Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa
File:                     3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (raw, json)
Hash identifier:          GrJVZH2XLjk4iPFISGvTkE2baBZez6VcH1QmZaOF9VQ=
Subject key identifier:   EF:43:08:AD:57:3C:F7:83:6B:D9:5E:40:E5:BB:36:8B:5D:3D:85:B8
Certificate issuer:       /CN=46E596CAE0AEADA8B4135425216E8783D92E6C76
Certificate serial:       3BCB4E59EA217A09992972F2159250358E35EA8B
Authority key identifier: 46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa
Signing time:             Thu 04 Jul 2024 03:02:40 +0000
ROA not before:           Thu 04 Jul 2024 02:57:40 +0000
ROA not after:            Thu 03 Jul 2025 03:02:40 +0000
asID:                     151530
IP address blocks:        103.242.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl
                          rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 11:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cb:4e:59:ea:21:7a:09:99:29:72:f2:15:92:50:35:8e:35:ea:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E596CAE0AEADA8B4135425216E8783D92E6C76
        Validity
            Not Before: Jul  4 02:57:40 2024 GMT
            Not After : Jul  3 03:02:40 2025 GMT
        Subject: CN=EF4308AD573CF7836BD95E40E5BB368B5D3D85B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fc:bb:e2:bf:ea:41:b7:6a:2d:74:8f:db:29:
                    46:84:cc:b0:34:8e:42:d7:f6:53:22:ad:0c:06:90:
                    72:5d:b2:6b:37:0a:16:0d:8c:67:74:08:88:a7:dd:
                    1e:bc:ae:5d:4d:c0:cd:43:5f:a8:c3:7d:8d:0e:f7:
                    11:a4:4d:f0:67:1b:9f:15:00:b4:31:49:ac:72:a2:
                    88:b6:46:f2:f3:de:e0:b2:c4:04:44:f8:9b:eb:40:
                    ba:d1:e5:31:bd:22:65:67:8b:47:53:2f:80:8b:11:
                    d4:80:f3:e4:3b:37:12:61:55:2c:fe:ec:94:c2:6a:
                    94:81:40:3c:b6:b2:e4:0c:09:96:2d:41:ad:6d:90:
                    1b:56:28:f0:53:62:c0:96:2d:03:1c:9b:02:28:b9:
                    e6:42:0e:1e:8f:d9:fc:84:d6:78:d1:7f:d4:ce:cb:
                    b6:72:d8:00:fc:8c:ab:d1:f2:fd:f9:61:0d:8d:0d:
                    a8:53:bc:f9:db:75:b9:ee:05:4f:e2:1d:26:68:68:
                    47:16:bc:2d:39:64:b1:07:1d:9a:26:b2:3e:83:0e:
                    94:9c:3f:26:29:b3:13:4b:51:ac:e0:2f:4e:39:3b:
                    09:33:04:06:d2:a8:46:2d:b0:27:24:54:f5:f8:b7:
                    df:94:80:c3:15:65:28:a7:73:14:63:3e:9a:cb:e4:
                    4a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:43:08:AD:57:3C:F7:83:6B:D9:5E:40:E5:BB:36:8B:5D:3D:85:B8
            X509v3 Authority Key Identifier:
                keyid:46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:9c:47:b5:2b:b1:a3:57:04:61:5e:95:45:99:15:ff:0e:f1:
         a2:07:17:85:ba:4d:ee:cc:f8:a9:67:6a:75:31:27:cb:61:9a:
         09:87:9d:04:f1:af:6f:b6:44:95:ea:9d:ba:8e:f2:db:39:8a:
         ff:b3:c8:38:51:37:01:74:59:61:08:df:1c:45:29:1a:38:6d:
         47:41:88:13:49:79:ce:42:a3:a4:00:1f:f3:2e:96:8f:0f:a3:
         70:aa:46:65:86:bc:58:7a:c4:a7:64:91:a8:cc:32:1d:75:c3:
         db:36:32:55:42:04:6d:80:6c:d4:8f:8f:08:66:60:51:2d:d7:
         81:11:4a:c7:c5:8d:6e:23:14:bc:9b:15:83:1f:a1:20:6f:47:
         48:74:60:3f:73:71:5c:58:66:a5:96:17:33:3d:7d:af:36:9f:
         e8:ce:d5:b4:a7:89:0a:20:1a:c5:98:5c:9e:5a:c1:08:bc:28:
         5e:e4:cc:ed:49:08:76:c4:97:ed:fd:38:88:17:2b:17:aa:14:
         58:b5:de:0a:36:d6:bd:82:14:67:34:8c:74:03:47:f3:83:98:
         45:69:8e:dd:26:b7:4a:3a:1b:45:83:66:d2:dd:ed:b6:31:ff:
         76:d9:03:53:e7:41:fb:50:07:09:54:a1:40:a3:9c:c8:8a:02:
         a3:4c:88:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:49:15 2024 by rpki-client on console-fra.rpki-client.org