Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e3139382e39332e302f32342d3234203d3e203435373138.roa
File:                     3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (raw, json)
Hash identifier:          69oBW4hm1y2NDi+Ui7EwLal1ftiRGLIIZ+0jRggeiZ0=
Subject key identifier:   B5:A6:70:1C:CB:79:B4:52:15:B0:DF:21:48:4F:87:14:15:7F:8D:2E
Certificate issuer:       /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
Certificate serial:       247DF061BA4A26EE60B26ADF0039259DA6913E4B
Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e3139382e39332e302f32342d3234203d3e203435373138.roa
Signing time:             Sat 20 Apr 2024 08:02:00 +0000
ROA not before:           Sat 20 Apr 2024 07:57:00 +0000
ROA not after:            Sat 19 Apr 2025 08:02:00 +0000
asID:                     45718
IP address blocks:        103.198.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl
                          rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 08:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7d:f0:61:ba:4a:26:ee:60:b2:6a:df:00:39:25:9d:a6:91:3e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
        Validity
            Not Before: Apr 20 07:57:00 2024 GMT
            Not After : Apr 19 08:02:00 2025 GMT
        Subject: CN=B5A6701CCB79B45215B0DF21484F8714157F8D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4c:0e:c6:14:78:36:21:33:71:12:6c:63:b0:
                    fb:be:e5:4e:19:d0:c9:bb:c3:80:a2:bd:07:76:c7:
                    9d:27:04:6d:4a:c0:37:17:51:99:40:4d:d4:d9:c6:
                    6d:07:bc:f0:cb:59:78:48:4b:3b:61:b7:f0:bc:f6:
                    a5:b9:15:24:c8:79:03:11:98:59:a7:99:6d:f5:29:
                    e5:54:bc:e2:fa:cd:85:ff:de:c3:eb:f3:e2:6f:d4:
                    34:e8:df:8b:17:8a:b0:0f:ab:cf:5d:c1:9e:24:79:
                    bf:08:6c:ce:09:28:ad:cd:8c:be:42:38:53:ee:71:
                    1e:89:7a:bb:1b:07:34:86:00:df:33:7a:91:d5:a8:
                    36:46:0a:2a:d3:be:33:6f:0d:20:7f:7f:08:a5:19:
                    50:26:ef:a2:1d:63:29:73:bd:50:dc:e6:82:bb:54:
                    ff:c8:9c:dd:40:f3:fe:79:e0:31:77:f3:5e:db:f8:
                    d6:94:1f:ed:91:ec:30:43:ab:ef:fd:e1:0a:27:82:
                    b3:9a:64:d6:f7:c9:f4:e0:ba:dd:94:7f:4d:bb:dd:
                    9e:50:1c:5f:47:58:ec:ea:da:c7:5d:b7:ed:57:0c:
                    06:63:10:ab:57:9d:d0:2a:e0:37:48:4a:fc:b5:47:
                    3c:4c:5e:9a:c8:df:63:e4:5e:b4:df:e3:6b:d9:3c:
                    fe:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A6:70:1C:CB:79:B4:52:15:B0:DF:21:48:4F:87:14:15:7F:8D:2E
            X509v3 Authority Key Identifier:
                keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e3139382e39332e302f32342d3234203d3e203435373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:51:17:f7:a4:da:27:56:1e:f6:a5:42:6c:10:0c:ac:92:eb:
         ff:23:73:98:e7:f1:43:be:ae:3b:a1:d7:8f:1d:0a:35:b6:56:
         cb:e5:fe:d3:ab:0d:92:0a:83:c9:ef:fc:24:22:c3:39:68:7c:
         74:b5:50:d0:11:8f:2d:cc:2f:97:95:33:88:ce:07:78:c1:09:
         46:24:ff:83:80:3f:4d:34:0d:93:e8:ff:38:4d:6f:6a:fe:79:
         9f:ec:57:85:a4:4c:bd:3a:e3:6d:96:39:db:a9:82:46:a4:11:
         e9:ea:8c:de:ef:25:b8:9b:58:6d:87:f8:3d:0d:6a:f1:0c:97:
         5b:60:d7:70:0b:92:30:cf:96:99:9e:3c:59:34:6e:a5:3f:1f:
         6b:ac:e2:3f:c8:53:cc:b3:fd:19:21:f4:ce:7d:bd:41:41:e1:
         66:04:20:96:86:c9:da:63:ca:ff:7f:b1:f1:5f:73:55:bb:6d:
         c0:94:7c:db:66:f5:98:ac:28:f7:6e:c2:7b:44:00:4f:31:74:
         32:d3:74:7a:33:6b:27:03:a1:85:a2:53:2f:6d:52:08:d0:dc:
         2c:20:97:f1:7c:a7:2c:f6:7f:6f:b9:34:d8:b2:44:e1:f9:e2:
         ef:f2:b0:00:bb:ad:95:e0:e4:14:26:76:17:69:f7:08:ef:45:
         05:36:1c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:21 2024 by rpki-client on console-fra.rpki-client.org