Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131362e302f32342d3234203d3e203536323433.roa
File:                     3130332e3234362e3131362e302f32342d3234203d3e203536323433.roa (raw, json)
Hash identifier:          Y+UxUS6aPeGipxeC6G5UP5m0SSeAQGj6LgyP5X391kk=
Subject key identifier:   95:85:16:27:99:F3:2D:14:4F:5A:07:66:8A:5E:F1:1C:0B:D7:87:25
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       4E0B66A4A4DA9CABC38BCDD38A2B385C5A85A7FA
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131362e302f32342d3234203d3e203536323433.roa
Signing time:             Wed 05 Jun 2024 10:00:00 +0000
ROA not before:           Wed 05 Jun 2024 09:55:00 +0000
ROA not after:            Wed 04 Jun 2025 10:00:00 +0000
asID:                     56243
IP address blocks:        103.246.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0b:66:a4:a4:da:9c:ab:c3:8b:cd:d3:8a:2b:38:5c:5a:85:a7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Jun  5 09:55:00 2024 GMT
            Not After : Jun  4 10:00:00 2025 GMT
        Subject: CN=9585162799F32D144F5A07668A5EF11C0BD78725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3a:db:0d:09:4a:c7:ca:8e:78:47:d5:14:e6:
                    3d:3c:13:7b:2a:e3:5b:1a:b2:1d:ed:de:63:b7:75:
                    23:71:ea:fa:39:a4:77:fe:dd:c1:08:c3:50:91:37:
                    91:b7:c9:4a:7d:7b:2e:b9:bb:12:b4:b6:7c:4c:2e:
                    f1:3b:92:e8:01:f9:26:6a:88:d9:78:99:4c:b8:37:
                    84:e9:1c:6a:d8:8f:b1:0d:d7:d9:82:37:82:f0:66:
                    08:39:44:62:45:a1:61:ad:94:eb:2b:7c:59:9d:bb:
                    59:7b:98:84:d8:79:f3:45:41:a9:52:81:bd:eb:eb:
                    54:1f:50:93:b6:40:85:87:20:c0:a6:5d:3f:b2:75:
                    be:4a:09:49:a6:ca:4b:a8:f5:dc:18:4f:97:d9:bf:
                    26:c3:52:e5:f7:e8:5a:a3:76:42:f8:a3:49:28:a6:
                    4e:81:1f:b6:bc:23:21:ef:6e:78:6a:ec:af:b6:12:
                    eb:18:93:71:77:48:e4:76:11:72:62:17:6c:06:28:
                    41:61:17:85:3e:39:63:95:94:27:0e:43:35:f8:e9:
                    5c:00:d1:bf:cb:55:31:4a:f3:8f:56:82:aa:30:4e:
                    03:7c:23:d4:92:96:83:22:d0:cd:3e:7d:e3:1a:ac:
                    ac:14:cd:35:25:b2:9e:16:48:d1:ef:99:ea:19:05:
                    75:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:85:16:27:99:F3:2D:14:4F:5A:07:66:8A:5E:F1:1C:0B:D7:87:25
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131362e302f32342d3234203d3e203536323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:16:f3:36:97:fb:52:f4:50:b9:1a:51:0e:96:c4:fd:b7:a2:
         69:64:6f:00:26:34:9c:bb:ef:f0:9b:ca:32:33:a5:42:1e:1d:
         30:7d:c8:b2:3f:64:52:a4:3b:48:71:36:ce:d0:06:c0:9b:97:
         08:7d:7d:69:2c:ac:e9:0c:10:84:e5:03:37:a3:87:2a:8b:4a:
         ed:5e:38:c1:d5:a5:44:29:8b:4f:b7:12:c4:9c:39:c2:f6:f4:
         54:f7:51:e0:57:c5:4a:3c:2c:35:a0:2d:47:7c:60:2b:70:6b:
         f7:f5:11:75:94:3a:ae:24:5b:3f:ee:fa:1f:42:4e:d2:e6:89:
         cc:28:51:7e:eb:6e:7d:45:50:60:19:57:38:cd:84:64:40:5c:
         46:f8:fd:99:76:7b:30:6b:33:ed:75:e4:3e:45:f6:17:c1:6a:
         ed:5e:57:fc:ff:80:59:cd:80:18:19:21:c2:7e:be:3e:5a:89:
         ce:44:f2:df:a1:97:b7:4b:10:45:f0:8a:23:00:9c:71:c5:0a:
         30:3a:01:f0:e7:35:66:bb:9f:ba:c3:0a:93:32:67:fa:bc:74:
         26:29:1a:e5:0b:72:d9:9f:db:ee:c8:33:73:a6:7e:30:52:3e:
         79:c9:67:e6:4a:2f:30:ca:d5:bd:f6:b2:33:25:85:79:ee:75:
         7a:f2:63:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:03 2024 by rpki-client on console-ams.rpki-client.org