Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa
File:                     3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa (raw, json)
Hash identifier:          DyrlUjs6Uu6vGAvg5tT+7myynUr8e84wIlqBuR6C9G0=
Subject key identifier:   C5:47:A5:0E:15:9D:75:EF:12:2D:48:08:4D:3D:BB:E8:44:C9:68:AF
Certificate issuer:       /CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6
Certificate serial:       1ECD753F0B547F07268A4CE66EC167D9AFFC2D8B
Authority key identifier: CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa
Signing time:             Wed 09 Oct 2024 15:00:42 +0000
ROA not before:           Wed 09 Oct 2024 14:55:42 +0000
ROA not after:            Wed 08 Oct 2025 15:00:42 +0000
asID:                     133796
IP address blocks:        103.108.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl
                          rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 22:45:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:cd:75:3f:0b:54:7f:07:26:8a:4c:e6:6e:c1:67:d9:af:fc:2d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6
        Validity
            Not Before: Oct  9 14:55:42 2024 GMT
            Not After : Oct  8 15:00:42 2025 GMT
        Subject: CN=C547A50E159D75EF122D48084D3DBBE844C968AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:7d:d6:1b:29:21:8e:d7:34:3e:49:4f:78:
                    e6:c0:ab:42:a8:b2:49:ab:e8:d0:8b:a9:5e:9f:d8:
                    9e:d2:76:06:89:cc:d5:8a:2e:91:ae:a7:3c:04:7f:
                    4f:4a:4f:4e:44:cc:c6:5c:3a:c5:44:19:32:26:6c:
                    b5:a3:71:5f:94:38:35:05:66:1e:ac:33:33:d4:6d:
                    44:9a:38:67:16:20:45:3d:d3:63:d6:4e:5f:fd:31:
                    c9:de:cb:13:b2:b4:24:93:c6:15:09:2d:82:af:7b:
                    73:8c:a8:9b:21:a9:f4:1e:4a:81:8d:3c:c6:98:b2:
                    1d:f4:dd:b1:20:2d:21:0a:a6:8b:12:29:fd:7d:96:
                    0f:3a:3e:c4:97:8e:d1:36:9b:78:f4:18:2d:2a:ca:
                    09:29:db:b4:b1:3d:6b:9a:a5:ba:0b:93:21:f8:62:
                    04:22:cb:0b:4c:52:79:76:95:a0:eb:71:5d:be:42:
                    aa:96:5f:25:1f:1b:6f:c5:28:07:b5:94:c7:17:39:
                    ec:f4:76:0d:92:fe:27:76:ea:92:04:61:73:90:a9:
                    94:f4:7b:94:a6:38:c4:59:9d:58:56:1c:eb:3b:83:
                    7d:7e:45:98:ec:cf:f8:3b:11:4a:0d:49:a2:2e:e1:
                    24:7d:97:0f:a1:40:a8:31:30:5a:ce:a2:82:0d:61:
                    87:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:47:A5:0E:15:9D:75:EF:12:2D:48:08:4D:3D:BB:E8:44:C9:68:AF
            X509v3 Authority Key Identifier:
                keyid:CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:ba:dc:c5:1f:62:24:2e:15:88:c3:b8:29:dc:1f:b3:9d:db:
         2b:40:e6:b0:f9:a3:b3:b6:2d:14:a2:48:3e:33:99:ff:f1:fe:
         96:64:89:29:a1:9f:92:2a:7b:85:8e:fa:60:4a:d5:36:f5:3c:
         63:1e:cd:9a:95:7a:13:00:63:4e:76:b0:28:ff:91:e4:34:3f:
         93:bb:a6:fc:3d:23:03:94:36:06:c3:36:40:96:9f:67:e4:63:
         15:01:17:22:a2:bd:f9:e0:24:5f:b1:99:eb:63:cf:1a:1a:60:
         5f:b2:04:d5:1b:d6:d9:d1:66:22:50:67:19:22:7f:85:b5:ef:
         9a:78:12:f5:b1:3b:09:59:6c:08:77:03:37:a2:e2:b1:0d:72:
         dd:35:05:48:68:29:47:f7:36:67:4b:3c:23:74:cf:08:a4:72:
         74:64:39:16:1e:d6:33:9d:50:da:8a:24:ab:5e:92:23:a3:df:
         ec:ce:27:ea:a8:3d:40:be:8f:db:aa:a9:b0:e2:9f:1f:bf:9c:
         f5:53:5f:5f:e5:93:17:0b:a2:8c:d4:e4:b3:c0:9b:ce:da:1f:
         59:69:4f:49:82:c1:1a:f9:9d:3a:dc:8a:be:3a:d0:77:4a:cc:
         a5:c2:fb:83:c6:bc:8f:32:a2:30:3c:6e:14:b7:3f:50:18:03:
         0e:d5:7e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 28 00:49:57 2024 by rpki-client on console-ams.rpki-client.org