Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa
File:                     3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (raw, json)
Hash identifier:          bxWi1ZxwMEGEwNCYfBNmqT6VxpHxjstcsGtYN+MqNbs=
Subject key identifier:   D7:35:06:D5:5F:34:86:9E:C4:16:0F:AD:6D:99:8B:6C:DD:B5:90:56
Certificate issuer:       /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
Certificate serial:       1C6CD3C33B52C3E1718F3D28A27D190A2B1E34C3
Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa
Signing time:             Thu 28 Dec 2023 02:32:49 +0000
ROA not before:           Thu 28 Dec 2023 02:27:49 +0000
ROA not after:            Thu 26 Dec 2024 02:32:49 +0000
asID:                     141968
IP address blocks:        103.42.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl
                          rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6c:d3:c3:3b:52:c3:e1:71:8f:3d:28:a2:7d:19:0a:2b:1e:34:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
        Validity
            Not Before: Dec 28 02:27:49 2023 GMT
            Not After : Dec 26 02:32:49 2024 GMT
        Subject: CN=D73506D55F34869EC4160FAD6D998B6CDDB59056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:5a:d8:7c:62:0d:c8:8f:28:f7:fd:5c:c2:
                    b3:99:77:c8:ba:2e:95:95:be:a8:c6:82:64:a3:08:
                    57:92:fb:c8:fb:6c:e5:1f:f7:09:59:9a:8f:47:f9:
                    b5:2f:b0:53:99:f3:6d:1c:50:e0:69:9c:c4:9e:c0:
                    7f:df:cd:da:0c:c4:16:ea:e2:4a:6a:3a:13:b4:c1:
                    7e:e9:e1:ac:90:8f:ae:e4:09:ed:a8:d2:52:68:ab:
                    2e:f6:af:e1:b8:6a:8d:b3:61:a2:37:1d:e0:e9:ff:
                    f8:07:98:f5:87:db:e0:b2:76:2c:8a:ab:f9:f3:7d:
                    db:86:ce:88:a6:31:83:c9:3c:6f:46:e0:cb:8b:71:
                    61:6d:a1:df:d4:a0:b6:13:d3:05:d7:c6:2a:62:7e:
                    a8:f3:b7:15:13:28:cd:9c:4c:91:bf:fb:1e:b5:bb:
                    6b:3a:4f:61:c5:84:51:4e:5d:5b:15:3c:cd:37:66:
                    3b:76:70:25:17:00:1a:09:47:6a:15:cc:8f:1c:60:
                    86:8c:63:2f:fd:68:3e:f7:b0:3a:38:ec:ca:96:b3:
                    db:04:5c:98:3c:78:84:44:ce:f0:23:25:f2:e4:59:
                    d3:d1:10:33:e2:83:29:2d:0b:f6:5a:50:c1:67:15:
                    0b:9d:2c:13:d7:f9:89:2a:e8:a1:da:9a:8f:46:37:
                    84:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:35:06:D5:5F:34:86:9E:C4:16:0F:AD:6D:99:8B:6C:DD:B5:90:56
            X509v3 Authority Key Identifier:
                keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:85:e7:7a:ef:1a:7e:63:3c:81:9d:31:88:68:c2:8b:b1:cd:
         82:98:c9:3c:6c:87:98:35:a8:c3:70:ad:ca:68:1a:4c:3e:fe:
         76:64:4f:c6:c8:e4:b0:00:8d:cd:11:02:24:2d:cf:1d:35:1a:
         57:12:ed:c9:f5:48:8a:46:cc:d0:4d:53:6f:ca:fc:ec:2b:9a:
         c8:c4:da:20:ff:b9:e6:c1:9b:96:ed:16:5d:c9:19:39:2d:a0:
         cf:2d:4e:1c:71:05:84:28:cb:ce:5f:a2:33:05:9b:a9:de:d1:
         98:70:2c:f9:7b:91:91:f0:66:31:d9:1a:ea:a3:7b:2f:5d:41:
         63:91:1a:f3:c7:44:0e:6e:2d:09:54:40:56:f0:db:aa:ec:32:
         5a:95:7d:89:ce:dd:eb:5f:a6:90:d6:d8:35:b6:5a:9f:f0:f7:
         e4:84:a5:fb:48:d9:bf:87:68:39:ba:a1:3c:20:86:2e:5f:b4:
         48:6d:85:b9:b6:d3:b9:4b:66:42:cd:be:d7:2e:a8:ea:a5:94:
         74:26:2a:88:25:ff:0e:91:9d:6c:8a:85:1d:52:34:39:26:9a:
         a4:83:c1:2f:ec:c6:84:89:16:0d:60:ae:1d:f8:c4:f5:b6:ac:
         27:6f:57:b6:a7:ae:75:3f:04:6d:f0:2e:cd:ed:2e:3e:4d:76:
         85:c6:d0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:48 2024 by rpki-client on console-fra.rpki-client.org