Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa
File:                     3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa (raw, json)
Hash identifier:          0V+TLcBykWeZbvVLWCrz8UGpo6H+SBigYLWOfrydQK0=
Subject key identifier:   5C:DD:F9:F1:9A:24:A6:07:2D:73:B7:09:8E:71:5F:F0:9E:9E:D7:20
Certificate issuer:       /CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6
Certificate serial:       0CF30A8C0507F5B89FDA43E28BF0E55128811F0E
Authority key identifier: CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa
Signing time:             Sat 09 Dec 2023 16:00:00 +0000
ROA not before:           Sat 09 Dec 2023 15:55:00 +0000
ROA not after:            Sat 07 Dec 2024 16:00:00 +0000
asID:                     136855
IP address blocks:        103.108.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl
                          rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 06:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f3:0a:8c:05:07:f5:b8:9f:da:43:e2:8b:f0:e5:51:28:81:1f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6
        Validity
            Not Before: Dec  9 15:55:00 2023 GMT
            Not After : Dec  7 16:00:00 2024 GMT
        Subject: CN=5CDDF9F19A24A6072D73B7098E715FF09E9ED720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:29:38:60:15:63:cf:1f:24:23:5c:2e:07:
                    29:38:47:05:b0:8c:99:05:d7:29:1b:ce:72:48:61:
                    f2:32:2a:71:01:22:fe:f4:33:59:19:2c:70:52:3b:
                    5c:be:f4:fc:82:1f:f5:05:42:25:75:04:d1:55:47:
                    97:36:31:ef:cd:81:79:bb:88:99:a5:ff:47:e1:1a:
                    9b:33:e0:68:4e:e4:06:f1:d3:71:b2:90:0b:20:43:
                    4d:8a:2e:c5:98:91:5a:be:88:d2:9f:da:a3:c7:da:
                    60:98:7d:a6:91:3f:0e:12:77:01:37:09:d5:7e:8a:
                    76:2b:9c:68:77:32:2e:df:cd:e6:7e:d7:fe:77:fb:
                    74:fe:d6:6a:9f:bf:e0:e7:cb:c8:ce:bf:ae:7b:12:
                    69:cd:23:ec:43:3b:dd:ec:e3:11:a6:eb:69:2c:e9:
                    e0:6b:8c:02:ca:32:d8:d6:32:17:c2:0c:09:66:b7:
                    0f:09:e3:1f:c6:a5:06:12:d1:78:c5:05:9d:44:04:
                    06:3c:33:8d:24:2e:bc:67:22:98:94:14:30:56:2a:
                    7a:88:1e:e4:81:b1:e2:9a:7f:c0:d6:8b:80:08:e9:
                    e7:51:8e:b2:65:7d:e0:ef:3c:fe:50:5d:ce:47:9e:
                    4d:b4:0c:89:e1:00:b5:dc:f4:db:b9:9a:39:d5:42:
                    6f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DD:F9:F1:9A:24:A6:07:2D:73:B7:09:8E:71:5F:F0:9E:9E:D7:20
            X509v3 Authority Key Identifier:
                keyid:CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:5d:42:22:7d:d5:a8:b8:bf:9c:18:47:d7:5a:4d:94:0d:1d:
         88:be:8c:8e:d2:a9:78:96:36:2e:00:3b:fa:ea:a1:6d:c8:d9:
         8a:25:b0:a9:00:7c:51:7b:e6:c3:82:f3:9b:57:1c:dc:2d:27:
         24:70:da:35:86:d9:78:58:a1:ee:3d:c3:18:49:00:7a:73:56:
         f5:68:fe:4a:6a:8e:ae:9f:7e:ee:82:19:e1:37:6a:d2:d8:a8:
         2e:ec:6b:3e:7b:02:9c:9a:d8:f7:b0:c1:ae:a1:53:fa:bd:3d:
         50:f0:ee:cf:15:26:b9:ee:d9:29:e1:0f:b2:3c:4b:5f:95:5d:
         6a:46:a8:74:5a:0a:75:ff:2e:d0:01:2f:d9:8e:42:7f:22:9e:
         32:23:a4:c1:36:1f:95:a3:10:2a:e1:af:07:d3:e1:1e:dd:34:
         09:1e:9e:72:11:c8:03:95:3a:c2:e2:c5:aa:d5:45:a4:eb:3a:
         02:b1:80:9b:99:c9:ce:b7:42:0a:1a:ac:65:cb:1a:6b:86:5f:
         d8:51:d7:db:11:61:23:35:b8:4e:d1:ff:37:0d:01:f4:f0:83:
         bf:ca:50:8d:1c:3c:c9:34:94:a8:85:09:70:9e:8d:5d:cd:f2:
         0d:12:ee:31:0e:81:69:25:b8:8d:9f:c5:56:dc:bb:21:02:ac:
         cd:2a:1e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 05:22:22 2024 by rpki-client on console-fra.rpki-client.org