Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa
File:                     3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (raw, json)
Hash identifier:          fhHYRVOyLx3EWvXLGXFYvmq/vgj8Oa201e8XUizUgAA=
Subject key identifier:   68:19:05:88:EA:3E:2E:F7:06:26:95:D5:B6:3C:41:AD:E0:76:ED:97
Certificate issuer:       /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
Certificate serial:       7420A0DD3D71C2EBEA541E3DC770D4C293595F73
Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa
Signing time:             Thu 30 May 2024 16:00:01 +0000
ROA not before:           Thu 30 May 2024 15:55:01 +0000
ROA not after:            Thu 29 May 2025 16:00:01 +0000
asID:                     134655
IP address blocks:        103.247.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl
                          rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:20:a0:dd:3d:71:c2:eb:ea:54:1e:3d:c7:70:d4:c2:93:59:5f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
        Validity
            Not Before: May 30 15:55:01 2024 GMT
            Not After : May 29 16:00:01 2025 GMT
        Subject: CN=68190588EA3E2EF7062695D5B63C41ADE076ED97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7e:c4:55:90:ce:e4:82:e4:08:e5:fb:7a:6d:
                    ac:91:db:c5:ca:2b:5f:09:93:e4:31:ef:b7:82:da:
                    74:62:bd:45:0b:ad:51:06:4b:4c:a0:16:39:f7:80:
                    a6:1e:95:9d:8a:22:2b:2a:99:8e:ef:1d:ae:e1:32:
                    0b:9a:7f:fd:ab:bb:df:e2:29:6d:5e:c1:21:4e:b5:
                    9f:e4:69:21:71:ef:0f:ce:00:32:92:96:c9:fa:44:
                    4c:a1:dd:07:39:29:8d:de:27:1b:a4:4d:95:d1:e8:
                    20:d4:8c:6a:c6:fe:4f:0a:84:c6:52:0f:56:2f:45:
                    d6:6d:2a:e3:42:0e:d2:37:d5:cc:51:f8:18:a4:8e:
                    66:7a:29:49:c1:5f:1e:fe:7a:cc:54:6c:20:5a:5a:
                    ef:f8:50:ea:4a:26:10:e7:42:e3:94:f9:07:5b:de:
                    f2:b4:5f:dd:be:2f:89:07:8b:6c:76:e9:c8:92:65:
                    93:a5:14:84:04:ec:b9:13:4b:23:a1:4e:44:45:7c:
                    e3:90:6c:db:52:0d:c0:1a:bb:45:e4:d7:da:66:79:
                    0a:23:9e:90:70:c1:39:6b:66:05:62:3a:7b:6b:59:
                    e0:76:08:9e:d8:9b:e0:4e:f6:2b:c1:10:e4:96:4e:
                    11:a6:25:93:9b:ad:8e:b8:ef:29:9d:23:e3:19:76:
                    6d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:19:05:88:EA:3E:2E:F7:06:26:95:D5:B6:3C:41:AD:E0:76:ED:97
            X509v3 Authority Key Identifier:
                keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:f5:83:a5:f2:06:ac:d2:bd:06:87:cd:36:12:37:00:d9:94:
         cc:8a:5f:f1:0c:c1:1d:08:5a:a2:63:86:69:af:26:dc:c7:68:
         20:b7:de:82:a7:a0:f8:c0:72:ad:dc:35:de:54:c9:ac:10:21:
         3c:03:73:6d:74:48:11:0f:90:2c:02:ce:88:19:93:11:83:aa:
         ad:66:f4:9d:f0:be:6d:93:36:ea:c1:cc:8b:b6:43:eb:03:4b:
         3e:d7:51:c9:f4:4c:70:dc:f4:ce:89:3f:c0:e9:c4:08:c4:26:
         85:65:78:00:67:63:90:48:52:2e:64:d6:89:f5:4c:d9:29:af:
         60:c5:43:26:9f:a4:a8:bd:56:9c:d5:aa:da:74:41:bb:b5:7f:
         56:08:50:6a:8d:51:6b:5e:61:d6:fc:03:40:8f:49:e7:83:a5:
         af:65:36:27:33:d6:54:f7:9e:4b:f3:0b:e6:ac:f3:8d:98:b4:
         5d:4b:2c:8f:d3:fd:2b:53:0c:79:02:95:54:08:70:ee:93:fd:
         83:d9:e3:a8:db:af:af:68:65:aa:a8:55:be:f8:84:bf:ad:88:
         aa:51:68:24:6c:bf:d8:b3:58:23:92:f6:a2:03:32:b5:eb:13:
         d8:85:a1:a3:56:30:e6:5a:94:7b:06:6f:41:93:f3:67:03:bf:
         1f:10:b2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:18:50 2024 by rpki-client on console-ams.rpki-client.org