Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230362e302f32342d3234203d3e203538353033.roa
File:                     3130332e362e3230362e302f32342d3234203d3e203538353033.roa (raw, json)
Hash identifier:          Cu2RdLHzB+A2EJBsuRCMa0mxP5/Kmd4TOJ7qAO2a+Js=
Subject key identifier:   5C:3A:FC:82:99:92:E6:1A:B9:3F:04:2B:83:B5:C7:16:C5:1C:36:B1
Certificate issuer:       /CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446
Certificate serial:       0911C3CCEDBB81D5844596E51B47E4250FABA12B
Authority key identifier: CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230362e302f32342d3234203d3e203538353033.roa
Signing time:             Thu 19 Sep 2024 08:00:53 +0000
ROA not before:           Thu 19 Sep 2024 07:55:53 +0000
ROA not after:            Thu 18 Sep 2025 08:00:53 +0000
asID:                     58503
IP address blocks:        103.6.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl
                          rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:11:c3:cc:ed:bb:81:d5:84:45:96:e5:1b:47:e4:25:0f:ab:a1:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446
        Validity
            Not Before: Sep 19 07:55:53 2024 GMT
            Not After : Sep 18 08:00:53 2025 GMT
        Subject: CN=5C3AFC829992E61AB93F042B83B5C716C51C36B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b1:fe:46:09:24:20:e9:7c:28:92:15:0c:d7:
                    02:99:5c:45:12:70:8e:f3:6a:65:7c:4c:7f:bf:59:
                    53:b9:a0:b7:76:88:eb:01:9f:de:fa:cf:29:66:43:
                    b7:ce:ae:1c:3b:af:a7:da:13:50:a0:76:9b:91:15:
                    7f:f8:c5:ad:ee:b9:0f:8e:26:43:c0:9f:91:7f:e1:
                    34:e9:11:fa:78:d6:9a:75:75:3b:13:8d:41:16:c6:
                    db:3e:92:09:40:25:18:55:d0:79:e1:15:d8:21:32:
                    a1:79:b6:8d:2a:e6:6c:d8:89:49:70:69:6e:9e:8a:
                    ef:b6:34:77:17:41:64:40:16:20:d0:d2:73:3e:ef:
                    94:26:d6:40:c7:ff:23:c7:02:03:0f:28:f7:ad:6a:
                    60:f9:61:49:57:b6:79:7d:1b:e7:17:a7:b2:ab:fa:
                    24:2f:60:a5:77:48:81:15:8a:eb:87:ea:a6:d2:68:
                    5b:ce:1a:9b:67:cd:a3:20:f6:9f:8d:f5:6c:db:1a:
                    81:7d:ec:01:9c:92:ff:90:dc:30:9a:d9:47:4a:8c:
                    2e:ce:33:b3:d8:2e:d9:91:a1:71:e5:47:a7:fa:bc:
                    ea:84:a8:7b:b0:6e:7e:f7:dc:87:7b:b2:5a:3e:50:
                    f8:2e:48:96:38:6d:b0:98:d1:97:8a:8c:fb:a8:b9:
                    6f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3A:FC:82:99:92:E6:1A:B9:3F:04:2B:83:B5:C7:16:C5:1C:36:B1
            X509v3 Authority Key Identifier:
                keyid:CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230362e302f32342d3234203d3e203538353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:ff:72:21:14:2a:21:dd:cf:00:3c:8f:d2:fb:d9:6f:4c:6e:
         c2:82:1d:0e:8c:40:77:0e:b9:19:e1:e6:1c:1f:33:ed:f9:27:
         8b:41:5e:5f:ca:c8:48:d6:c5:b1:00:74:99:fc:81:a2:fb:d0:
         30:60:9c:de:10:3e:8c:a2:b8:8b:16:ff:3a:b8:f7:2e:44:3f:
         40:40:47:09:65:9e:77:8b:d3:b0:63:97:b1:8f:5a:a5:4c:3a:
         ac:8b:a3:5e:20:a2:3a:50:55:d9:62:30:32:20:31:6c:d0:28:
         dc:b3:3e:bd:b3:20:00:b4:fd:e6:14:59:74:d8:d9:31:0d:7c:
         f7:ed:b3:f1:77:91:a7:93:cf:0d:07:6e:7d:16:eb:d4:a1:88:
         a1:e7:e2:38:2f:54:08:75:e2:d1:e4:0d:08:e6:78:0e:bf:b5:
         10:36:33:aa:1b:f3:3a:ac:11:b9:ab:5b:39:9f:66:81:29:fc:
         f9:2f:3e:89:49:ad:03:38:2e:d3:f7:75:cd:dc:21:ed:d0:18:
         b6:79:a0:5e:29:3c:cc:f3:ae:b8:89:48:5f:2a:61:61:85:b9:
         33:9f:bb:7c:58:a7:8f:fe:71:75:cb:3d:85:e0:17:2c:41:77:
         04:8a:72:c5:da:8e:b0:ae:bc:30:a1:3a:92:5c:6e:49:8a:33:
         f7:b0:8f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:34:15 2024 by rpki-client on console-fra.rpki-client.org