Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3131322e3139332e302f32342d3234203d3e203338353236.roa
File:                     3130332e3131322e3139332e302f32342d3234203d3e203338353236.roa (raw, json)
Hash identifier:          eaDDZ4XJTaev8YzBLYYdQXD08PXCN/4S+vGK+6D/kVk=
Subject key identifier:   4E:36:45:95:24:24:33:B7:4E:98:34:22:BB:DC:91:BB:37:50:FD:F5
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       7C6E697E75265F50AC919BF9522BB37CDB7A1E1D
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3131322e3139332e302f32342d3234203d3e203338353236.roa
Signing time:             Tue 20 Feb 2024 08:00:01 +0000
ROA not before:           Tue 20 Feb 2024 07:55:01 +0000
ROA not after:            Tue 18 Feb 2025 08:00:01 +0000
asID:                     38526
IP address blocks:        103.112.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:6e:69:7e:75:26:5f:50:ac:91:9b:f9:52:2b:b3:7c:db:7a:1e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Feb 20 07:55:01 2024 GMT
            Not After : Feb 18 08:00:01 2025 GMT
        Subject: CN=4E364595242433B74E983422BBDC91BB3750FDF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b1:0f:83:16:ba:fb:67:e9:00:43:cc:18:96:
                    25:ae:57:7f:2e:a3:f1:f8:3b:94:13:27:e6:3d:2d:
                    00:8d:02:39:5f:de:32:e1:ee:90:27:30:40:9c:bb:
                    2e:47:f7:88:1a:df:32:4b:bc:9f:17:bf:70:e3:3a:
                    53:62:35:e4:b9:04:27:a0:0b:56:b0:b1:a9:2e:99:
                    bd:d5:8a:ec:cd:ef:c2:90:54:6c:e3:63:e3:c0:1f:
                    35:c3:28:3c:62:02:a4:f0:14:94:d6:df:4d:7f:c9:
                    58:68:85:71:55:92:01:ef:b5:67:88:1e:f7:fe:15:
                    f4:d5:8b:c9:e0:89:b1:10:53:40:7e:49:5c:bc:0e:
                    3b:9d:b5:72:da:fb:11:40:d9:ff:ea:57:f9:75:6c:
                    a6:79:66:40:9f:cb:ee:34:5c:68:be:84:8d:23:94:
                    4d:28:d6:56:f0:40:dd:61:ca:84:c0:9e:07:22:d5:
                    e3:bd:36:77:9c:4e:26:4e:9c:19:79:47:45:dd:e3:
                    37:64:17:94:c0:56:81:53:6a:60:f5:94:fc:a5:fe:
                    8c:4d:27:31:35:25:d2:7c:7f:d3:24:93:39:8e:e4:
                    c8:04:3e:5f:4e:e1:4d:78:89:3d:a3:a4:cf:2a:10:
                    42:72:d4:fe:a9:4e:6a:77:9d:af:ae:b1:5b:f2:fb:
                    e2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:36:45:95:24:24:33:B7:4E:98:34:22:BB:DC:91:BB:37:50:FD:F5
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3131322e3139332e302f32342d3234203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:2c:e3:ca:7a:c6:25:95:77:2c:17:9c:80:3b:a8:c9:bc:2f:
         fc:04:4a:32:86:b9:bc:8f:ee:fe:a8:f8:92:3c:0d:59:5b:2d:
         7e:2b:8f:55:f8:85:38:d0:25:c6:0f:39:48:5f:63:69:26:bd:
         cf:3a:d7:16:7b:2c:dd:67:34:ff:24:44:87:bb:b4:b6:a5:aa:
         09:49:5b:3c:d7:35:65:19:00:5f:52:cd:5a:00:51:fa:b1:24:
         60:66:55:20:52:2c:f4:18:2e:64:12:e5:ca:17:e6:ce:60:1a:
         97:51:76:ee:2f:77:c1:49:42:fa:db:e7:26:09:a4:4d:e8:f4:
         d5:70:9e:cf:97:3c:64:c2:c9:dd:18:63:2d:3b:b5:03:d5:02:
         81:06:e3:f8:9f:c5:8b:91:5a:28:d6:75:96:40:ad:85:07:df:
         b6:4e:5c:90:90:a0:cf:bb:7f:4e:05:43:a6:c3:d0:18:01:78:
         a6:80:0a:3b:47:c3:2f:f5:b9:5a:8b:56:a6:13:ec:8d:1c:a0:
         bd:02:dd:f7:08:43:45:4a:9f:24:b9:f0:da:c6:55:9d:04:96:
         1e:f4:6f:27:bd:be:93:55:43:ec:f3:94:74:bb:2d:84:65:24:
         a6:8d:8a:08:a7:76:55:17:ae:ff:eb:08:ac:0b:bb:a5:15:65:
         7f:19:e8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org