Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131382e302f32332d3233203d3e203234353139.roa
File:                     3130332e34322e3131382e302f32332d3233203d3e203234353139.roa (raw, json)
Hash identifier:          akY0iIbjViwmHj67ky8S9gqDUi1tC5fVVrmvBD057t0=
Subject key identifier:   E8:4D:ED:2F:0F:9B:1C:B8:0B:F1:26:6E:2A:9D:59:9A:67:88:88:D4
Certificate issuer:       /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
Certificate serial:       1E4E4137A90F7750A51E79BDEC8BCF4749AB05B2
Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131382e302f32332d3233203d3e203234353139.roa
Signing time:             Sun 24 Dec 2023 04:42:48 +0000
ROA not before:           Sun 24 Dec 2023 04:37:48 +0000
ROA not after:            Sun 22 Dec 2024 04:42:48 +0000
asID:                     24519
IP address blocks:        103.42.118.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl
                          rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4e:41:37:a9:0f:77:50:a5:1e:79:bd:ec:8b:cf:47:49:ab:05:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
        Validity
            Not Before: Dec 24 04:37:48 2023 GMT
            Not After : Dec 22 04:42:48 2024 GMT
        Subject: CN=E84DED2F0F9B1CB80BF1266E2A9D599A678888D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4c:23:05:56:36:c2:ed:95:7c:81:15:9f:7b:
                    c1:1c:80:f1:90:a1:63:02:a8:8c:be:11:72:fc:f6:
                    a4:c2:03:20:c3:ed:2d:b8:f0:0d:06:58:bc:46:d7:
                    f2:fc:79:ed:19:bc:4b:cd:9f:d2:af:18:59:cf:5b:
                    f2:a3:98:a0:cd:21:76:20:f4:02:88:15:ba:4e:85:
                    94:4f:9a:93:aa:84:33:14:3b:b8:5c:73:38:1e:fe:
                    57:da:41:6c:cc:ee:1d:17:e0:ea:c5:e6:e5:5e:2c:
                    c1:6b:37:d3:28:f6:6a:74:f5:b8:42:37:9c:03:4d:
                    f1:ef:fb:39:f3:36:c1:6b:46:74:18:d2:b7:1b:ae:
                    d4:f6:9b:7d:e2:d9:5d:7c:20:91:50:a6:6e:c2:ba:
                    35:a7:7a:6c:96:3f:1a:d6:f8:55:e5:eb:37:78:d9:
                    59:92:d8:79:ae:0a:2a:6b:2f:0c:c5:17:4a:4a:31:
                    4e:93:73:56:a0:08:e4:c1:77:2b:45:82:0a:92:8b:
                    dd:40:4c:90:2b:78:99:d7:e9:c4:69:1f:9d:26:1e:
                    be:cf:8e:74:f2:2a:ba:5f:a3:9a:a1:21:e7:12:75:
                    fd:6e:3b:53:f8:80:13:18:81:86:23:03:c5:c5:07:
                    78:f3:13:b8:ca:fb:e7:af:5c:1d:93:df:01:8a:c5:
                    14:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4D:ED:2F:0F:9B:1C:B8:0B:F1:26:6E:2A:9D:59:9A:67:88:88:D4
            X509v3 Authority Key Identifier:
                keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131382e302f32332d3233203d3e203234353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:87:4c:f9:b4:7b:01:53:e2:4d:5d:da:ad:91:9f:0b:b1:39:
         15:48:91:9e:9d:81:05:6b:5f:c1:30:43:1d:96:4e:85:bf:91:
         a4:46:c5:0e:b0:d8:17:e1:ba:fd:c5:27:73:f3:6e:ee:77:1e:
         7b:eb:26:e6:27:c6:a6:bb:f4:3c:9a:52:c7:c7:e0:92:4d:41:
         04:17:40:57:30:b1:62:0d:ac:60:21:f8:69:e9:cd:eb:cd:d2:
         ba:3a:7e:6b:5b:d9:a3:2d:35:43:c5:44:1f:25:bb:37:91:a8:
         e5:c0:82:7a:d1:a0:71:d1:fd:eb:d7:c7:e0:9e:13:70:99:6a:
         10:61:a4:59:fb:00:1d:90:64:f3:1e:36:7d:f3:99:0a:07:c9:
         05:b9:7f:d7:b6:23:55:9e:31:10:16:b1:16:17:9e:83:bf:b7:
         0f:af:cc:a3:8d:d3:cb:33:71:af:59:e9:53:e3:88:93:c1:87:
         07:69:1f:5d:f1:0c:26:e5:33:32:42:8a:27:1a:b6:2d:c0:f0:
         b2:1f:96:f5:4e:d4:d9:a7:68:94:af:bf:88:99:af:d5:03:86:
         87:45:5c:42:1c:95:55:e9:d4:60:f3:b7:78:a6:85:d5:3c:c0:
         3c:db:8c:11:07:fd:6c:e8:f1:5c:c7:ed:7c:7f:f2:3b:de:79:
         fd:79:30:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org