Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132322e302f32342d3234203d3e203536323436.roa
File:                     3130332e31302e3132322e302f32342d3234203d3e203536323436.roa (raw, json)
Hash identifier:          s8ydR4SKy78LLCRdtO9q47EyJf4M/O99oKGooiSboC4=
Subject key identifier:   70:39:B8:69:7B:EE:63:6F:D9:A2:C4:E3:AA:7C:E7:BB:80:56:78:C9
Certificate issuer:       /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
Certificate serial:       778ADE86EB38ABB36FA8D3656FF3B65C9F49A90B
Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132322e302f32342d3234203d3e203536323436.roa
Signing time:             Mon 01 Jul 2024 01:03:05 +0000
ROA not before:           Mon 01 Jul 2024 00:58:05 +0000
ROA not after:            Mon 30 Jun 2025 01:03:05 +0000
asID:                     56246
IP address blocks:        103.10.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl
                          rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8a:de:86:eb:38:ab:b3:6f:a8:d3:65:6f:f3:b6:5c:9f:49:a9:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
        Validity
            Not Before: Jul  1 00:58:05 2024 GMT
            Not After : Jun 30 01:03:05 2025 GMT
        Subject: CN=7039B8697BEE636FD9A2C4E3AA7CE7BB805678C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ee:66:53:d4:24:b6:39:b9:44:ed:26:ce:a1:
                    9e:ac:17:15:46:52:3b:5a:fe:90:ce:dd:6c:65:23:
                    1a:1d:06:ad:08:c7:ec:42:ea:15:1c:a0:95:fd:f5:
                    af:25:79:19:66:1d:e3:8d:39:8a:f5:19:fe:0f:9c:
                    d7:39:a8:d5:de:89:3b:43:9a:b7:14:92:8f:cd:62:
                    f4:9e:57:3e:48:96:5a:77:18:e6:cd:af:83:69:42:
                    17:d5:7a:dd:9b:3b:b9:5a:a6:0e:b3:c3:f6:db:e9:
                    8a:4d:e8:07:41:43:86:a1:6d:df:7c:6e:9e:0f:74:
                    11:d7:d1:a1:69:6e:c9:6d:33:d0:f5:91:3b:92:8c:
                    90:24:99:18:8c:9f:19:e6:ed:e8:8b:7e:05:00:3a:
                    52:3c:5a:58:c0:e7:74:87:db:02:a3:b4:df:6b:1b:
                    dd:02:67:53:24:ae:48:e8:dd:40:89:cd:c8:06:a3:
                    2f:06:02:6d:ab:05:fe:3a:5e:6d:ac:29:e2:b4:69:
                    28:69:8d:83:d0:85:18:c4:be:dc:d2:55:b8:c6:97:
                    f9:5e:ec:62:19:e9:ec:a6:79:10:2f:cf:63:89:30:
                    69:07:0f:14:e0:b1:88:ea:77:4d:ab:e4:16:5a:f0:
                    b6:3e:6d:96:80:3d:82:76:40:da:e9:1b:4d:47:27:
                    62:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:39:B8:69:7B:EE:63:6F:D9:A2:C4:E3:AA:7C:E7:BB:80:56:78:C9
            X509v3 Authority Key Identifier:
                keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132322e302f32342d3234203d3e203536323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:14:f4:97:82:39:87:40:00:4b:8f:91:68:21:e5:65:71:dc:
         bf:a6:d4:ea:99:35:be:b1:04:79:c6:1e:a6:78:8c:73:28:4d:
         c6:be:4b:3f:07:7e:12:67:c3:95:df:8a:f4:96:3a:ad:6a:53:
         1c:c3:a3:e1:77:09:22:fe:7b:6f:cb:26:6d:48:0c:4b:76:a9:
         9c:df:2a:7d:b3:8b:34:22:6a:ce:e0:32:44:be:13:8a:51:cf:
         ad:86:10:0b:c4:9b:20:24:13:c5:49:c4:74:e0:27:a9:56:20:
         81:28:4c:2e:75:3f:0a:dc:b5:ae:9d:5d:f7:c8:30:fe:66:81:
         1d:97:6a:b7:ae:bc:45:97:70:e9:07:b8:c8:01:ba:14:ba:6c:
         1b:08:c7:18:cf:4d:a8:70:69:60:8b:78:6d:20:3a:8c:33:4f:
         6a:e0:9d:ee:63:b6:5b:91:1d:e6:96:9d:26:b7:84:cb:11:c3:
         ad:e5:71:ba:e0:90:00:62:11:0d:20:0d:b7:82:85:cd:c2:97:
         ee:78:0b:8d:5d:bf:b4:e4:bd:db:aa:d5:34:51:27:ad:ee:d4:
         98:65:09:5a:9a:17:3b:b3:b9:c7:08:08:9d:61:3e:9a:84:24:
         5c:bd:d8:7e:eb:93:ec:c3:e2:e2:a1:b8:67:97:fb:ce:d9:bf:
         16:6c:36:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org