Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/3130332e36372e34392e302f32342d3234203d3e20313431363732.roa
File:                     3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (raw, json)
Hash identifier:          ERbfJ4VhqvtfDBN3Q5Q70K9p5C28a+33tZ+Ul7IFQpI=
Subject key identifier:   A7:6B:13:44:0A:D1:6C:F0:05:05:CA:AB:C9:6D:11:5F:59:A4:FF:60
Certificate issuer:       /CN=FE47963FB6E13EFC318606E3CA31013421827343
Certificate serial:       0A43F4145177E5ACEFC313C4905F9D81D4C103E7
Authority key identifier: FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/3130332e36372e34392e302f32342d3234203d3e20313431363732.roa
Signing time:             Wed 27 Dec 2023 06:34:35 +0000
ROA not before:           Wed 27 Dec 2023 06:29:35 +0000
ROA not after:            Wed 25 Dec 2024 06:34:35 +0000
asID:                     141672
IP address blocks:        103.67.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl
                          rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 13:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:43:f4:14:51:77:e5:ac:ef:c3:13:c4:90:5f:9d:81:d4:c1:03:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE47963FB6E13EFC318606E3CA31013421827343
        Validity
            Not Before: Dec 27 06:29:35 2023 GMT
            Not After : Dec 25 06:34:35 2024 GMT
        Subject: CN=A76B13440AD16CF00505CAABC96D115F59A4FF60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9b:fe:99:d9:aa:e8:8f:cb:3a:eb:45:b9:bd:
                    b7:6e:6f:62:18:a3:74:95:c8:73:5c:a7:c9:17:ae:
                    3d:91:4f:bd:e5:8e:28:38:70:41:47:3f:83:fa:72:
                    8b:c2:23:1a:21:3d:a9:cb:b4:27:ea:93:53:da:51:
                    e7:3d:36:0d:a5:c2:8c:cb:0c:63:f9:9e:ec:a0:14:
                    4a:9d:e7:50:6d:ee:fb:ae:9a:d7:56:a8:32:3f:93:
                    74:b8:6b:ca:a1:63:da:cd:69:e0:32:14:a8:c2:60:
                    60:a8:60:67:f8:6a:ac:23:fb:22:0a:dd:71:e0:7d:
                    88:05:19:f5:0c:21:ec:d4:5c:4d:d5:f9:84:44:30:
                    fc:ce:ac:53:f5:ba:70:3d:72:8e:59:35:80:bf:e9:
                    36:68:ad:12:f5:83:91:c7:2f:ad:65:7e:d0:5b:4f:
                    1d:03:a7:20:c1:ae:7c:01:bc:3b:c1:cb:44:31:65:
                    ed:89:b1:ab:38:4f:14:3f:d4:8b:2b:cd:57:9c:d0:
                    ad:94:b6:f9:45:12:18:c1:3f:24:ee:df:a3:64:4d:
                    66:bf:9d:07:0a:21:e9:a5:4c:b8:b6:2a:a4:46:a4:
                    a9:a2:3c:05:67:b0:8a:86:4a:0c:bd:be:0d:8e:25:
                    c5:5a:ce:73:30:84:5c:79:3b:84:85:51:51:86:c4:
                    6e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6B:13:44:0A:D1:6C:F0:05:05:CA:AB:C9:6D:11:5F:59:A4:FF:60
            X509v3 Authority Key Identifier:
                keyid:FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/3130332e36372e34392e302f32342d3234203d3e20313431363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:e9:61:63:6b:48:b9:02:9b:e9:b9:3b:6e:44:22:4a:a1:f5:
         42:c9:13:c8:aa:74:ac:12:21:74:3f:83:29:e2:b5:bf:16:2f:
         7c:6d:1b:9a:cd:9d:a9:3f:12:8c:37:0e:1b:49:55:5c:d1:fe:
         66:a0:4f:c4:28:de:4f:46:12:70:8f:4a:fc:3a:49:99:17:46:
         6f:87:73:cf:30:67:06:7d:d7:87:13:88:35:30:5f:37:77:e1:
         fd:40:62:9f:61:ae:12:8f:3f:92:9c:3c:b8:71:74:9e:0a:bb:
         48:14:ca:87:c0:3c:4c:6b:1d:b5:3b:8b:50:bc:21:74:03:54:
         41:bd:59:39:23:29:a4:ce:41:89:6f:87:58:3d:52:64:2b:40:
         f2:1e:75:a6:f5:11:92:16:e9:64:c4:ae:41:27:4b:37:68:dc:
         b6:b5:9c:94:fe:45:eb:a9:68:7e:1b:ba:5f:05:8f:d8:2f:34:
         dd:6d:8a:5b:34:ae:bf:83:45:8d:e8:96:8d:9c:3a:f6:31:63:
         be:25:91:22:f3:0a:61:e1:e0:1b:0c:eb:b8:97:49:51:ea:7a:
         de:ef:72:1f:57:4f:03:75:dd:2b:08:86:05:4d:8e:7c:2c:40:
         0e:b9:62:3a:4c:ff:7a:4b:ef:f0:2d:ee:b1:82:ce:e8:4e:84:
         43:a8:69:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 15:24:34 2024 by rpki-client on console-fra.rpki-client.org