Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e362e3131372e302f32342d3234203d3e20313332313634.roa
File:                     3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (raw, json)
Hash identifier:          UbBgZ51f4C8Vvj6Jx9oSBaJ3qNsiB9IL8hCIyy1Np8E=
Subject key identifier:   CE:C8:4F:2F:12:DD:C1:DB:2C:DD:EF:82:F7:D3:38:2E:00:DE:F8:E6
Certificate issuer:       /CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC
Certificate serial:       76C46B11DC078889188706E4F39B53CB3D1A929F
Authority key identifier: 63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e362e3131372e302f32342d3234203d3e20313332313634.roa
Signing time:             Mon 01 Jul 2024 01:03:11 +0000
ROA not before:           Mon 01 Jul 2024 00:58:11 +0000
ROA not after:            Mon 30 Jun 2025 01:03:11 +0000
asID:                     132164
IP address blocks:        103.6.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl
                          rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c4:6b:11:dc:07:88:89:18:87:06:e4:f3:9b:53:cb:3d:1a:92:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC
        Validity
            Not Before: Jul  1 00:58:11 2024 GMT
            Not After : Jun 30 01:03:11 2025 GMT
        Subject: CN=CEC84F2F12DDC1DB2CDDEF82F7D3382E00DEF8E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:73:08:6e:87:4e:9d:98:2d:c1:76:d9:c3:9a:
                    91:08:7d:c4:75:56:df:07:20:51:db:0c:99:93:13:
                    0b:63:65:64:51:61:3c:da:1a:7e:aa:27:35:9a:06:
                    f0:91:33:cd:46:50:11:27:0c:f7:33:c7:76:28:16:
                    9f:04:a7:76:01:a7:3f:5a:b0:70:e0:a5:ee:38:ae:
                    08:8a:37:28:0b:99:a2:81:53:00:77:dc:1f:89:24:
                    f0:ce:a9:21:8c:7e:9d:00:c1:7e:f9:08:72:72:5f:
                    58:46:ff:11:61:d9:ee:23:c2:93:fd:21:8c:b2:07:
                    44:2d:57:e3:78:44:ca:13:5a:69:cc:1e:7a:78:d5:
                    06:47:35:a4:d6:7d:6c:d5:b2:d1:e6:cc:f8:82:a3:
                    62:ed:13:e8:85:89:0f:01:62:59:6c:93:8b:f6:f3:
                    f2:25:12:4b:74:e0:e0:ac:4c:2e:c1:ee:39:1b:0f:
                    a7:0c:cf:9d:01:ca:51:6e:de:9a:e7:f7:13:0d:40:
                    ce:a3:e3:79:6a:96:6e:43:a5:09:f7:2d:7b:21:28:
                    4e:fd:80:58:c7:cb:02:ff:c2:36:09:e3:ec:d1:a8:
                    46:2c:04:60:94:15:d7:a9:6c:80:ec:79:ea:f2:2d:
                    6f:2f:61:a4:09:37:ae:96:52:ab:91:6f:53:a4:d5:
                    53:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C8:4F:2F:12:DD:C1:DB:2C:DD:EF:82:F7:D3:38:2E:00:DE:F8:E6
            X509v3 Authority Key Identifier:
                keyid:63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e362e3131372e302f32342d3234203d3e20313332313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:ae:2d:7d:9a:35:17:43:d3:f6:9c:81:01:a7:8e:9d:e0:5f:
         b0:4b:d9:92:66:81:93:7b:42:53:6a:66:a2:3c:9d:73:e6:fe:
         91:ad:19:08:28:8f:7e:e1:f7:a4:fb:e1:55:38:ac:d3:27:82:
         f8:8f:8c:a7:0d:27:08:6b:6d:cf:ab:8a:9f:9b:40:2d:b8:fc:
         4f:0d:77:4b:a5:31:ec:bf:36:91:fe:34:8d:87:1f:83:f9:42:
         dc:45:c0:6d:ac:83:a6:65:4b:2c:57:29:a5:75:79:1b:0a:df:
         7c:57:e0:42:30:5f:f8:1a:58:03:7e:e7:63:56:da:1d:dc:61:
         ef:2f:c9:a1:c1:72:cc:ea:f1:a8:d4:c8:5b:f5:8e:f4:64:03:
         14:51:22:b4:5b:03:6d:ce:af:f1:01:dd:18:53:d9:82:45:c3:
         01:75:af:99:9b:79:b3:e8:03:97:e2:06:e2:d3:bc:dd:9c:71:
         1d:90:cb:8f:f5:f0:e1:96:5c:85:71:83:df:fb:5f:be:07:7d:
         ad:9b:01:45:cd:55:84:d1:b3:36:e9:b9:c9:4b:25:80:d0:26:
         f7:00:31:f3:f1:64:00:c6:6a:ea:3d:f5:f6:64:e0:34:b9:8f:
         e3:49:ca:e7:e9:f8:38:49:2a:a9:c2:be:b6:24:34:b7:ad:3d:
         d7:17:a8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:26:45 2024 by rpki-client on console-fra.rpki-client.org