Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa
File:                     3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa (raw, json)
Hash identifier:          /sS87AVD/V6SDcbcsUh63D+3tprQhbkf5DiJIjKfhIY=
Subject key identifier:   29:49:3F:59:1B:75:6D:28:E3:7F:3B:E9:07:95:5D:7C:B5:BF:35:96
Certificate issuer:       /CN=FE47963FB6E13EFC318606E3CA31013421827343
Certificate serial:       06AEC42FC1D2C8B96831B3C303C9F18733DA6D67
Authority key identifier: FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa
Signing time:             Wed 27 Dec 2023 06:27:48 +0000
ROA not before:           Wed 27 Dec 2023 06:22:48 +0000
ROA not after:            Wed 25 Dec 2024 06:27:48 +0000
asID:                     141672
IP address blocks:        103.162.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl
                          rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 13:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ae:c4:2f:c1:d2:c8:b9:68:31:b3:c3:03:c9:f1:87:33:da:6d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE47963FB6E13EFC318606E3CA31013421827343
        Validity
            Not Before: Dec 27 06:22:48 2023 GMT
            Not After : Dec 25 06:27:48 2024 GMT
        Subject: CN=29493F591B756D28E37F3BE907955D7CB5BF3596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:a3:6c:d2:fe:04:a8:b2:25:44:18:dc:7c:
                    55:12:09:23:14:33:85:f2:be:b5:68:51:17:e8:e3:
                    0e:83:75:2f:0f:66:ac:e9:3c:ae:aa:52:b5:2d:3f:
                    71:57:0c:2d:1c:f5:17:2d:7e:ca:2a:2b:56:d2:6f:
                    5f:9e:5f:cb:7b:10:67:0e:86:f5:b9:e7:72:28:76:
                    2a:41:69:7d:6b:da:2c:5a:d9:2c:85:3d:ad:38:42:
                    0b:6d:74:8f:db:d7:eb:a3:fc:f6:28:e5:c4:da:34:
                    e6:ea:29:35:de:6c:6c:72:04:e9:5b:d9:e7:7d:f3:
                    62:10:3b:3a:be:c6:c1:bf:a4:46:67:fd:7c:ae:89:
                    7c:e3:c3:a3:60:a8:90:80:9a:91:ee:48:d1:ff:8d:
                    eb:c9:d3:d1:82:8e:94:3e:aa:66:ce:31:7d:86:30:
                    5b:b7:84:14:3a:e3:f1:25:5d:d9:f4:ba:e5:ea:5e:
                    36:59:76:f9:f9:ee:0c:4c:00:be:1b:3b:ae:83:4d:
                    e4:7b:cd:9d:dc:af:fb:da:1e:22:de:54:71:bc:cd:
                    a1:6e:72:36:66:c8:74:13:25:84:14:0f:66:cd:ef:
                    ee:f8:60:c9:60:4b:b5:40:e8:34:29:b2:df:b4:ce:
                    91:ae:8a:99:65:3e:5e:17:4c:54:1a:11:bb:fa:86:
                    6c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:49:3F:59:1B:75:6D:28:E3:7F:3B:E9:07:95:5D:7C:B5:BF:35:96
            X509v3 Authority Key Identifier:
                keyid:FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:35:f3:b3:c7:39:6a:ff:f2:ce:ae:b3:cb:9b:61:7e:b1:99:
         6b:d7:ab:da:cc:d3:54:ec:bb:b9:b9:88:f4:42:4b:1f:95:6c:
         40:74:d2:da:57:f6:82:c6:4a:1f:68:8c:82:28:6f:d4:80:92:
         53:86:b0:b0:0f:40:22:a8:b5:12:d7:60:78:fd:06:58:0c:b5:
         54:85:24:b6:a1:d7:9c:6e:74:be:f4:fe:ea:da:3a:78:f7:61:
         a8:42:13:64:b3:a5:a9:b7:5f:5c:e4:70:62:76:38:59:48:04:
         df:2e:28:90:43:2c:15:b0:48:4c:a7:a8:4d:df:ae:4a:e6:4f:
         ae:89:b2:0c:9a:65:b6:0a:b0:5b:aa:cd:78:32:58:c0:46:d1:
         90:5f:57:a5:3d:f9:aa:0d:2d:08:a2:03:c2:5f:f4:0f:79:6d:
         9c:db:2d:c8:e3:9f:dd:f8:bd:aa:42:1a:69:c4:6a:c8:0d:57:
         23:cf:22:6d:14:c3:5e:b1:40:8a:30:10:f8:74:07:32:e5:f5:
         94:77:86:7f:94:29:45:26:10:b7:f8:dc:7e:cd:68:30:60:80:
         c9:af:b5:93:7a:57:ac:11:aa:d2:be:4e:99:bb:3a:13:9b:22:
         0d:5c:17:81:08:fd:cd:2d:cd:47:e9:4c:0e:09:20:bc:45:fe:
         dc:c5:44:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 15:24:34 2024 by rpki-client on console-fra.rpki-client.org