Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230372e302f32342d3234203d3e203538353033.roa
File:                     3130332e362e3230372e302f32342d3234203d3e203538353033.roa (raw, json)
Hash identifier:          NhbEnUbS1RFVhQFgb/k13Oo2qyTOB30jh0qFTUkaAik=
Subject key identifier:   F8:EA:50:05:7C:C9:20:58:1F:54:06:DF:0F:C1:97:C7:BC:E7:A1:5A
Certificate issuer:       /CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446
Certificate serial:       1817376ECEFC7E964D97DEE79D29EE5B7B9A8574
Authority key identifier: CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230372e302f32342d3234203d3e203538353033.roa
Signing time:             Thu 19 Sep 2024 08:00:53 +0000
ROA not before:           Thu 19 Sep 2024 07:55:53 +0000
ROA not after:            Thu 18 Sep 2025 08:00:53 +0000
asID:                     58503
IP address blocks:        103.6.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl
                          rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:17:37:6e:ce:fc:7e:96:4d:97:de:e7:9d:29:ee:5b:7b:9a:85:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446
        Validity
            Not Before: Sep 19 07:55:53 2024 GMT
            Not After : Sep 18 08:00:53 2025 GMT
        Subject: CN=F8EA50057CC920581F5406DF0FC197C7BCE7A15A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:10:26:32:e6:ce:2e:27:55:10:59:c1:d8:be:
                    e1:25:60:97:98:fa:d3:f2:b4:85:d2:49:93:53:f8:
                    93:37:c7:d5:ab:ef:09:38:4b:af:49:7d:1b:20:f9:
                    52:92:07:aa:ab:fa:d5:69:65:86:06:d2:9e:f2:63:
                    d3:94:b1:8d:4f:0d:15:d9:7d:92:cf:d9:71:fa:25:
                    ad:4c:cf:f8:ce:7b:ca:ef:c4:d8:72:e5:41:b9:7f:
                    e5:9d:7b:ed:25:28:f6:ce:17:e3:9f:65:3e:07:2f:
                    be:4b:49:ef:94:bb:27:1e:2e:59:82:54:a5:8e:c7:
                    d1:dd:22:ca:2c:29:e6:77:9d:57:1b:9a:b0:0a:df:
                    49:53:ef:3a:d2:ce:cc:d2:a7:6d:2e:d7:97:bd:55:
                    1b:ee:63:43:17:50:33:13:36:3e:ed:56:5e:cf:19:
                    40:33:4d:8e:d1:a8:42:bf:da:57:d2:59:5e:54:28:
                    21:c1:2b:00:24:14:1c:ff:97:ab:2b:ab:79:1f:78:
                    2d:82:52:67:bf:fc:ff:09:84:d5:e7:7c:47:dc:df:
                    13:fd:87:1e:2a:3b:46:4d:76:11:6c:fb:cb:01:13:
                    b2:00:01:b0:63:a3:30:f4:3f:4b:9c:96:01:ba:06:
                    60:ed:96:61:b0:aa:44:71:af:4a:a2:7f:58:35:63:
                    fe:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EA:50:05:7C:C9:20:58:1F:54:06:DF:0F:C1:97:C7:BC:E7:A1:5A
            X509v3 Authority Key Identifier:
                keyid:CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230372e302f32342d3234203d3e203538353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:be:02:5f:d5:9e:23:b2:e8:b7:ed:af:3e:ab:4c:e6:e6:1d:
         c2:c7:1d:f5:75:be:0f:55:5f:95:2e:19:55:f8:fe:10:ff:46:
         df:5f:e7:6b:9c:9d:5e:49:de:a0:c9:8a:20:d6:93:07:71:2a:
         d2:0d:2a:63:fa:72:e4:db:58:eb:32:5a:3c:1a:5e:8f:f6:f0:
         3c:83:74:ef:a6:1f:c4:2d:81:da:39:1d:ba:cf:6b:c6:41:f5:
         69:38:f3:2c:65:23:9e:d6:82:dd:63:75:e1:0c:6c:69:22:7b:
         98:5d:c1:90:b2:86:be:20:91:45:f9:e0:4a:ee:cf:49:4a:0b:
         4e:ce:88:f2:b5:70:f0:e1:2b:2e:a3:8e:e7:c3:db:05:19:66:
         32:a3:b5:72:60:af:4b:85:71:e5:c8:17:b3:f9:dc:75:e3:a8:
         a7:1f:02:59:42:a1:79:2b:2e:3d:6a:1d:13:4d:6a:65:0d:b6:
         7e:12:c9:f8:cc:45:96:da:67:b0:8b:f1:98:4c:3b:48:ff:ac:
         94:58:ae:31:45:b7:ad:eb:e1:4b:8e:1c:b6:ae:86:72:d9:55:
         6e:61:d9:ca:b2:52:b6:4a:d4:3e:72:f6:9b:b8:a3:f2:d5:91:
         fe:a5:60:5e:da:56:7a:f6:d1:fe:f0:4d:fb:78:d4:d1:85:a3:
         c4:28:91:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 01:31:57 2024 by rpki-client on console-ams.rpki-client.org