Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/3130332e3134362e3139372e302f32342d3234203d3e20313339393431.roa
File:                     3130332e3134362e3139372e302f32342d3234203d3e20313339393431.roa (raw, json)
Hash identifier:          a9rim8XhPQdPBnTRrhUohzYt6GpGCVRMKh2SkMkG9T8=
Subject key identifier:   1F:56:52:25:FC:6A:E4:C8:6C:97:BD:99:E7:CD:BA:ED:F9:6F:0B:C9
Certificate issuer:       /CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E
Certificate serial:       497F375D10D522681725850ACFFBFA28BA274F66
Authority key identifier: 70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/3130332e3134362e3139372e302f32342d3234203d3e20313339393431.roa
Signing time:             Fri 13 Sep 2024 06:00:00 +0000
ROA not before:           Fri 13 Sep 2024 05:55:00 +0000
ROA not after:            Fri 12 Sep 2025 06:00:00 +0000
asID:                     139941
IP address blocks:        103.146.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl
                          rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 15:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:7f:37:5d:10:d5:22:68:17:25:85:0a:cf:fb:fa:28:ba:27:4f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E
        Validity
            Not Before: Sep 13 05:55:00 2024 GMT
            Not After : Sep 12 06:00:00 2025 GMT
        Subject: CN=1F565225FC6AE4C86C97BD99E7CDBAEDF96F0BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:32:d0:b3:94:40:bc:7d:92:e2:79:a3:5a:0d:
                    36:56:3f:7d:f2:de:c8:c9:aa:62:98:45:0d:89:7a:
                    57:d7:04:5f:07:e8:7e:de:2b:da:5d:d5:80:5a:5b:
                    51:9b:83:b3:7f:92:4a:bf:60:f4:a1:17:97:80:6c:
                    dc:1a:10:60:2f:26:74:60:65:49:67:50:d1:cc:90:
                    1f:5d:50:b8:32:e8:4a:19:74:cb:84:03:fa:80:4b:
                    7c:7a:a4:53:1e:72:2e:7f:f4:94:7c:cb:f3:78:31:
                    4e:8a:d6:dd:e0:4b:29:1a:3e:5e:a1:02:96:a3:bd:
                    06:af:56:d0:3d:6b:bd:44:8c:ee:21:17:9f:e5:85:
                    ac:96:75:d7:a6:2c:39:d0:aa:ad:98:2e:85:82:10:
                    83:6d:ff:53:7d:cc:80:f2:83:d6:5a:37:f3:8a:35:
                    1b:6a:a8:0c:f4:53:f2:70:6a:3a:4f:b9:19:89:d8:
                    e3:03:fa:9a:79:06:a4:21:11:b7:5e:35:2b:20:51:
                    56:2f:41:19:12:99:6d:f1:15:cb:a7:56:f2:84:38:
                    dc:3c:93:f0:05:20:fd:5d:a8:9b:aa:6d:54:d1:b0:
                    de:bf:01:d3:f6:9f:8c:f6:b0:dc:9c:8d:0c:b1:85:
                    2a:f7:74:4c:1d:d6:df:91:45:86:16:f8:77:60:9c:
                    b5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:56:52:25:FC:6A:E4:C8:6C:97:BD:99:E7:CD:BA:ED:F9:6F:0B:C9
            X509v3 Authority Key Identifier:
                keyid:70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/3130332e3134362e3139372e302f32342d3234203d3e20313339393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:44:d1:cf:bc:ad:26:50:ff:37:1d:88:15:b1:30:69:9d:08:
         7e:ff:a8:98:75:ed:57:30:99:6e:62:19:fe:db:ab:3c:32:88:
         57:72:f7:1f:8c:aa:79:f5:2e:74:0d:04:1f:a6:c1:12:10:5e:
         c9:02:ac:3c:ed:a9:88:3d:57:38:0d:3d:57:25:d1:a5:a5:a8:
         20:97:d6:42:a4:c7:46:82:bb:46:cd:9a:08:fc:7f:9e:6b:94:
         74:46:3a:87:f4:2f:76:68:b0:87:5c:fa:98:0f:30:ee:e4:d4:
         09:55:dc:13:43:44:16:88:77:7b:db:b2:a2:16:32:91:f6:b1:
         01:44:d6:1f:fe:b9:e7:8c:0b:cb:20:cc:15:ee:28:1a:13:ec:
         c8:8d:fe:c5:35:41:b9:d2:77:38:66:32:a1:4b:20:47:0f:8b:
         02:ea:1d:f6:aa:b0:e9:f4:fd:ec:95:c6:b6:67:9c:55:26:68:
         72:01:df:fe:d1:42:67:84:f3:0e:1f:02:e7:c9:b8:1f:88:c9:
         73:5c:f2:84:86:17:f8:19:57:ec:2f:fd:21:62:4d:8f:10:41:
         66:b1:0c:2e:3d:9e:e1:e1:5f:7e:84:8d:c9:47:4a:d6:e6:d1:
         5a:4a:60:d9:2b:c1:a8:41:9b:a3:45:c6:47:8b:84:02:77:c0:
         de:ce:ea:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:51 2024 by rpki-client on console-fra.rpki-client.org