Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3131322e3139322e302f32342d3234203d3e203338353236.roa
File:                     3130332e3131322e3139322e302f32342d3234203d3e203338353236.roa (raw, json)
Hash identifier:          jH6UXBxkertdq7PHofeHr3r8KOKmVCHwHoZkNCyefI0=
Subject key identifier:   DC:08:60:0A:2E:46:A4:12:91:E2:F9:0B:14:88:17:A0:58:0D:B3:31
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       56DEF397736047D534BEF314B302AB2C386B93B0
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3131322e3139322e302f32342d3234203d3e203338353236.roa
Signing time:             Tue 20 Feb 2024 08:00:01 +0000
ROA not before:           Tue 20 Feb 2024 07:55:01 +0000
ROA not after:            Tue 18 Feb 2025 08:00:01 +0000
asID:                     38526
IP address blocks:        103.112.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:de:f3:97:73:60:47:d5:34:be:f3:14:b3:02:ab:2c:38:6b:93:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Feb 20 07:55:01 2024 GMT
            Not After : Feb 18 08:00:01 2025 GMT
        Subject: CN=DC08600A2E46A41291E2F90B148817A0580DB331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ff:90:fe:13:d8:4e:8f:26:73:01:57:88:ef:
                    a0:67:c0:4c:41:cf:b6:7c:4e:83:89:d6:8c:40:c4:
                    d0:e0:d5:69:a3:83:8a:f8:d2:cf:81:e5:c1:ee:53:
                    d3:6e:ed:78:df:c0:4c:fa:df:eb:40:a7:7f:e3:b6:
                    3c:81:a5:f2:19:dc:bf:8e:4e:82:02:7d:df:24:46:
                    99:35:3c:33:a4:ae:11:5d:1a:6e:0d:80:a1:3a:f5:
                    96:5b:90:f3:cb:2a:54:55:6d:a7:fc:72:32:c0:12:
                    b9:c2:78:df:80:a2:57:4c:1f:e3:eb:41:ef:d0:ca:
                    09:0e:a9:57:a5:01:87:4e:73:ae:27:b6:2c:85:f4:
                    37:55:2e:54:05:f3:7b:27:d8:59:91:a9:52:8f:05:
                    73:13:2e:35:4d:d1:75:dd:21:a1:7a:da:01:d4:78:
                    2d:91:54:38:6a:20:73:c6:b3:9e:70:81:b3:4d:aa:
                    0d:1d:c1:4e:3d:76:a9:01:0f:a8:2d:c4:c4:ee:f6:
                    92:9b:58:82:53:63:a7:16:d1:e1:eb:94:b6:c3:bc:
                    94:00:8f:82:40:5b:2f:1b:1c:d2:b9:52:d7:24:45:
                    b1:96:cf:08:0c:c9:e6:50:f6:e2:4e:27:36:cd:b7:
                    a0:4e:f6:ec:f6:48:be:34:3a:e6:e1:6a:af:00:9a:
                    19:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:08:60:0A:2E:46:A4:12:91:E2:F9:0B:14:88:17:A0:58:0D:B3:31
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3131322e3139322e302f32342d3234203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:01:32:2f:23:52:9e:76:ff:67:2a:a9:6d:75:e9:37:21:7e:
         6a:14:50:51:f0:38:cc:b4:4b:df:87:0b:ff:c8:3f:ba:3b:7d:
         9e:5a:4d:ad:d2:0f:6a:50:37:25:fa:6c:42:bf:ac:4f:70:39:
         96:5c:fd:dc:12:3c:34:77:a9:0d:6e:58:b1:c5:28:09:0a:c0:
         41:8d:94:42:09:91:cc:40:2e:c6:f0:c1:04:9a:07:bb:d3:e7:
         5b:26:65:46:9a:ec:ed:dd:2c:cb:b8:ac:1b:a7:4b:a4:1d:b0:
         25:d3:61:e7:0b:1f:6b:7f:8a:95:2e:a8:27:a1:0d:76:45:de:
         9a:ae:79:08:35:45:16:29:4c:fe:e8:71:61:3e:62:30:78:d4:
         ac:7f:30:09:e0:81:49:be:ea:6f:5b:84:a0:29:9f:01:2e:7e:
         c3:fe:33:cc:f9:a0:06:c2:81:32:5b:89:38:01:e3:73:f4:7b:
         f9:6d:3d:45:87:0e:00:d5:65:94:fb:f4:33:36:84:8c:b2:2e:
         dd:3b:67:a6:8b:4c:23:3c:3a:0f:bb:d7:8c:b7:10:75:11:60:
         72:7f:11:76:2f:d0:ea:83:94:48:ef:57:3f:b5:cd:d8:e0:d4:
         67:24:73:ff:eb:39:01:c6:20:2a:6e:97:5a:5d:04:4e:cc:25:
         08:ae:5a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org