:f2:2e:3b:6e:e1:
         07:99:fc:ac:80:dc:33:99:0e:9c:ab:d5:e4:9d:2a:21:9b:e5:
         69:fe:74:ec:a2:94:64:a8:d7:89:57:d5:da:cb:4b:01:c7:eb:
         53:1f:90:fe:43:7d:a9:cf:27:ba:ca:53:83:cc:9e:92:b5:b5:
         4f:cb:c7:8d:13:94:a6:92:95:33:21:3b:ec:6a:66:c2:ab:89:
         9d:09:d6:55:69:61:b7:99:49:14:6d:31:20:50:0d:43:03:67:
         50:0b:cd:57:0e:7d:8a:64:ad:02:92:79:9e:dd:2e:bd:a7:78:
         33:32:ba:54:69:64:be:06:40:bb:e3:87:bc:11:89:c2:f6:fb:
         4f:22:aa:8b:13:44:da:ab:f8:68:c4:03:b7:1d:9d:e8:ea:62:
         94:6b:a9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:27 2024 by rpki-client on console-fra.rpki-client.org