Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa
File:                     3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa (raw, json)
Hash identifier:          gom+dmvXd97TOTH4mESIlI/PyxDebndh3XDnBkm+9aE=
Subject key identifier:   A4:9F:8A:CE:E5:E6:9D:37:45:C8:31:1C:81:A7:2B:8C:9D:A5:71:84
Certificate issuer:       /CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A
Certificate serial:       60E9262F8054FC4F0576A3A3712A4AAEC82A7502
Authority key identifier: B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa
Signing time:             Sat 27 Apr 2024 11:00:00 +0000
ROA not before:           Sat 27 Apr 2024 10:55:00 +0000
ROA not after:            Sat 26 Apr 2025 11:00:00 +0000
asID:                     149671
IP address blocks:        103.185.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl
                          rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 13:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e9:26:2f:80:54:fc:4f:05:76:a3:a3:71:2a:4a:ae:c8:2a:75:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A
        Validity
            Not Before: Apr 27 10:55:00 2024 GMT
            Not After : Apr 26 11:00:00 2025 GMT
        Subject: CN=A49F8ACEE5E69D3745C8311C81A72B8C9DA57184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:af:e9:54:f9:31:be:29:2b:40:c0:f8:fc:
                    fb:02:f4:24:48:48:34:30:4a:cf:a5:08:5b:75:95:
                    22:dc:f5:61:01:20:3b:55:aa:3f:e9:54:96:aa:0e:
                    64:96:44:94:da:91:4e:51:6a:99:6e:b9:a4:f7:a7:
                    0d:79:ff:70:9d:e3:26:ba:d4:31:2d:df:15:57:0a:
                    37:cc:43:a5:0d:cf:9b:47:ab:8f:c0:37:49:d6:f3:
                    e1:70:33:45:af:b3:5f:4c:a9:aa:31:30:2d:77:2c:
                    16:01:6d:fc:0a:da:06:ff:f0:40:d4:45:0d:7d:55:
                    27:66:95:71:33:7e:08:35:8f:41:42:48:8e:7b:71:
                    06:10:f1:60:60:0c:c5:a2:7d:c8:22:30:4e:ad:1f:
                    19:f3:ec:8a:ab:64:0f:a9:54:5c:92:02:f9:75:e9:
                    d7:02:08:0e:ec:d3:81:8a:3e:13:f2:1b:66:bb:c8:
                    ed:ef:a9:10:c6:b8:e5:d9:a8:30:01:c5:93:be:be:
                    53:fe:7d:8c:d2:30:a1:32:e1:66:1b:45:9d:96:8e:
                    1f:86:83:d3:b4:7c:98:70:48:39:6c:36:8e:81:64:
                    34:c6:dc:15:3c:f0:b6:5d:84:18:d9:1c:5b:94:0b:
                    05:8c:0e:5e:33:99:98:3f:ec:af:fc:11:76:48:46:
                    3f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9F:8A:CE:E5:E6:9D:37:45:C8:31:1C:81:A7:2B:8C:9D:A5:71:84
            X509v3 Authority Key Identifier:
                keyid:B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:97:dd:d4:88:3f:a8:14:ad:b3:48:bf:29:37:fd:1a:64:3d:
         48:9e:74:9d:1c:52:db:4f:be:62:57:63:8b:24:c7:2a:4b:2b:
         ca:54:cb:4a:5b:d3:1c:67:b1:b9:0d:34:b3:2b:a4:09:1d:9d:
         cf:47:c3:11:d2:5f:5e:85:5a:eb:de:d4:71:a3:a7:b8:7b:0e:
         48:d4:2b:0c:0d:bf:84:9b:fb:61:ad:bb:08:ea:f3:5d:9e:4c:
         86:5b:50:a1:1d:1f:34:01:d1:fe:10:6a:5f:c7:86:01:5f:a1:
         c3:c2:83:8e:17:76:23:53:bd:c1:e3:4a:6e:f9:56:95:09:1a:
         47:76:46:dd:6d:f7:02:65:b1:e6:3d:f5:a6:f2:e2:c6:37:5b:
         13:1c:fc:ad:af:78:9a:64:be:8a:fb:b4:2b:23:fe:50:79:b3:
         b6:40:d6:65:42:0d:02:5f:a2:3b:7e:d7:b5:4b:12:60:1e:6a:
         2c:15:b5:7a:f0:04:b1:1a:3d:8b:4d:2a:46:1c:d9:92:60:8d:
         e4:20:23:e3:74:ca:92:9d:7e:5d:d4:b4:03:ab:5d:27:f5:d2:
         2e:ee:b0:1d:a0:c4:b4:87:0d:c0:cd:b9:da:dd:12:5c:2e:a8:
         7c:fa:88:2e:ee:ef:2e:b7:1f:dd:bf:30:a1:e5:e6:86:9a:ed:
         4a:11:6a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 13:30:26 2024 by rpki-client on console-ams.rpki-client.org