Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa
File:                     3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (raw, json)
Hash identifier:          mVS7N+pQZFxrDBLA4I0j9lsmOV6zsmGs0bGDDwzSSRA=
Subject key identifier:   62:DD:60:B7:44:7F:42:74:AC:38:AF:23:36:9D:2B:07:A4:17:F6:89
Certificate issuer:       /CN=46E596CAE0AEADA8B4135425216E8783D92E6C76
Certificate serial:       5D56EE9039FBBE97EC3D7E2938B02F2823C5B53F
Authority key identifier: 46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa
Signing time:             Thu 03 Aug 2023 02:34:08 +0000
ROA not before:           Thu 03 Aug 2023 02:29:08 +0000
ROA not after:            Thu 01 Aug 2024 02:34:08 +0000
asID:                     151530
IP address blocks:        103.242.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl
                          rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:56:ee:90:39:fb:be:97:ec:3d:7e:29:38:b0:2f:28:23:c5:b5:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E596CAE0AEADA8B4135425216E8783D92E6C76
        Validity
            Not Before: Aug  3 02:29:08 2023 GMT
            Not After : Aug  1 02:34:08 2024 GMT
        Subject: CN=62DD60B7447F4274AC38AF23369D2B07A417F689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:a1:b8:a8:dd:46:48:9d:c2:9e:b6:6c:b4:
                    cc:c9:75:19:f4:a8:08:64:1d:4d:c1:91:11:86:1b:
                    55:86:e4:cd:d9:46:2d:b6:0c:9b:db:77:71:6a:d1:
                    c7:40:f0:b8:e0:0b:03:50:15:12:b7:42:55:09:70:
                    60:de:00:27:20:b1:1a:e5:cf:69:9d:da:0a:0e:4e:
                    4f:23:10:1f:fe:85:fa:b0:50:65:40:27:14:8d:b0:
                    43:a8:25:b6:dd:9b:40:d0:d9:65:3c:a4:9a:76:2a:
                    01:bf:a5:d5:da:04:23:33:19:97:6f:02:e6:b6:cc:
                    e2:4f:ba:74:d0:bb:9d:98:e3:a7:2e:bd:c4:70:0e:
                    5f:08:e3:af:16:34:93:76:e1:91:6b:c9:02:2d:64:
                    e3:9c:ac:db:11:4a:75:08:03:0f:72:b6:83:f2:a3:
                    14:35:dd:70:20:2a:31:6c:a8:52:c7:5e:dd:9a:2d:
                    0c:d7:19:0a:89:09:9a:c9:99:11:c0:a9:42:54:33:
                    6e:73:49:ad:fd:a0:23:0a:6e:88:e6:cf:c0:fb:26:
                    4f:17:72:6b:32:d4:bc:e8:a8:45:44:50:85:8c:68:
                    fb:58:db:b9:ae:08:9a:24:75:32:ea:08:c2:28:f8:
                    ea:ab:2c:d1:90:5c:78:07:29:d3:9c:e1:20:68:35:
                    97:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DD:60:B7:44:7F:42:74:AC:38:AF:23:36:9D:2B:07:A4:17:F6:89
            X509v3 Authority Key Identifier:
                keyid:46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:4a:99:ea:85:6b:41:d9:b9:bc:55:c6:e1:3c:12:f0:bd:9e:
         14:df:09:c8:68:3b:6f:af:0c:f6:9b:ed:24:d9:a5:96:ef:5c:
         50:3b:e3:84:f9:b4:8d:4b:49:f6:2a:94:37:bd:b4:0d:97:9a:
         e1:a4:45:bf:72:96:c2:27:b3:8c:40:5d:70:a3:f9:ef:30:66:
         9c:dd:fe:67:80:bb:55:81:be:a3:b4:26:2f:8c:45:71:94:74:
         1c:04:6a:da:dd:50:05:2f:7a:7c:99:ab:dd:21:6f:7a:67:41:
         81:27:d8:2a:bd:73:32:7b:be:1a:a5:6d:8f:09:a7:c7:0b:cb:
         95:34:d8:06:94:c8:46:5d:c5:7d:fb:f1:f3:2e:cd:af:39:ad:
         e6:28:f1:f4:ba:81:93:ef:50:ac:b1:9a:31:2b:ad:49:06:ff:
         6c:b8:58:62:e1:0d:3e:c6:12:56:1e:a4:d0:27:dd:fe:73:22:
         51:9d:0b:d0:15:6e:73:50:d9:03:f3:3b:c0:0e:14:31:5d:ec:
         5c:86:ab:20:3c:80:f9:a2:3e:16:21:03:88:52:41:25:e1:10:
         31:79:ad:79:bc:dc:05:8b:c5:b7:84:d5:3d:59:25:53:d6:f7:
         ab:98:b6:5c:49:2d:5a:8e:18:83:c3:72:00:66:7e:25:c3:55:
         cc:1a:2e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:29 2024 by rpki-client on console-fra.rpki-client.org