Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3231302e3139332e302f32342d3234203d3e203338353236.roa
File:                     3130332e3231302e3139332e302f32342d3234203d3e203338353236.roa (raw, json)
Hash identifier:          GuNmiCAVqx8hToAcYOXMTB+5F/xSTjFiNXt+BADnoO4=
Subject key identifier:   67:7F:74:7E:B4:B3:88:20:46:E3:F5:22:CD:87:D8:7C:C8:E6:97:7B
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       3B1A8FD51D55428E985BCA7A5DB2E41B73AAD90A
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3231302e3139332e302f32342d3234203d3e203338353236.roa
Signing time:             Tue 20 Feb 2024 08:00:01 +0000
ROA not before:           Tue 20 Feb 2024 07:55:01 +0000
ROA not after:            Tue 18 Feb 2025 08:00:01 +0000
asID:                     38526
IP address blocks:        103.210.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1a:8f:d5:1d:55:42:8e:98:5b:ca:7a:5d:b2:e4:1b:73:aa:d9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Feb 20 07:55:01 2024 GMT
            Not After : Feb 18 08:00:01 2025 GMT
        Subject: CN=677F747EB4B3882046E3F522CD87D87CC8E6977B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cf:6d:75:0c:f6:b0:38:ce:27:77:39:ec:d7:
                    41:ae:50:9e:ed:2b:1d:d7:11:53:d0:7b:84:30:6e:
                    f3:2f:aa:51:85:a0:26:69:08:74:68:9a:47:01:36:
                    e0:06:c5:28:14:b3:5f:cd:bf:c9:e9:36:c1:b5:e3:
                    c4:e9:81:f4:9b:62:19:21:6d:48:c6:60:ec:d0:f1:
                    3b:2b:71:fc:41:1d:cf:93:7b:46:99:7f:82:7a:2b:
                    c0:3b:6c:47:e1:92:83:3a:6a:10:ba:5a:1c:5c:f2:
                    47:68:08:7e:13:94:b3:9b:4b:c1:b8:f0:f0:f9:7e:
                    11:93:26:c9:dd:67:4e:b0:18:81:fb:4c:1c:a9:9a:
                    60:52:7b:ee:32:35:52:c0:cf:7e:60:fc:39:9f:72:
                    8e:2f:2f:fc:97:4e:f0:f9:8c:be:10:c6:fd:4c:91:
                    e2:a2:4f:90:6b:ba:94:63:58:a3:ca:29:70:83:53:
                    ea:89:ed:6d:5a:8c:16:37:20:6e:aa:fc:66:21:f5:
                    76:06:d8:fa:52:4e:a8:e9:3f:53:27:5d:2e:95:9c:
                    e3:1d:3f:3f:c5:0e:fb:ef:95:89:6b:48:d4:be:31:
                    bd:16:54:4c:90:66:0a:97:c3:0d:cf:a2:55:40:00:
                    4f:b2:37:17:a8:ac:d9:71:92:26:19:7b:e7:4e:f6:
                    c0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7F:74:7E:B4:B3:88:20:46:E3:F5:22:CD:87:D8:7C:C8:E6:97:7B
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3231302e3139332e302f32342d3234203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:08:83:bd:22:0f:87:4d:ac:99:d1:77:bb:e3:e7:ab:82:5e:
         1b:ab:26:39:27:32:c7:81:89:88:8f:da:5b:cb:73:07:f9:a1:
         f0:8b:45:29:52:7a:b3:f9:68:10:ff:96:8e:7f:21:19:b2:df:
         9c:a6:4b:d6:a3:e7:3d:d8:88:84:77:38:17:b5:a5:38:9e:34:
         de:25:19:0d:53:c4:d3:e2:8f:9a:cf:d3:f3:5c:c9:17:46:d6:
         18:9d:c7:12:ff:00:da:7a:82:30:0e:2c:fb:69:a8:93:9c:87:
         2c:c9:23:1f:df:e4:c5:2f:0c:73:db:f0:cb:b0:a7:cf:7e:d5:
         f8:f5:fd:5d:27:5d:2d:ef:e6:35:f7:f5:f6:72:e0:e1:3f:4c:
         a1:a5:25:0a:55:d5:b5:e3:d7:2d:30:bf:c6:a1:ce:f3:0c:57:
         37:62:da:e8:9f:12:31:02:0c:21:8c:c9:33:d2:0c:d2:89:54:
         67:4b:9f:d9:88:44:6c:6b:fa:56:fd:e4:b0:10:25:6c:1e:a4:
         44:16:32:d9:e2:a7:55:aa:bf:58:a1:46:f4:4d:1b:fa:c0:26:
         06:40:a0:a0:90:dc:de:33:17:30:d7:c2:84:6c:c6:15:fa:e9:
         9c:be:87:3b:11:e8:fd:28:1c:9e:f7:14:7d:4c:1d:73:28:2a:
         91:92:6f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org