Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/3130332e31332e362e302f32332d3234203d3e2034383030.roa
File:                     3130332e31332e362e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          XE/brTNn9JtlPYNJFE9OluoH8MvpLDlsMKNBNlNadoE=
Subject key identifier:   1F:67:6A:81:6C:AD:18:3B:65:84:E7:2C:14:2F:24:64:C2:31:03:B6
Certificate issuer:       /CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB
Certificate serial:       73E7125A34FE5622478F89FA8A63DEFE55FD24B7
Authority key identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/3130332e31332e362e302f32332d3234203d3e2034383030.roa
Signing time:             Thu 01 Aug 2024 08:02:16 +0000
ROA not before:           Thu 01 Aug 2024 07:57:16 +0000
ROA not after:            Thu 31 Jul 2025 08:02:16 +0000
asID:                     4800
IP address blocks:        103.13.6.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl
                          rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e7:12:5a:34:fe:56:22:47:8f:89:fa:8a:63:de:fe:55:fd:24:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB
        Validity
            Not Before: Aug  1 07:57:16 2024 GMT
            Not After : Jul 31 08:02:16 2025 GMT
        Subject: CN=1F676A816CAD183B6584E72C142F2464C23103B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:ba:00:f6:0b:e3:e6:7b:92:3c:11:de:a4:
                    ab:3e:18:1f:d3:ea:69:92:bc:b3:2b:78:33:99:49:
                    e6:7c:3f:1d:58:71:ce:bd:38:59:53:1a:7e:38:d2:
                    a9:8b:7f:ab:0f:76:8f:d3:22:c3:ae:79:ab:24:b9:
                    6c:46:5b:30:7f:54:98:d6:a4:48:2f:2e:de:f8:29:
                    8c:66:b6:49:ef:22:5d:30:70:b8:0a:86:92:80:a9:
                    5b:04:a9:83:66:e2:9a:44:07:8f:4f:7c:dd:15:19:
                    40:4f:f8:d2:e0:61:87:8e:6b:ee:fe:09:db:fa:d5:
                    08:d4:50:3d:ff:06:ca:d0:f4:ff:11:e8:71:41:5f:
                    c2:d4:88:7c:fe:1f:5d:36:d1:69:4c:db:37:2f:08:
                    80:18:99:40:31:1e:f9:43:48:bb:08:81:12:78:54:
                    c5:65:df:49:34:68:88:88:a8:e8:ff:4c:a1:37:2d:
                    a6:df:06:41:9a:35:8d:3a:82:9b:86:12:93:41:5b:
                    1b:de:73:37:89:f3:01:79:ca:ec:3a:47:fa:39:6e:
                    94:7d:c2:89:76:9f:31:cc:e4:17:7b:aa:5b:20:06:
                    2a:da:eb:06:1b:c7:76:a6:e5:5b:d3:fe:0d:df:4d:
                    e1:a9:5d:0f:5c:28:56:62:2b:dd:50:e7:57:68:86:
                    fd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:67:6A:81:6C:AD:18:3B:65:84:E7:2C:14:2F:24:64:C2:31:03:B6
            X509v3 Authority Key Identifier:
                keyid:0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/3130332e31332e362e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:12:c9:5d:3e:d0:fd:e0:87:7b:e4:6e:d1:16:b0:00:93:c4:
         94:be:e1:7a:23:9e:a7:0f:59:c5:fe:96:a8:26:48:26:49:ee:
         02:37:e9:b3:27:29:3f:46:a5:7e:3c:d4:fd:98:f0:79:e4:e8:
         0a:bd:e4:a1:aa:34:45:6c:69:66:e4:e4:cb:0d:15:bf:5c:59:
         2f:f8:49:88:59:cf:d9:97:df:fe:da:b4:f0:4e:58:05:ed:62:
         c1:5b:49:f8:7c:cf:0f:b4:7d:d5:9e:c5:8a:c2:42:d7:c4:2e:
         b9:94:14:9b:34:ca:e7:8b:45:4a:40:47:b5:9f:c8:32:65:27:
         7f:a5:b3:11:1e:ea:49:a2:bb:7a:c9:2f:58:a7:46:8a:6e:c4:
         43:8e:db:0c:61:75:26:f4:5f:9c:8c:e9:a1:86:49:4d:f5:40:
         f3:8e:50:8f:62:e7:5c:d0:b3:68:d4:64:95:48:4e:4b:fa:0a:
         f1:93:ca:be:9b:b4:e5:22:1a:8c:93:71:ee:21:ed:27:df:5d:
         5e:d7:0a:8f:42:f7:cc:43:61:2b:9b:1c:42:95:0f:b1:be:57:
         7c:02:34:09:64:a9:b4:28:c9:fe:e2:e4:06:cf:f4:c4:c0:e1:
         48:8e:d7:45:83:b2:04:ce:94:96:7f:97:f8:96:28:2b:23:22:
         20:ac:e0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org