Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa
File:                     3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (raw, json)
Hash identifier:          aKld9l9R4WlFXWdVgKv9NI28vBdZHDRtqSATzJnMEX8=
Subject key identifier:   6E:64:3D:AE:1D:4A:32:D2:B8:83:96:CA:C8:8E:E4:A6:E6:E2:32:65
Certificate issuer:       /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
Certificate serial:       7A25A6BF3A363BEEB166FF460804CEBC4F75685F
Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa
Signing time:             Thu 29 Jun 2023 16:00:00 +0000
ROA not before:           Thu 29 Jun 2023 15:55:00 +0000
ROA not after:            Thu 27 Jun 2024 16:00:00 +0000
asID:                     134655
IP address blocks:        103.247.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl
                          rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:25:a6:bf:3a:36:3b:ee:b1:66:ff:46:08:04:ce:bc:4f:75:68:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
        Validity
            Not Before: Jun 29 15:55:00 2023 GMT
            Not After : Jun 27 16:00:00 2024 GMT
        Subject: CN=6E643DAE1D4A32D2B88396CAC88EE4A6E6E23265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:08:27:23:c6:eb:4a:08:88:35:3f:d1:56:5f:
                    5e:a1:9d:f0:25:3c:82:e2:1e:db:89:c0:18:37:bf:
                    6a:8c:3c:78:5d:66:d3:93:2f:13:e7:48:18:28:8e:
                    6a:d8:b2:5d:52:e8:ce:58:b7:90:39:ed:f9:75:60:
                    e6:0c:49:ed:41:49:6e:cb:88:7c:7b:28:2d:e2:f3:
                    ea:81:95:fe:d4:fb:64:66:92:bb:cb:c5:0e:af:20:
                    b8:a3:42:4e:c2:a8:ba:d8:da:ab:12:af:01:3d:c0:
                    bd:75:8d:33:8f:b7:17:3b:5c:ce:f1:99:95:1d:3b:
                    47:1f:33:0c:20:d9:9d:2b:87:cf:92:b6:68:87:88:
                    f6:75:c2:6b:4b:c7:f3:5f:94:e7:d5:e1:9d:d4:dc:
                    59:6a:1d:93:ae:25:bb:01:47:4a:2b:55:de:06:b7:
                    13:e9:d0:9d:bf:cd:6c:39:dd:b7:2c:35:9f:4a:97:
                    88:ed:5f:56:a7:b1:3d:14:eb:ce:b0:cc:f3:76:22:
                    34:df:b8:28:24:16:c7:86:03:41:11:fe:9e:72:f3:
                    5a:bd:9f:47:a3:d8:f5:6b:ac:db:de:28:fd:30:48:
                    78:ab:ec:14:70:57:1c:68:4d:94:21:74:aa:c0:b2:
                    d1:c9:85:9d:02:5f:80:03:2e:c1:7c:27:3c:bd:9f:
                    15:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:64:3D:AE:1D:4A:32:D2:B8:83:96:CA:C8:8E:E4:A6:E6:E2:32:65
            X509v3 Authority Key Identifier:
                keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:9a:8f:24:1e:f9:1a:41:22:2f:92:29:6b:a3:e9:0b:3e:6c:
         bc:58:97:70:54:e9:62:93:27:33:48:0a:12:ba:1f:cd:7d:d3:
         a5:64:61:63:7f:6f:e8:14:98:89:2c:76:58:ac:ba:63:60:83:
         03:b1:12:9e:6a:09:e0:c0:1a:fa:53:b8:79:c4:36:2d:a4:f7:
         02:64:eb:95:76:e2:0e:ff:08:8c:9b:bc:13:cd:be:e5:f2:30:
         be:f6:79:64:b3:13:46:ef:86:e7:7f:db:eb:71:6a:8f:19:e1:
         7a:66:5c:8a:ab:2f:6c:f4:d7:8f:9e:76:ba:f5:12:1c:43:9b:
         8d:fd:d1:7f:8e:d1:0f:0a:33:5d:5d:67:df:27:e5:8d:61:55:
         65:b8:e9:17:e1:f0:4e:f1:10:24:6b:5b:10:ee:14:0e:18:18:
         44:b7:14:7b:64:ee:b2:f7:bf:5f:c9:5f:cd:29:de:d5:e2:d2:
         e5:39:2e:63:88:85:97:8d:c0:ca:f2:ee:4b:52:20:93:4d:cd:
         4f:e3:a0:13:0d:2d:5d:8c:46:26:ab:5d:b9:7c:cf:16:19:30:
         7b:b3:db:15:ff:7f:72:01:71:0f:85:f5:17:fe:be:c4:6d:72:
         40:c3:ae:78:1d:ca:c9:11:b8:5b:b4:2e:50:27:18:32:3d:6c:
         41:e0:0b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 22:25:47 2024 by rpki-client on console-ams.rpki-client.org