Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa
File:                     3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa (raw, json)
Hash identifier:          zuJrfzzw67mxZ3yGKbwTuUAqlWlkbEJpUGrfUYafuJA=
Subject key identifier:   35:43:01:57:CF:F7:A5:61:2F:C5:F6:BC:2E:48:78:15:9F:A8:C8:D2
Certificate issuer:       /CN=466F8934F3FED9355C9ED09E3826CBE32B25D402
Certificate serial:       7B63EB175C3A1659737E31C8D7D3F8E3533AC9BC
Authority key identifier: 46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa
Signing time:             Thu 01 Feb 2024 09:00:01 +0000
ROA not before:           Thu 01 Feb 2024 08:55:01 +0000
ROA not after:            Thu 30 Jan 2025 09:00:01 +0000
asID:                     141648
IP address blocks:        103.162.60.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.crl
                          rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:63:eb:17:5c:3a:16:59:73:7e:31:c8:d7:d3:f8:e3:53:3a:c9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466F8934F3FED9355C9ED09E3826CBE32B25D402
        Validity
            Not Before: Feb  1 08:55:01 2024 GMT
            Not After : Jan 30 09:00:01 2025 GMT
        Subject: CN=35430157CFF7A5612FC5F6BC2E4878159FA8C8D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:04:6a:0a:6c:90:28:18:94:6b:98:ce:0b:67:
                    56:47:88:c2:1c:c6:a9:69:e2:91:d8:b7:98:62:1b:
                    d0:ad:04:18:9a:09:60:a5:1d:48:3a:23:58:45:9c:
                    c2:5b:7b:6d:56:6b:07:7e:cd:15:0b:9c:f9:02:ce:
                    67:32:d1:6e:92:14:60:ce:b1:20:8f:1e:f6:ac:e4:
                    1f:34:f2:03:40:7f:99:1d:e6:cf:b3:ec:1f:a0:b5:
                    4d:f3:46:72:bd:af:49:72:be:ed:32:e5:b3:01:69:
                    4d:82:d1:00:9d:42:de:19:b2:03:5e:90:ec:bd:1d:
                    93:c5:46:c5:c5:70:8f:b9:8d:aa:87:d7:94:14:b5:
                    14:fb:7d:b4:12:72:a4:bf:f7:0c:2f:ca:07:7e:9a:
                    0b:75:88:ba:3b:93:d4:0f:93:78:34:15:09:09:4c:
                    86:bd:ca:04:dc:51:68:8f:7d:18:10:8a:e2:5e:f9:
                    1d:12:23:5a:5e:62:33:ae:9d:71:11:95:7e:37:a0:
                    30:13:2e:07:a8:7b:1a:a4:62:ad:5a:b0:da:f4:c3:
                    cd:50:d4:5d:62:ee:9e:e2:a6:87:07:de:c2:18:4e:
                    30:a6:92:f4:93:1d:d6:ba:bc:49:c4:f3:a3:2c:8a:
                    11:79:07:70:69:6f:bc:19:4c:e4:02:63:0d:12:67:
                    aa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:43:01:57:CF:F7:A5:61:2F:C5:F6:BC:2E:48:78:15:9F:A8:C8:D2
            X509v3 Authority Key Identifier:
                keyid:46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:6f:43:3b:8c:09:49:b4:f3:db:75:41:f5:96:97:96:9c:0f:
         07:a7:20:88:18:e5:c5:d9:91:1f:9e:79:a7:3b:bd:b4:76:c6:
         dd:21:87:0f:97:b8:49:a6:f8:d6:e0:7e:d9:0e:bd:d4:08:25:
         be:e0:e1:a1:a9:0b:a8:63:b6:e1:c9:bc:b8:fe:bf:a7:52:51:
         f2:84:d0:fe:d9:18:1d:03:d7:c6:49:c8:c3:69:ac:3f:1f:b0:
         25:47:e6:e3:21:48:44:d6:c3:e2:92:7d:56:74:22:7d:71:7f:
         96:0e:47:1d:c7:4b:d5:91:52:23:be:98:1f:5a:18:53:2f:e3:
         8e:5b:de:1b:7a:8c:6c:69:7a:33:64:0f:fb:3c:f8:06:87:c1:
         cd:0a:5d:a6:93:13:58:d6:fc:4b:7a:a8:04:9c:54:8a:3a:2b:
         4c:ba:35:85:f7:31:ac:97:33:88:c9:b5:4f:81:b0:a1:32:e3:
         12:e2:f9:db:f1:76:c6:ba:32:58:af:38:c6:da:3b:ed:4c:53:
         80:e6:d1:48:87:ab:bc:de:80:3c:1e:29:38:52:5d:8e:62:e0:
         4d:1c:ee:b5:75:36:f1:c9:f9:dd:81:ea:da:8b:4c:06:02:b5:
         8f:7f:25:ad:e8:0a:21:7c:27:09:03:35:c1:af:b5:b2:32:1f:
         a3:73:13:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:25 2024 by rpki-client on console-ams.rpki-client.org