Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32342d3234203d3e20313334393633.roa
File:                     3130332e39342e3233382e302f32342d3234203d3e20313334393633.roa (raw, json)
Hash identifier:          4+YxfjwW9bXp35BxdhaZMkYtpgFfJU7NGo6urTB6usg=
Subject key identifier:   46:FD:3C:A0:26:26:E4:2C:B4:21:51:54:4E:6A:79:62:D2:C8:93:05
Certificate issuer:       /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Certificate serial:       4B8CA310A1A0227324955F13EA00D3E51FCE9B30
Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32342d3234203d3e20313334393633.roa
Signing time:             Fri 14 Jun 2024 10:50:31 +0000
ROA not before:           Fri 14 Jun 2024 10:45:31 +0000
ROA not after:            Fri 13 Jun 2025 10:50:31 +0000
asID:                     134963
IP address blocks:        103.94.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
                          rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 11:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8c:a3:10:a1:a0:22:73:24:95:5f:13:ea:00:d3:e5:1f:ce:9b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
        Validity
            Not Before: Jun 14 10:45:31 2024 GMT
            Not After : Jun 13 10:50:31 2025 GMT
        Subject: CN=46FD3CA02626E42CB42151544E6A7962D2C89305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:93:0b:65:ef:37:18:52:ef:28:3e:af:c5:10:
                    71:98:b0:4c:dc:98:e7:37:ee:c8:ed:a8:0f:1a:a5:
                    23:b9:a3:3f:40:9d:3c:82:87:f9:52:88:bd:24:32:
                    20:28:f0:d9:09:92:20:03:49:47:87:a9:6c:be:ef:
                    0f:b1:45:f2:e4:55:e5:5a:c6:ee:a9:70:05:0c:b3:
                    09:a0:76:b0:73:75:6d:0b:66:e2:63:01:f6:88:77:
                    05:27:87:85:01:c1:2f:5e:0b:d9:ed:ee:a0:cc:ef:
                    de:2a:6b:fb:89:c6:01:a4:62:fc:f1:b6:af:c7:ca:
                    e5:28:0c:18:e3:ba:83:b8:16:53:44:e2:7e:79:a1:
                    08:a5:00:17:52:65:14:b8:67:c4:56:10:6e:58:9d:
                    de:2e:25:8e:8e:ef:ec:26:32:39:d3:5e:ca:af:0d:
                    72:48:dc:48:2b:23:a1:98:21:f4:31:87:6c:9a:30:
                    a0:3f:99:57:d5:cb:4c:d7:ab:6a:8d:d7:9c:fe:b7:
                    b9:45:30:74:27:3a:bc:1b:3d:b4:b1:cb:dc:85:6f:
                    64:c7:c0:73:8d:9e:84:ea:0c:e8:a9:90:71:fc:50:
                    ac:a7:82:3c:d0:8a:91:a0:24:49:e6:62:7e:87:67:
                    b4:d5:80:92:5a:ba:f3:2a:b6:f3:ee:56:b2:17:07:
                    5d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FD:3C:A0:26:26:E4:2C:B4:21:51:54:4E:6A:79:62:D2:C8:93:05
            X509v3 Authority Key Identifier:
                keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32342d3234203d3e20313334393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:ee:02:2b:2b:9c:39:cf:1c:05:79:6f:89:fa:38:13:aa:1b:
         5b:fa:8d:5d:2f:46:f6:4b:2a:5f:d3:2e:97:4d:78:3f:58:90:
         2a:eb:3b:c3:3a:a5:5e:c0:a4:44:24:a9:36:b2:80:94:3d:d0:
         40:8c:1e:a8:24:f1:8a:81:35:27:1e:65:08:cc:89:f8:7a:17:
         8b:a9:50:d4:13:29:5c:3a:2d:f1:d2:c1:4a:34:4d:5c:4e:c0:
         6d:20:30:0b:b8:a5:36:9b:a7:e7:3c:be:3f:5f:be:f4:16:d0:
         69:9d:33:83:4d:f4:67:af:ee:d1:04:c9:89:d5:2b:28:52:9a:
         49:44:7d:c3:21:e5:ea:aa:c9:f8:56:18:b6:52:5f:f5:fb:a0:
         a9:b1:4e:8a:7a:28:4c:25:34:25:71:87:39:71:a0:5e:0c:c3:
         ab:e5:92:8f:8e:4d:7b:34:dd:f2:40:cc:4f:32:e7:4a:69:da:
         3e:26:18:0c:84:70:b1:72:a6:cc:28:87:9e:c2:1d:4d:68:b8:
         31:cc:74:d3:5a:ec:5e:8a:3f:95:96:6b:4b:cf:0d:75:76:f9:
         d2:c4:f6:ea:20:79:22:7a:ba:a1:9c:a8:33:7e:81:5a:0e:2c:
         4b:a6:19:b2:c3:a4:00:2c:d3:03:b3:3a:ab:b6:6f:e8:06:92:
         c9:86:83:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 13:58:50 2024 by rpki-client on console-fra.rpki-client.org