Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          8OO6DLpqnlpBk81xASwZPv96p/91vtqjLHKSKPsI2ik=
Subject key identifier:   C4:94:66:A5:A0:A9:70:9C:0A:35:2F:0F:F0:F0:88:F0:8C:4F:1D:7F
Certificate issuer:       /CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8
Certificate serial:       1A6BA09927B5B2ED70AB4740D010D59065BEB212
Authority key identifier: FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa
Signing time:             Wed 03 Jan 2024 08:02:03 +0000
ROA not before:           Wed 03 Jan 2024 07:57:03 +0000
ROA not after:            Wed 01 Jan 2025 08:02:03 +0000
asID:                     135478
IP address blocks:        103.121.246.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl
                          rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 00:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6b:a0:99:27:b5:b2:ed:70:ab:47:40:d0:10:d5:90:65:be:b2:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8
        Validity
            Not Before: Jan  3 07:57:03 2024 GMT
            Not After : Jan  1 08:02:03 2025 GMT
        Subject: CN=C49466A5A0A9709C0A352F0FF0F088F08C4F1D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6a:c2:7f:e7:5f:84:43:e0:20:d5:1b:3f:e1:
                    9f:bf:90:ad:d2:d9:c7:2d:fe:15:7f:ea:81:de:90:
                    87:d9:99:78:d5:37:17:67:a1:f8:b8:75:ea:7a:c9:
                    b0:e7:ce:b4:e5:91:59:a9:58:b8:9f:ac:7c:5a:43:
                    1c:72:65:83:f9:05:25:49:e7:81:24:ba:40:86:e8:
                    ca:9c:78:25:75:7c:05:c4:fa:2d:5e:5b:7e:3d:69:
                    89:70:41:3f:1d:e6:39:ce:90:00:60:00:e1:76:2f:
                    49:93:ac:2f:aa:d1:83:d3:08:59:b5:21:f9:f9:a6:
                    e4:ae:30:10:77:b2:8b:7d:c6:ff:bc:e9:4e:84:5c:
                    87:b1:c6:7f:fc:d4:ca:3d:6b:10:fc:5a:f2:0f:f8:
                    72:13:e6:0b:f9:7e:6b:4c:a5:12:6e:3d:ce:5b:78:
                    69:00:ef:eb:ee:ad:71:d3:08:c4:46:21:ab:38:98:
                    bc:14:53:cf:59:ad:7e:b6:d8:c1:d5:1a:5a:25:d1:
                    a9:46:5a:cd:ab:87:68:91:9d:e5:ae:8f:3b:62:4e:
                    4f:bb:60:0e:ae:c9:5c:b9:9b:ab:56:b3:b6:a1:f9:
                    d8:d4:f7:95:ba:43:13:88:9b:a4:fe:3a:97:ef:fd:
                    ea:a0:d4:b5:1a:f1:a3:d4:9a:99:9b:7b:33:65:ec:
                    af:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:94:66:A5:A0:A9:70:9C:0A:35:2F:0F:F0:F0:88:F0:8C:4F:1D:7F
            X509v3 Authority Key Identifier:
                keyid:FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:ec:06:57:3a:5a:17:21:a9:ba:12:03:03:0c:d0:1a:b5:d2:
         da:81:dd:68:f4:19:82:74:ce:45:02:14:b8:bf:99:b3:3d:bd:
         60:d2:ae:1e:c1:41:1c:ee:f4:86:e2:5e:74:5a:0a:84:f2:ef:
         c3:8d:3a:e4:3e:31:6e:48:fc:12:36:e2:29:7e:b4:2f:2a:4d:
         a4:63:7f:95:05:a3:e2:04:65:40:a9:29:00:7e:eb:88:d2:ae:
         ad:b1:47:d2:61:62:df:39:1c:62:df:77:5e:32:2c:d0:62:5e:
         c5:44:7d:de:ed:d2:53:6a:71:41:e5:88:16:34:c8:06:20:6e:
         e3:0d:59:09:d1:7a:6c:6b:6d:6e:7e:f0:6e:85:37:11:89:f6:
         d0:ef:5e:13:6c:2c:79:28:83:64:42:59:c2:03:76:4a:9a:2a:
         a7:81:79:91:43:45:3a:39:c8:43:fa:4f:8a:ee:ff:48:41:5a:
         5a:98:2b:a2:f9:d2:9d:e1:c6:07:fb:fe:5d:81:60:c7:9f:78:
         39:99:fd:c1:ff:37:f8:81:f6:48:f2:c8:85:21:ca:da:32:b8:
         2f:c9:ca:3c:b2:29:5a:b8:f1:56:13:dd:ad:8b:cd:b7:d8:03:
         00:43:f8:f1:ab:62:78:d5:ce:7f:f1:59:6f:ab:c8:33:55:61:
         29:ed:b2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org