Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa
File:                     3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa (raw, json)
Hash identifier:          V1cdbz2B4KnRWdpevX8pRA5Z1G9fpGPOBnApCOURAWY=
Subject key identifier:   6D:6F:A8:E9:BC:C7:1F:EC:37:E8:79:76:BA:FE:AC:6C:C0:ED:90:20
Certificate issuer:       /CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E
Certificate serial:       7425292D15B8342F205D19A245F04BEECF41DB1C
Authority key identifier: 70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa
Signing time:             Fri 13 Sep 2024 07:00:00 +0000
ROA not before:           Fri 13 Sep 2024 06:55:00 +0000
ROA not after:            Fri 12 Sep 2025 07:00:00 +0000
asID:                     139941
IP address blocks:        103.146.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl
                          rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 15:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:25:29:2d:15:b8:34:2f:20:5d:19:a2:45:f0:4b:ee:cf:41:db:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E
        Validity
            Not Before: Sep 13 06:55:00 2024 GMT
            Not After : Sep 12 07:00:00 2025 GMT
        Subject: CN=6D6FA8E9BCC71FEC37E87976BAFEAC6CC0ED9020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:b9:2f:85:2a:f0:07:97:5c:c2:d2:1b:72:
                    81:7c:d2:07:32:7b:bf:69:c6:d9:be:76:4e:62:58:
                    ae:9b:de:b5:e0:f7:65:83:48:0c:69:78:93:97:ad:
                    8c:98:40:9a:17:79:23:89:cd:87:7e:a7:4e:2c:d0:
                    05:9c:4e:80:5c:00:3d:21:a0:05:15:b1:32:01:97:
                    dc:ac:26:34:a8:b2:38:f0:6c:ba:aa:e9:6a:3f:54:
                    8a:1d:81:65:bb:4e:6a:9a:77:c2:01:c7:44:d0:7f:
                    05:bc:20:6a:4c:e1:ec:46:f0:d6:f3:06:db:1f:8e:
                    89:8a:fa:df:f3:64:e8:18:8d:db:12:a4:98:6f:30:
                    ad:5c:20:28:da:a6:c8:6e:bb:41:9f:a0:94:1f:8c:
                    43:6f:8a:b3:34:33:2f:e4:23:6d:56:72:36:40:94:
                    89:a7:76:e0:28:4a:3a:34:f9:48:2c:1f:8e:c2:47:
                    31:a9:74:d2:0a:12:13:5c:18:bf:2e:f2:a7:53:45:
                    0d:3b:b6:53:23:bd:f9:b4:b1:19:d2:a1:ac:52:4e:
                    2e:a6:7f:80:2b:4f:70:55:3b:ef:0b:3d:58:3a:2e:
                    12:ac:5e:4b:1b:50:17:c0:2b:38:95:c8:11:9c:52:
                    b1:13:d6:72:f2:43:3a:9b:25:6c:56:41:70:0f:3d:
                    75:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6F:A8:E9:BC:C7:1F:EC:37:E8:79:76:BA:FE:AC:6C:C0:ED:90:20
            X509v3 Authority Key Identifier:
                keyid:70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:0b:90:3b:db:01:eb:ba:3e:fc:35:15:31:03:c8:bb:03:e0:
         a6:ca:b6:c4:d0:c2:69:eb:bf:b7:de:f1:ec:e8:9f:44:66:6f:
         76:29:6e:1d:63:a2:7f:28:b1:99:95:76:00:f3:83:69:2e:0c:
         ab:7f:70:19:2a:40:ec:9c:37:5e:e6:33:85:19:d8:3b:89:24:
         d0:ef:b4:a5:f0:d9:85:5f:b7:aa:93:3c:98:fa:ba:8e:52:e6:
         b0:e8:09:2d:2c:7f:1a:69:cc:15:9a:62:42:5a:17:e0:37:11:
         a4:7b:54:50:01:59:93:2b:ff:a7:8b:99:f8:bf:17:de:3c:6b:
         73:bf:63:70:e3:b9:2d:ff:e0:4a:ee:e5:d9:15:33:2a:48:c8:
         c7:3f:30:9f:e2:0c:da:52:35:e2:ed:56:fb:3f:cd:34:e1:43:
         37:3c:2d:1f:f5:25:86:93:0a:71:83:06:2f:5d:66:6e:1b:64:
         b1:85:a2:fe:a6:0f:94:6c:f8:55:c1:51:42:da:d9:25:69:a3:
         54:cd:4e:df:af:81:59:4a:7b:b0:38:60:1c:70:c6:3f:21:af:
         0d:c2:a9:e1:40:ff:c2:5e:a7:5f:63:86:2a:cb:e7:e8:d6:4a:
         5a:49:32:e4:9c:9a:56:9f:a8:7c:b9:f6:40:f8:93:43:02:4c:
         00:94:c1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:36 2024 by rpki-client on console-ams.rpki-client.org