Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/3130332e3234372e3231362e302f32322d3234203d3e203538343935.roa
File:                     3130332e3234372e3231362e302f32322d3234203d3e203538343935.roa (raw, json)
Hash identifier:          mWZJIBhkRwFKUqEOvSWPbO8PSLriLkVXp8Vl4UV4zP0=
Subject key identifier:   8C:07:F6:9F:3E:FD:F2:FE:0A:2C:07:C4:BD:67:CA:3F:E8:AE:51:FB
Certificate issuer:       /CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6
Certificate serial:       46F4102223393DB14D09487FB7E9E50E2B05D873
Authority key identifier: 6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/3130332e3234372e3231362e302f32322d3234203d3e203538343935.roa
Signing time:             Mon 01 Jul 2024 01:03:59 +0000
ROA not before:           Mon 01 Jul 2024 00:58:59 +0000
ROA not after:            Mon 30 Jun 2025 01:03:59 +0000
asID:                     58495
IP address blocks:        103.247.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl
                          rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f4:10:22:23:39:3d:b1:4d:09:48:7f:b7:e9:e5:0e:2b:05:d8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6
        Validity
            Not Before: Jul  1 00:58:59 2024 GMT
            Not After : Jun 30 01:03:59 2025 GMT
        Subject: CN=8C07F69F3EFDF2FE0A2C07C4BD67CA3FE8AE51FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:69:db:59:0f:75:43:e2:65:6f:9b:ea:21:7f:
                    91:bb:70:20:09:3a:8f:21:56:81:fb:64:67:c9:c9:
                    45:c9:07:3e:aa:0b:41:e3:ab:d0:83:ca:c7:33:e2:
                    bf:a3:b6:df:32:16:11:72:58:a2:58:1f:cb:d0:20:
                    fd:4a:73:c1:30:6e:78:c6:3a:41:d1:6c:f7:31:7a:
                    36:ad:cf:96:dc:ed:5c:db:a1:28:7f:3d:34:94:2f:
                    de:98:65:db:c5:19:59:3f:12:81:1c:dc:12:5b:5f:
                    81:dd:45:6f:07:9e:c2:a9:67:b0:4a:dd:bd:18:ab:
                    ac:fd:de:28:b2:b6:f4:a9:6e:d9:b3:b4:14:00:81:
                    cc:31:d8:74:26:81:b3:ce:e9:39:24:c5:cd:dd:e4:
                    12:c5:6b:2a:91:a3:23:2d:e5:b7:66:3b:46:28:93:
                    e1:5b:ba:1f:31:9c:a2:ad:21:e5:15:7f:e1:ae:d6:
                    04:60:9a:51:3e:d2:19:c3:45:25:e5:0a:c0:14:92:
                    05:d3:cf:13:7a:3f:48:13:cd:b7:9c:2d:0b:88:73:
                    ce:8c:92:78:6b:39:94:48:5d:79:88:09:a3:37:c6:
                    b2:3b:5a:e7:f7:bb:26:2c:00:14:f2:88:96:45:89:
                    4e:79:ff:e9:c5:fe:27:48:37:6e:fc:d1:54:dd:27:
                    06:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:07:F6:9F:3E:FD:F2:FE:0A:2C:07:C4:BD:67:CA:3F:E8:AE:51:FB
            X509v3 Authority Key Identifier:
                keyid:6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/3130332e3234372e3231362e302f32322d3234203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:89:ef:c2:7d:dc:93:03:ea:94:ef:b0:7f:79:02:b1:5c:72:
         eb:81:54:23:6b:c3:be:ec:f5:5c:ec:58:c8:aa:41:b7:5b:01:
         e4:c3:1e:8c:44:63:c3:78:93:66:5d:55:81:4f:5f:c7:52:dc:
         0e:85:bf:0e:e8:13:af:50:8b:e7:32:4e:71:f0:a9:2e:60:f6:
         3e:6c:1e:ef:ba:3a:4e:85:8e:17:35:33:ce:42:16:ee:e6:b5:
         e5:30:97:a8:69:62:65:81:d9:f3:d4:64:5c:f7:26:f3:8e:c3:
         01:29:19:8b:a5:c0:29:16:f2:58:f3:1e:6a:ec:80:4d:30:d4:
         7a:32:6e:dd:3f:71:78:14:83:9e:b4:76:a3:4d:3c:48:4c:6e:
         6c:9c:08:cf:09:34:d4:c2:52:23:2a:96:71:4f:c2:a6:c0:c1:
         da:28:1d:55:35:1d:33:06:25:17:21:0d:4d:af:1a:6f:ae:96:
         1f:04:f7:a7:68:86:5a:a0:06:94:15:3f:b1:a1:30:5c:93:08:
         97:b1:3e:6d:62:af:ae:7f:96:7a:60:a0:d4:16:b3:ef:3f:18:
         98:5f:51:c7:69:9c:cf:33:05:69:01:f7:a1:07:f1:54:97:0d:
         6f:12:3d:70:c0:92:f2:29:5a:d2:ab:47:3b:be:f4:5e:a3:88:
         8c:bc:1a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org