Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa
File:                     3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (raw, json)
Hash identifier:          okSOnsTLjxdHLCwY+rCd2PFKGFvwdYfmYy2z3ckMn90=
Subject key identifier:   E8:F7:65:6D:77:01:9E:64:11:88:6A:2A:BD:D6:EC:9B:14:E1:63:B7
Certificate issuer:       /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF
Certificate serial:       314C2259D1248540EFD7577D42141303592DEABD
Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa
Signing time:             Fri 13 Sep 2024 08:00:01 +0000
ROA not before:           Fri 13 Sep 2024 07:55:01 +0000
ROA not after:            Fri 12 Sep 2025 08:00:01 +0000
asID:                     136842
IP address blocks:        103.100.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl
                          rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4c:22:59:d1:24:85:40:ef:d7:57:7d:42:14:13:03:59:2d:ea:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF
        Validity
            Not Before: Sep 13 07:55:01 2024 GMT
            Not After : Sep 12 08:00:01 2025 GMT
        Subject: CN=E8F7656D77019E6411886A2ABDD6EC9B14E163B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:18:76:ce:99:0f:d9:14:e1:c3:54:ec:0d:
                    b2:c8:fb:96:d4:3d:ea:19:cb:7a:b3:b4:c6:db:52:
                    67:7b:81:bf:74:24:c6:d6:c9:27:87:92:c4:21:e4:
                    0a:91:22:ba:b6:40:97:5b:6a:20:11:e9:1e:0c:8a:
                    4e:61:c4:8c:06:4f:b1:8f:46:2b:21:70:58:0e:71:
                    0c:b8:e0:2a:7e:d0:ee:5e:9f:b4:d7:f6:29:bf:f5:
                    b8:3c:3b:1a:fa:a5:10:cd:5c:17:5e:85:34:b4:95:
                    d7:7c:54:12:fd:9a:f9:41:27:5b:62:7c:9a:2f:6d:
                    da:fa:f2:d5:4a:d6:c5:0a:ce:93:ea:97:3f:8c:89:
                    09:2a:9d:cc:b1:ae:a9:6d:63:f8:4c:c8:ab:a0:dc:
                    30:f6:db:f0:c7:7a:2d:ed:ad:7a:a1:7b:c5:0a:f5:
                    a7:ee:c2:a9:25:63:81:37:5a:a9:04:d5:cf:09:c3:
                    2f:03:6c:4d:d4:48:4f:47:6e:20:02:aa:66:7d:60:
                    7f:4a:22:23:91:a9:5b:18:64:15:39:ee:0d:a1:d5:
                    dc:37:80:d7:ea:f0:31:3d:86:d2:bd:1b:19:22:6f:
                    c0:65:b7:46:f9:5b:22:3a:d2:29:57:3e:b2:7a:7e:
                    5e:1a:1e:8f:cd:9e:4f:b0:6c:38:9b:05:88:f8:a5:
                    a3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F7:65:6D:77:01:9E:64:11:88:6A:2A:BD:D6:EC:9B:14:E1:63:B7
            X509v3 Authority Key Identifier:
                keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:d9:8d:52:db:c0:06:b0:fc:d8:83:ba:2a:ec:65:bf:94:f8:
         79:e9:da:dc:a0:70:ac:f2:61:79:5b:b8:14:6f:a4:47:58:d8:
         84:cf:9a:c8:c7:25:e8:eb:9a:57:c7:02:b3:27:ad:ff:77:fb:
         be:a3:71:06:98:10:2a:23:84:10:94:1b:b4:48:36:ed:82:06:
         7c:8a:5f:52:bc:c9:06:a9:48:aa:2a:18:f7:ef:29:d9:f1:b1:
         5d:02:ea:d6:9c:4c:1f:9f:d4:a0:d4:f9:dd:0d:25:24:50:10:
         f7:1b:e3:e6:77:74:24:1b:a0:5e:ff:af:a8:4a:b5:09:df:b9:
         e8:5d:02:ac:76:d3:bf:95:8f:ce:54:3d:ad:1f:31:6a:b8:69:
         b7:f2:5a:34:98:cf:7e:86:14:3f:af:1d:4c:36:8e:ce:3c:0f:
         f9:91:dc:5f:99:52:7b:f0:18:f4:30:34:47:fb:07:70:25:89:
         04:0c:96:6f:1a:a0:b9:dc:c5:ac:2c:b6:8d:81:59:34:28:90:
         e4:6c:10:d4:20:3e:04:e2:45:33:74:e5:5a:f9:e3:fd:b8:b2:
         70:7c:62:5d:66:be:98:ed:c9:76:a2:4c:c2:f7:7f:68:85:de:
         ba:b7:d2:d0:25:71:07:db:95:27:3c:bf:f7:8b:fa:9f:66:9d:
         5c:2c:54:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org