Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa
File:                     3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa (raw, json)
Hash identifier:          EIBsIb0Y5G2vcACmxDaKACprW6inYDKlhaSCRoDfdpA=
Subject key identifier:   43:97:13:8B:6A:EC:34:5D:1A:FA:DF:45:AA:87:40:B1:C4:86:3A:F4
Certificate issuer:       /CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A
Certificate serial:       2DB986DE757AD9752CB1D3B91B87DDC5531A4881
Authority key identifier: B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa
Signing time:             Sat 27 Apr 2024 12:00:01 +0000
ROA not before:           Sat 27 Apr 2024 11:55:01 +0000
ROA not after:            Sat 26 Apr 2025 12:00:01 +0000
asID:                     149671
IP address blocks:        103.185.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl
                          rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 13:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b9:86:de:75:7a:d9:75:2c:b1:d3:b9:1b:87:dd:c5:53:1a:48:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A
        Validity
            Not Before: Apr 27 11:55:01 2024 GMT
            Not After : Apr 26 12:00:01 2025 GMT
        Subject: CN=4397138B6AEC345D1AFADF45AA8740B1C4863AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:8c:b4:c9:06:e3:f9:ec:70:9b:7c:83:e3:
                    99:81:16:65:e9:e2:26:ce:37:59:57:18:47:2a:5e:
                    84:e2:05:f8:5a:07:db:3b:b8:e2:b6:01:46:8a:ab:
                    4d:fd:ce:50:77:c8:0c:66:68:2c:4c:41:79:c6:93:
                    55:c0:0c:6e:5d:2a:19:fd:a7:a7:fd:bb:82:c6:8b:
                    a4:9e:0f:85:38:20:60:5c:f3:44:27:18:29:42:8d:
                    a7:99:2e:d4:59:73:8d:fb:f1:97:cb:0d:e1:9b:54:
                    d1:76:ca:ba:db:a8:53:98:fa:b0:21:5c:d2:17:11:
                    97:2d:ab:7b:95:50:89:be:7e:9a:17:c0:79:d8:26:
                    04:5d:f0:18:13:35:57:5b:c6:bb:36:2b:24:92:0a:
                    6e:31:27:44:ef:f9:aa:8b:91:d0:dc:c1:eb:08:7b:
                    32:c0:02:d4:43:cc:08:4b:63:ea:0c:bb:22:d3:a6:
                    7f:64:9f:3b:3e:7e:c6:66:91:8d:4b:9b:aa:78:ca:
                    f1:ed:77:04:5f:21:61:9d:8b:ca:1e:ef:9b:78:75:
                    a2:b1:53:4f:64:fd:bd:41:97:5f:c1:31:07:a9:91:
                    7a:16:7a:10:80:57:95:d8:25:c3:77:67:a1:29:23:
                    b2:83:bc:1d:77:43:38:b4:8f:b8:c4:fe:ee:0d:cc:
                    18:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:97:13:8B:6A:EC:34:5D:1A:FA:DF:45:AA:87:40:B1:C4:86:3A:F4
            X509v3 Authority Key Identifier:
                keyid:B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:96:47:68:33:c8:80:00:b8:7a:ec:21:b3:bf:71:7c:73:3d:
         27:7b:fd:ee:02:52:a9:e5:b3:d1:b6:44:e6:fb:0d:47:09:36:
         2f:24:ad:95:a3:61:75:12:96:82:4d:30:2e:59:30:27:a5:7b:
         0b:82:10:37:b2:78:6d:3a:51:6a:11:ce:49:93:73:a9:62:91:
         65:62:68:b9:e3:68:a5:34:9e:58:2a:3b:9a:0f:9e:ab:1e:74:
         af:33:fe:89:35:64:18:88:da:de:d9:cd:a6:c8:8d:66:2f:fc:
         e2:18:f2:22:4d:70:c4:5e:6b:e7:b4:ad:a9:72:c9:ac:0f:c4:
         10:a1:53:ac:81:13:19:51:39:71:e3:26:fc:5b:8a:16:f3:41:
         3c:7a:4b:e6:d8:39:59:a3:12:32:17:ac:0b:58:87:b1:f2:a4:
         f0:1b:33:31:fb:5d:8d:f4:0e:5b:23:6c:29:be:31:b1:b8:2f:
         6f:21:89:34:4a:27:d3:13:34:f6:93:65:02:ee:db:63:c7:10:
         3c:10:68:e4:9b:0c:7b:d6:90:98:35:84:0c:6e:a7:5c:30:49:
         e9:e0:bd:3e:98:8f:cd:a7:f3:df:88:25:bc:ad:28:de:69:eb:
         c9:cb:cb:8c:62:bc:32:23:7e:9d:d7:ac:29:3a:90:74:9e:fc:
         f5:26:a0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 11:57:47 2024 by rpki-client on console-fra.rpki-client.org