Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa
File:                     3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa (raw, json)
Hash identifier:          ECxpMRKjw5XX2XksVVE0UOBQexpyfWyCmwjVGHtI3aw=
Subject key identifier:   67:C6:37:A8:F6:E7:8A:3C:67:B4:11:C1:A3:39:1F:44:2E:E4:6C:50
Certificate issuer:       /CN=024ABFF2959A6144CC4889C70F77F968FA410EF1
Certificate serial:       6A4AE0229141EBA8D8D1A41D6A655A46F879A9D2
Authority key identifier: 02:4A:BF:F2:95:9A:61:44:CC:48:89:C7:0F:77:F9:68:FA:41:0E:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa
Signing time:             Sat 07 Oct 2023 16:00:00 +0000
ROA not before:           Sat 07 Oct 2023 15:55:00 +0000
ROA not after:            Sat 05 Oct 2024 16:00:00 +0000
asID:                     147128
IP address blocks:        103.176.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.crl
                          rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 14:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4a:e0:22:91:41:eb:a8:d8:d1:a4:1d:6a:65:5a:46:f8:79:a9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=024ABFF2959A6144CC4889C70F77F968FA410EF1
        Validity
            Not Before: Oct  7 15:55:00 2023 GMT
            Not After : Oct  5 16:00:00 2024 GMT
        Subject: CN=67C637A8F6E78A3C67B411C1A3391F442EE46C50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5c:d9:a5:a4:9f:73:44:c9:14:17:e2:7e:3f:
                    50:69:7c:4d:47:13:9c:e5:44:c9:29:9e:e1:95:10:
                    fb:57:a1:4a:4f:3a:ba:14:68:e7:55:1d:b0:9f:2c:
                    a6:02:3c:7a:05:a1:5f:a1:c5:ef:99:36:0f:c9:49:
                    c5:bb:e2:c8:da:cf:51:86:dc:1a:41:1b:fd:97:98:
                    79:b2:cf:e6:51:f4:44:98:2e:fd:c2:a2:51:c4:8b:
                    76:92:62:6a:f8:72:4d:44:60:d2:21:bb:81:ed:3e:
                    72:6e:47:37:b3:24:da:4d:c9:c1:c9:f1:80:e6:c4:
                    4e:77:6b:1c:f7:12:22:b9:6a:38:aa:1e:bf:c7:c7:
                    f0:a3:5c:84:72:2f:83:f2:bd:46:b0:24:6e:5b:c5:
                    53:e6:d4:3b:9e:2d:9e:89:99:79:bc:80:5e:73:16:
                    4e:24:b4:f6:a4:70:9b:96:2d:92:55:28:b5:af:e3:
                    67:c6:41:71:08:28:1e:5f:01:7d:98:69:57:f6:68:
                    3e:f6:8b:29:4c:54:a5:65:80:e7:0f:53:8e:67:12:
                    8c:5e:7c:5f:18:1a:39:e3:71:81:c5:c2:ce:8e:61:
                    06:df:41:e4:19:67:50:f8:86:05:88:f0:ea:aa:a6:
                    6d:2f:20:2f:c5:68:bd:bb:b6:06:9b:f0:33:d9:c8:
                    69:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C6:37:A8:F6:E7:8A:3C:67:B4:11:C1:A3:39:1F:44:2E:E4:6C:50
            X509v3 Authority Key Identifier:
                keyid:02:4A:BF:F2:95:9A:61:44:CC:48:89:C7:0F:77:F9:68:FA:41:0E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:71:c2:67:50:ef:ac:fc:63:8e:36:de:e2:de:c7:37:09:43:
         c0:24:93:d4:ff:44:41:6b:a2:d0:a7:4b:6f:6e:ad:63:3b:3b:
         6d:59:78:97:02:ef:d5:b5:9d:3d:d8:32:ff:85:87:05:bc:06:
         37:a7:4a:9d:1b:c1:c7:5a:98:d8:88:ed:5c:b3:a8:eb:f8:df:
         fe:51:42:de:e2:d8:fe:d1:1c:a6:3a:60:41:88:ef:fe:81:30:
         19:5f:0c:cd:f6:1e:bd:88:d7:c0:ed:3c:e5:80:fc:4d:be:de:
         82:91:b9:ab:e2:26:f3:53:09:7f:52:9c:f5:f6:ea:ca:5c:1c:
         1d:e5:02:aa:d3:26:4d:46:00:af:56:a2:a4:5c:ec:b9:0c:84:
         a2:7b:5f:08:a6:94:0e:c4:1a:c5:08:e5:2e:9d:c3:b8:51:db:
         5f:96:b4:c8:2e:82:20:c7:29:65:1d:ce:75:3e:5a:89:34:64:
         b7:f3:1a:a3:4b:09:53:dd:6a:60:ea:05:b2:fe:d9:b3:67:38:
         eb:18:9f:42:72:2c:b9:67:0d:5a:82:24:65:cd:33:49:d1:87:
         a3:e2:45:4a:3c:f8:11:79:5a:d6:41:64:66:59:ff:8f:76:d9:
         5e:4b:d4:56:27:73:d5:5e:b6:ce:59:de:b7:07:7e:66:0d:2f:
         d2:e8:28:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 19:32:08 2024 by rpki-client on console-ams.rpki-client.org