Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa
File:                     3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa (raw, json)
Hash identifier:          qL/obCzfUj7Yti1bb7YA7VrLAo12EtorVb5GvX3dZXI=
Subject key identifier:   C7:8F:E3:2B:39:E5:CA:13:A3:BA:6D:72:55:AA:8E:CD:7F:02:4C:D8
Certificate issuer:       /CN=47CBAD1A648715C5E867F1A2ED3558688608EE19
Certificate serial:       57683E6F160F2659F25D4C17055A73B9CA7321C2
Authority key identifier: 47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa
Signing time:             Mon 03 Jun 2024 09:00:00 +0000
ROA not before:           Mon 03 Jun 2024 08:55:00 +0000
ROA not after:            Mon 02 Jun 2025 09:00:00 +0000
asID:                     140467
IP address blocks:        103.235.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl
                          rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 18:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:68:3e:6f:16:0f:26:59:f2:5d:4c:17:05:5a:73:b9:ca:73:21:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47CBAD1A648715C5E867F1A2ED3558688608EE19
        Validity
            Not Before: Jun  3 08:55:00 2024 GMT
            Not After : Jun  2 09:00:00 2025 GMT
        Subject: CN=C78FE32B39E5CA13A3BA6D7255AA8ECD7F024CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8d:77:10:9e:9e:46:90:5d:1e:ed:b1:72:d7:
                    c8:dc:6a:89:8d:1f:38:6e:11:e7:7c:ee:55:19:75:
                    7f:eb:86:4d:2d:ad:f0:1f:44:8c:b3:78:32:c4:3c:
                    da:36:27:1b:e8:6a:fb:82:ae:1a:95:92:c2:52:b7:
                    b3:8d:93:56:af:40:2a:72:e7:a5:a4:8a:4c:dd:66:
                    46:e3:14:f0:ab:53:ea:8b:e8:45:81:74:9d:16:cf:
                    a3:1e:76:6c:1e:3b:76:78:c7:26:66:4f:fb:36:60:
                    cb:e9:a5:6b:c5:fe:e6:71:53:74:17:12:0e:c4:a3:
                    1f:59:b8:ac:3c:76:46:9c:a1:a8:87:8a:f5:c1:0a:
                    65:37:f4:52:d2:a4:9d:d9:f7:bd:10:f8:4f:eb:c8:
                    eb:26:46:89:a3:ec:7c:89:89:e9:5a:17:bb:2c:f1:
                    52:15:ea:71:71:f5:b2:98:a4:3b:d0:6e:c2:0b:7b:
                    ec:00:28:da:c4:e2:9f:42:fd:19:7e:b7:85:1e:84:
                    45:f3:41:71:b6:1e:47:b7:09:12:ed:81:e6:09:5b:
                    3a:4f:0d:cd:5f:eb:bd:ee:1c:05:9b:7b:7f:ab:7b:
                    45:75:da:1c:27:52:0a:56:a0:35:5d:96:fb:9d:01:
                    4b:62:c4:af:cf:78:4b:d2:8b:77:d6:68:42:9c:94:
                    c1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8F:E3:2B:39:E5:CA:13:A3:BA:6D:72:55:AA:8E:CD:7F:02:4C:D8
            X509v3 Authority Key Identifier:
                keyid:47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:2d:40:c6:26:93:90:a3:36:11:5e:32:1c:b1:4f:38:9b:02:
         9c:e5:60:3f:32:41:01:f4:37:72:73:81:8e:06:5a:53:b7:a7:
         f9:54:cd:2d:2d:c1:af:bc:5f:69:85:16:ef:11:bf:dd:3b:09:
         5a:11:13:44:b5:42:72:f8:77:d0:e0:10:51:a8:75:ed:01:92:
         b9:b9:4d:0e:eb:37:01:36:60:77:50:2d:2a:ee:38:79:18:a3:
         28:e2:be:39:10:15:66:a3:e4:ca:c7:f2:8b:55:b1:63:ea:93:
         ba:45:bc:15:7a:5e:66:15:9e:61:54:d1:c3:57:2b:ac:02:05:
         fd:b6:5e:6c:0b:a2:9a:97:31:b0:1e:b7:b0:24:0a:e9:76:52:
         9a:24:59:35:19:e3:7c:e8:0a:c8:3e:dd:d6:bd:b0:03:d1:a8:
         3d:aa:dc:15:0f:91:2b:1a:2d:a7:c2:2f:6f:78:53:d5:d6:eb:
         48:66:9f:b0:18:dc:22:cb:71:da:fa:2d:eb:6b:f6:03:33:14:
         69:f0:d9:3f:4e:35:52:ba:20:ab:24:ef:ed:c7:ac:a6:04:ca:
         6e:f5:47:62:a0:1d:a0:9c:94:0a:9d:68:8d:d5:58:30:80:06:
         3c:e0:72:12:db:ba:29:97:1f:b0:ca:25:2e:64:55:df:44:47:
         16:37:f2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:44 2024 by rpki-client on console-fra.rpki-client.org