Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa
File:                     3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa (raw, json)
Hash identifier:          01jHh+FfyPAbJeYQk+m56wOnb+AW1a+9NjO91/TsYUM=
Subject key identifier:   DE:4A:A4:E3:35:F5:5B:35:35:27:9D:A0:DF:F5:7A:43:A1:08:BF:9F
Certificate issuer:       /CN=4F679A207D2588B709C82CDAB000736182F881E1
Certificate serial:       7D8D4CA21F889E25B95E4691618353BC37A758C3
Authority key identifier: 4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa
Signing time:             Wed 28 Aug 2024 10:18:52 +0000
ROA not before:           Wed 28 Aug 2024 10:13:52 +0000
ROA not after:            Wed 27 Aug 2025 10:18:52 +0000
asID:                     149971
IP address blocks:        103.194.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl
                          rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8d:4c:a2:1f:88:9e:25:b9:5e:46:91:61:83:53:bc:37:a7:58:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F679A207D2588B709C82CDAB000736182F881E1
        Validity
            Not Before: Aug 28 10:13:52 2024 GMT
            Not After : Aug 27 10:18:52 2025 GMT
        Subject: CN=DE4AA4E335F55B3535279DA0DFF57A43A108BF9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dd:6d:7a:62:bd:e0:b7:01:f6:29:e3:60:76:
                    18:75:e4:32:61:dc:f7:cd:73:29:9a:a1:b8:46:81:
                    82:c4:73:cd:ca:6a:b2:7d:e2:33:38:a3:4e:58:1c:
                    90:7d:b5:d3:34:65:57:5c:8b:f8:6f:41:e9:1a:72:
                    b3:e8:b6:c4:77:23:c3:27:d5:10:c7:53:5a:7a:70:
                    4c:56:bf:83:b5:32:4c:d4:48:cc:cd:da:b6:b9:a9:
                    55:a0:ba:70:81:19:66:de:5a:97:6f:34:d2:63:49:
                    01:85:23:c1:55:41:8e:62:a8:06:35:96:5a:3f:b3:
                    17:dd:ca:c2:63:0e:b5:c4:ae:1a:a6:f8:52:8d:32:
                    7d:d5:ed:7a:e5:7d:01:4c:21:12:f2:24:fb:88:d2:
                    3f:b7:6d:cf:2e:22:fa:9b:cd:2c:6b:28:25:aa:47:
                    d8:2b:a5:e5:33:8c:92:5f:72:4a:b6:b6:24:e5:41:
                    47:a5:f5:bb:6c:e9:9c:c9:dc:3f:4e:d5:a4:9f:bb:
                    b4:b6:a3:04:a2:f2:ee:15:98:d9:db:13:e6:30:d5:
                    9f:ba:43:9e:39:e5:38:64:fd:8d:ec:2b:96:ab:b6:
                    2c:55:e3:9e:68:f1:bc:af:95:8b:ec:e1:03:22:98:
                    75:8f:bf:3f:06:af:8e:32:4a:70:13:cc:a9:ad:6e:
                    77:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4A:A4:E3:35:F5:5B:35:35:27:9D:A0:DF:F5:7A:43:A1:08:BF:9F
            X509v3 Authority Key Identifier:
                keyid:4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.194.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:d5:91:84:5d:b7:da:f8:6b:2c:7f:5c:9b:3e:a6:52:b5:32:
         5d:bb:87:cf:3e:1e:7c:42:d9:9b:c0:1f:53:20:9d:a8:2a:31:
         cc:4a:94:ab:60:7e:30:09:1b:76:f3:6d:61:1e:e2:c6:6b:67:
         e5:f1:ae:34:47:09:24:d2:d2:59:0f:91:4c:a9:d5:03:8c:1c:
         b9:38:5e:28:d2:2a:2d:68:96:1d:e2:dd:ef:26:d2:8f:d5:e2:
         92:ff:76:d1:94:45:52:a5:30:4f:45:40:0b:99:91:e4:3b:76:
         82:2e:ec:86:6d:4f:21:05:98:ed:ee:35:c6:ad:4d:28:85:21:
         a7:f1:a9:d7:69:e2:7b:ab:85:cb:f6:56:85:e7:f0:af:41:4c:
         20:1f:09:23:f5:fd:22:a0:ce:bb:54:4f:49:82:64:d3:5b:5f:
         16:ef:60:ad:82:06:2c:03:c1:91:bf:40:47:97:86:0c:28:52:
         be:f4:76:8e:63:f8:13:98:0a:ef:f4:9b:e7:09:87:62:a4:2e:
         3d:8b:d6:85:88:23:ce:66:fa:6f:54:5b:68:10:cb:3d:16:42:
         55:cf:e9:84:fa:28:e0:3e:75:15:d7:ff:78:ce:fb:6a:6d:63:
         be:21:a3:1a:04:23:67:76:88:ab:4f:c0:87:c1:f6:0d:d7:53:
         3e:5c:43:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:26 2024 by rpki-client on console-fra.rpki-client.org