Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa
File:                     3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa (raw, json)
Hash identifier:          qJSbzebV86IywBInpZtGnDZg8m21+MRS1bWCN6KStTc=
Subject key identifier:   84:6B:49:0B:CF:90:09:8C:FD:09:A6:B1:6B:7A:AB:37:11:34:0A:52
Certificate issuer:       /CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6
Certificate serial:       39C72A9C7777C0D368801257C9BA30948AB5DB8E
Authority key identifier: CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa
Signing time:             Wed 08 Nov 2023 15:00:00 +0000
ROA not before:           Wed 08 Nov 2023 14:55:00 +0000
ROA not after:            Wed 06 Nov 2024 15:00:00 +0000
asID:                     133796
IP address blocks:        103.108.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl
                          rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 06:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c7:2a:9c:77:77:c0:d3:68:80:12:57:c9:ba:30:94:8a:b5:db:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6
        Validity
            Not Before: Nov  8 14:55:00 2023 GMT
            Not After : Nov  6 15:00:00 2024 GMT
        Subject: CN=846B490BCF90098CFD09A6B16B7AAB3711340A52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d7:29:e3:9d:bb:e3:66:22:94:06:43:d6:ff:
                    12:1a:0a:74:04:ee:0d:07:e2:52:46:93:8c:61:06:
                    a2:e1:3d:c3:d8:4d:b8:0c:4d:5f:bd:14:ff:c4:e0:
                    59:25:6d:2e:2a:64:09:7c:e4:8f:fb:5c:d5:63:0e:
                    f2:b7:c3:74:ec:71:ca:a1:42:e8:85:a1:d3:4f:59:
                    40:3a:93:91:1c:b5:8a:0e:f0:05:25:75:5e:88:58:
                    fc:0b:a0:2b:75:e8:7a:e7:cc:1b:ff:98:da:e3:1a:
                    1d:42:99:66:82:ba:9c:7a:83:b3:80:3c:5f:b9:63:
                    c4:ed:81:dc:28:8c:56:44:f7:6a:bb:f9:63:5f:b0:
                    ea:a3:5c:0b:63:4a:e3:f4:11:35:2c:14:48:20:32:
                    4d:2e:4c:67:12:17:c1:4d:48:04:ed:ef:02:24:d6:
                    7d:68:ce:6b:7b:d8:c3:13:cc:d8:82:60:e5:4d:0f:
                    d2:07:e5:35:7b:9e:97:c3:dc:14:c7:8e:b8:0f:1f:
                    9d:0c:32:86:06:c3:c5:60:b5:a1:d5:d3:e3:77:c8:
                    34:3d:4c:5d:83:0f:f5:bc:fd:47:04:6e:b2:70:72:
                    64:7b:27:8a:88:41:f3:22:33:ec:12:e0:9f:4c:43:
                    9c:d9:0c:7f:06:35:93:23:da:a7:c5:c6:f8:aa:ba:
                    b4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6B:49:0B:CF:90:09:8C:FD:09:A6:B1:6B:7A:AB:37:11:34:0A:52
            X509v3 Authority Key Identifier:
                keyid:CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:8a:0d:c3:0a:6f:8a:5d:ca:84:85:bb:19:fa:4e:1c:59:95:
         0a:73:c4:ae:07:70:28:a9:79:ab:03:8b:72:ed:32:89:4c:70:
         f6:56:ae:7d:13:47:59:47:5a:07:28:1e:26:8d:f3:69:84:4a:
         73:74:f4:61:7b:63:17:13:f1:6c:4f:fc:b8:14:9e:26:e2:fe:
         c6:b5:d7:51:3f:22:17:ab:e1:e9:c5:2d:96:99:17:b7:7f:63:
         65:6c:96:8a:02:9e:39:50:57:ea:63:e0:c9:7f:b5:f7:a2:c9:
         d9:26:f3:8c:84:d5:91:d0:da:a3:e8:cb:25:fb:7c:e5:82:21:
         72:bd:7e:c3:2d:97:10:a9:92:f9:0a:8f:9d:7a:97:3e:55:0e:
         35:15:b9:d3:9d:d1:a0:63:de:38:6d:15:fc:79:c4:6d:f1:85:
         cf:0b:c1:a5:7b:92:f6:38:1b:09:c7:b0:6b:da:6b:79:40:4c:
         b6:7c:c6:15:7a:0b:9d:e1:8c:1c:99:d5:e2:09:3a:d8:f3:e8:
         f9:49:d6:e5:9d:b7:d1:0f:92:44:96:a2:50:b5:b6:1d:3c:b0:
         72:38:11:ad:df:23:66:17:50:38:6f:b0:83:44:01:82:ff:de:
         72:5e:2f:a4:ec:10:91:e5:bd:8a:e6:82:19:f5:f4:0d:ac:dd:
         2c:8d:46:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 05:22:22 2024 by rpki-client on console-fra.rpki-client.org