Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/3130332e34362e382e302f32332d3234203d3e20313532303538.roa
File:                     3130332e34362e382e302f32332d3234203d3e20313532303538.roa (raw, json)
Hash identifier:          8g3xpmivFCkMM+35rK/Ufc/dzyXuCsYY9zwLfPimwco=
Subject key identifier:   F7:6D:14:B9:5D:39:73:90:89:B5:C5:04:67:D2:DB:2E:DC:1F:0C:11
Certificate issuer:       /CN=C94D41BEAEF4A56979753B500D992FE3CAE43727
Certificate serial:       6AB740CE7B77AF6DB4DDC5B6C147F14DF897C5F1
Authority key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/3130332e34362e382e302f32332d3234203d3e20313532303538.roa
Signing time:             Wed 10 Jul 2024 07:04:41 +0000
ROA not before:           Wed 10 Jul 2024 06:59:41 +0000
ROA not after:            Wed 09 Jul 2025 07:04:41 +0000
asID:                     152058
IP address blocks:        103.46.8.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl
                          rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b7:40:ce:7b:77:af:6d:b4:dd:c5:b6:c1:47:f1:4d:f8:97:c5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727
        Validity
            Not Before: Jul 10 06:59:41 2024 GMT
            Not After : Jul  9 07:04:41 2025 GMT
        Subject: CN=F76D14B95D39739089B5C50467D2DB2EDC1F0C11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4c:c1:21:a9:c9:a3:92:10:46:78:a9:ff:34:
                    35:d6:1e:1f:db:98:26:13:3e:1e:91:35:60:5b:15:
                    ab:c1:af:85:4e:8a:96:f0:bc:10:23:00:76:d8:78:
                    3d:ed:fc:e1:36:88:e5:8a:5f:f4:6a:72:a3:15:c9:
                    19:dc:99:88:67:b2:1b:41:71:df:e2:5e:2b:ba:86:
                    36:d2:c8:a7:b8:89:5e:16:cc:00:54:59:39:43:79:
                    9f:c8:2b:06:47:7c:d0:ea:2a:a6:ee:97:91:18:df:
                    58:76:5b:0b:13:46:57:3d:4e:49:96:7d:b8:02:2b:
                    7c:31:ac:d6:6f:ac:cc:a4:0e:3e:9e:ac:06:2c:72:
                    c3:a8:4c:ed:0b:88:5a:5f:ab:d7:f6:8b:c1:dc:89:
                    a9:14:8e:15:2f:7a:fd:f0:9a:c9:89:44:d7:62:29:
                    a2:9b:0b:d7:6a:64:3f:0c:34:9a:57:cf:40:23:ad:
                    c9:e3:4c:8c:c5:52:91:d6:4b:14:cf:1a:f4:eb:1c:
                    cd:f2:b5:b9:5d:f4:8c:19:dd:9f:9f:ef:52:eb:c5:
                    fe:08:8a:a2:7d:f1:f0:32:e4:5a:b2:fc:61:8f:be:
                    17:12:cd:86:0f:a8:a6:f4:95:c9:8d:64:f9:c8:40:
                    be:5d:bb:3b:21:fc:a5:56:d9:84:65:9a:2e:8b:88:
                    05:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6D:14:B9:5D:39:73:90:89:B5:C5:04:67:D2:DB:2E:DC:1F:0C:11
            X509v3 Authority Key Identifier:
                keyid:C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/3130332e34362e382e302f32332d3234203d3e20313532303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:a5:9e:aa:9e:47:93:eb:c1:da:46:06:d0:8a:b4:14:5b:9d:
         ae:0f:c7:6d:30:d9:c7:17:cc:81:b0:e1:08:51:aa:e2:4b:c2:
         07:6f:16:2f:02:ee:72:f7:f1:7d:3e:f6:00:a9:30:7c:39:31:
         fe:54:65:13:81:06:1d:58:8d:6d:20:9d:88:07:0f:85:ed:18:
         95:fe:62:13:a7:89:f8:47:ce:61:a1:e8:e4:da:57:78:7d:20:
         83:e8:06:d9:11:56:98:c5:25:2e:6d:52:ec:df:59:ce:a2:fd:
         a5:f1:ae:e0:97:34:9b:d6:99:c9:10:9e:71:0f:2c:a7:12:fa:
         5a:5c:44:92:bb:53:51:2f:e7:e6:2e:9c:0f:2e:8b:9e:a7:d8:
         78:15:ac:64:76:ad:08:6b:52:77:ef:4c:61:17:ff:ba:f4:e8:
         a0:30:52:5f:89:a6:61:28:94:20:4c:e5:83:8d:aa:29:79:43:
         b3:17:9c:4b:4f:8b:35:2b:11:d4:d6:fe:ec:85:32:22:ec:42:
         9c:fc:29:87:45:a0:8d:ec:5d:3f:56:5b:39:81:9a:7b:49:11:
         a5:e0:0f:3e:1b:b5:a0:b8:de:04:04:7d:a6:e9:bb:a7:50:39:
         71:82:2f:57:50:04:11:e5:2b:79:8f:f3:05:0e:64:dc:9c:84:
         23:48:33:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org