Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/3130332e38332e302e302f32342d3234203d3e20313530323532.roa
File:                     3130332e38332e302e302f32342d3234203d3e20313530323532.roa (raw, json)
Hash identifier:          UyBDJoX8SHdqpwQ7qkhvzDAQWD7w4beelhbVI/l7de8=
Subject key identifier:   9B:0B:AE:08:0F:5D:EA:1F:8D:9B:BF:98:AD:6E:BF:F4:83:A5:8C:C0
Certificate issuer:       /CN=146C83A9CCB57FCFAD028CEDA79D6D05768CA87A
Certificate serial:       2844BA5C57D5A930113CEB1B19C5BD8EBC24132E
Authority key identifier: 14:6C:83:A9:CC:B5:7F:CF:AD:02:8C:ED:A7:9D:6D:05:76:8C:A8:7A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/3130332e38332e302e302f32342d3234203d3e20313530323532.roa
Signing time:             Sat 14 Sep 2024 11:00:01 +0000
ROA not before:           Sat 14 Sep 2024 10:55:01 +0000
ROA not after:            Sat 13 Sep 2025 11:00:01 +0000
asID:                     150252
IP address blocks:        103.83.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.crl
                          rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 14:44:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:44:ba:5c:57:d5:a9:30:11:3c:eb:1b:19:c5:bd:8e:bc:24:13:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146C83A9CCB57FCFAD028CEDA79D6D05768CA87A
        Validity
            Not Before: Sep 14 10:55:01 2024 GMT
            Not After : Sep 13 11:00:01 2025 GMT
        Subject: CN=9B0BAE080F5DEA1F8D9BBF98AD6EBFF483A58CC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:53:98:4a:22:82:fc:b5:fa:3e:4b:5f:66:39:
                    4e:1a:2e:47:85:ca:d9:c1:16:bc:13:9b:cb:1f:32:
                    36:f9:68:60:9a:e2:36:35:8a:ec:b8:eb:9d:67:69:
                    eb:5a:d8:2f:cb:a9:7a:a5:e9:a8:5a:3b:f7:5a:29:
                    df:a6:7d:59:a9:55:01:ee:5c:7f:20:c9:82:3a:b6:
                    50:26:cb:3e:92:23:5d:10:fa:93:d7:c7:01:7d:c4:
                    97:97:2b:91:ec:22:2d:74:eb:a6:96:c6:05:24:5d:
                    d8:2b:21:8d:06:f1:cf:60:95:fb:e8:2b:55:60:67:
                    10:bf:5c:f6:63:db:3c:2f:d2:a3:3e:26:69:e3:b8:
                    14:21:ad:6c:24:71:ac:bb:3b:95:98:06:dc:06:68:
                    dc:a3:6c:8d:7f:df:63:ba:55:15:3e:8f:db:bd:b4:
                    4e:87:31:55:6c:57:96:a3:0d:7b:f9:ad:08:5f:27:
                    6c:52:fb:69:4a:cd:87:d4:e5:83:34:43:3e:59:13:
                    8c:8c:33:fe:f1:e9:cc:50:86:30:f9:4f:9d:b5:0c:
                    95:07:a3:78:e2:23:b3:94:37:84:b6:c2:0b:e0:73:
                    7e:fe:98:5c:3d:10:c8:34:18:a3:73:9a:cd:86:c0:
                    de:5f:9b:18:f7:9a:e2:3a:ae:eb:21:1f:c3:13:08:
                    c8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0B:AE:08:0F:5D:EA:1F:8D:9B:BF:98:AD:6E:BF:F4:83:A5:8C:C0
            X509v3 Authority Key Identifier:
                keyid:14:6C:83:A9:CC:B5:7F:CF:AD:02:8C:ED:A7:9D:6D:05:76:8C:A8:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146C83A9CCB57FCFAD028CEDA79D6D05768CA87A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/3130332e38332e302e302f32342d3234203d3e20313530323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:ce:48:03:29:09:32:dd:1d:50:ea:dc:bf:66:64:b4:d4:8d:
         82:3b:ad:72:df:da:46:91:f0:37:24:82:0c:fc:e8:f4:f6:d2:
         4d:aa:8c:3d:98:f5:e3:6d:dd:05:9e:4a:72:f7:31:39:b4:07:
         3d:68:d6:0c:66:bc:9d:93:f1:80:d4:f0:90:c6:ce:d2:ec:3c:
         8f:52:1a:08:42:6d:aa:db:3a:17:84:a6:b7:ff:13:7e:91:00:
         69:ca:d6:38:cb:1f:eb:60:0d:e3:4f:a0:9b:29:bc:2e:a4:e0:
         75:37:77:14:a2:f4:1a:79:b9:70:b9:6a:51:31:20:09:88:85:
         14:1b:ea:87:ef:d6:ec:69:84:29:66:c3:e5:f0:7f:86:74:e7:
         d3:cd:62:95:58:22:59:d0:74:11:f4:8b:3b:c2:a0:39:f4:33:
         0e:72:77:82:f2:58:a1:3e:c8:40:c1:e5:a6:be:df:e5:e7:22:
         dd:b3:f4:71:e1:a4:52:b7:37:ea:f3:14:ad:89:fe:61:44:39:
         4a:cb:f8:19:f8:f1:36:dd:54:a5:b0:c6:e0:b5:ae:6b:cc:3f:
         fd:20:5f:c1:d2:e3:f5:4d:4f:af:84:0b:49:4c:fb:b2:87:5d:
         43:9c:e3:83:b5:e0:40:93:c9:6e:fb:9a:20:34:33:4d:87:76:
         5c:a2:94:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:16 2024 by rpki-client on console-ams.rpki-client.org