Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131392e302f32342d3234203d3e203234353139.roa
File:                     3130332e34322e3131392e302f32342d3234203d3e203234353139.roa (raw, json)
Hash identifier:          05HqZWOi2HNFyrNQUCsvxyM+0lKlqyTiAU7q+hcnhp0=
Subject key identifier:   C3:F2:DB:7B:4D:A7:AE:1B:86:35:44:A5:46:B4:3A:81:00:3A:5E:29
Certificate issuer:       /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
Certificate serial:       7184981ACD2B60C2657C0392E99F46F5CA26B00E
Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131392e302f32342d3234203d3e203234353139.roa
Signing time:             Sun 24 Dec 2023 04:43:21 +0000
ROA not before:           Sun 24 Dec 2023 04:38:21 +0000
ROA not after:            Sun 22 Dec 2024 04:43:21 +0000
asID:                     24519
IP address blocks:        103.42.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl
                          rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:84:98:1a:cd:2b:60:c2:65:7c:03:92:e9:9f:46:f5:ca:26:b0:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
        Validity
            Not Before: Dec 24 04:38:21 2023 GMT
            Not After : Dec 22 04:43:21 2024 GMT
        Subject: CN=C3F2DB7B4DA7AE1B863544A546B43A81003A5E29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:82:34:45:ab:87:0a:b2:36:86:4b:e4:e4:af:
                    ea:b6:0f:7b:5f:aa:03:f5:cf:63:3f:04:57:51:9e:
                    35:a9:fe:a8:7b:25:29:66:59:82:95:b6:00:2b:56:
                    b7:02:6b:53:97:45:e6:ce:f8:36:24:e3:70:54:d0:
                    28:8a:65:c4:0b:4e:69:29:95:5f:50:35:b5:bd:08:
                    97:f8:ff:30:29:1c:2a:cd:a6:a9:cc:a6:5a:1b:ba:
                    77:89:88:93:34:4a:f3:c7:ad:97:f1:87:58:74:db:
                    ee:34:95:49:e6:7e:a8:91:06:d8:91:d8:3d:d6:8a:
                    77:6f:c1:14:a9:32:e6:4b:ff:31:6f:f8:ea:a7:88:
                    af:40:13:5c:46:cd:4a:56:e8:cd:cc:2f:ce:64:25:
                    95:f4:d4:4f:bd:eb:f3:0a:24:1e:46:d2:18:da:e3:
                    81:79:32:b8:fd:25:18:84:ce:ae:ed:fc:d0:c6:64:
                    2b:86:38:87:1e:63:a8:9b:a2:1d:a6:9b:7d:86:4f:
                    5c:11:04:8d:2e:23:6c:42:a4:89:75:23:d8:ba:86:
                    1b:b3:f3:da:92:f3:bc:18:10:f2:92:41:bd:5a:b6:
                    e7:e1:42:ee:e1:66:17:58:ce:62:e6:86:40:3a:25:
                    8a:38:70:ba:aa:3d:f7:33:ec:74:f3:c3:2c:74:6a:
                    c5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F2:DB:7B:4D:A7:AE:1B:86:35:44:A5:46:B4:3A:81:00:3A:5E:29
            X509v3 Authority Key Identifier:
                keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131392e302f32342d3234203d3e203234353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:f6:57:3e:77:d1:7c:1c:82:83:37:a0:5f:97:ba:45:21:54:
         a4:a9:b6:93:58:49:43:29:35:43:29:13:24:72:43:0c:47:de:
         d5:1e:1a:8c:b5:dd:2e:c1:63:f6:c8:54:b4:11:e1:f2:70:a5:
         66:13:5d:5f:49:d6:92:1c:3b:63:1b:12:2b:68:24:d1:62:00:
         33:5f:e4:bf:55:5f:60:e5:bf:3b:d0:ff:fb:31:8c:9a:17:6b:
         7c:50:aa:17:f4:6f:e5:c0:7d:6a:ea:93:0f:6b:04:12:58:0c:
         7b:14:a2:ff:d5:21:fa:31:5a:a0:08:96:81:ac:76:07:a0:9e:
         ca:56:8a:c5:0f:67:dd:07:91:1c:74:b7:a6:46:e7:32:d1:a4:
         e7:57:c7:fd:19:a1:c0:9b:37:fb:d8:14:75:9d:6d:35:58:3f:
         e6:1c:58:29:2c:32:bb:a7:be:56:55:88:d8:58:f5:a5:e6:05:
         44:d9:56:0b:44:5d:62:0a:23:7f:06:88:d3:49:bf:71:2d:51:
         3a:48:b3:57:0f:c7:7d:06:b3:bb:91:df:aa:85:65:ad:96:8a:
         0b:74:b8:f7:7d:13:13:3a:de:98:d0:d6:98:b0:68:97:cf:a5:
         32:a2:89:ae:c0:c3:90:45:00:23:54:b2:0b:b2:7f:18:6b:33:
         a1:a2:a3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:48 2024 by rpki-client on console-fra.rpki-client.org