Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa
File:                     3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (raw, json)
Hash identifier:          Z/c+qyxhQO+axRkdbhMUrC6EZFuAB2kbSd4DQHQsW8w=
Subject key identifier:   CE:C6:4D:57:78:FE:EE:0B:04:14:9C:B6:1A:D0:D5:F4:FB:62:E5:32
Certificate issuer:       /CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70
Certificate serial:       7DDA91887F526780C34BD561D061C2A37E881564
Authority key identifier: F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa
Signing time:             Fri 12 Apr 2024 11:00:02 +0000
ROA not before:           Fri 12 Apr 2024 10:55:02 +0000
ROA not after:            Fri 11 Apr 2025 11:00:02 +0000
asID:                     142310
IP address blocks:        103.168.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl
                          rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:da:91:88:7f:52:67:80:c3:4b:d5:61:d0:61:c2:a3:7e:88:15:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70
        Validity
            Not Before: Apr 12 10:55:02 2024 GMT
            Not After : Apr 11 11:00:02 2025 GMT
        Subject: CN=CEC64D5778FEEE0B04149CB61AD0D5F4FB62E532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:67:35:53:fa:cb:59:74:f1:f6:8e:1d:83:a4:
                    ad:a3:27:e1:fe:0d:0e:0d:c1:11:4b:65:b7:e7:58:
                    d2:a4:dc:16:45:25:e5:9b:ca:b4:bd:ae:e3:25:f1:
                    37:24:88:66:d1:76:88:33:a9:8c:74:19:f2:6b:50:
                    da:d9:7d:5f:a9:d5:c4:e5:f6:e0:05:c4:90:53:5f:
                    c2:4b:a8:90:76:78:5c:82:94:6e:00:ca:66:81:1c:
                    bb:02:2c:e7:e4:ca:6e:fd:54:fe:b6:b6:69:ea:7a:
                    0f:52:86:7a:a0:21:3e:ee:86:58:26:d2:89:86:fd:
                    77:a8:69:9f:5e:fc:b9:14:ca:4b:12:77:89:f0:e6:
                    2d:b4:32:32:e5:e0:2a:fe:ee:cc:fa:4e:ee:c4:f2:
                    5e:16:58:42:d5:c5:ff:a0:4b:83:69:b7:ad:96:d3:
                    10:84:0e:a7:18:53:0c:c3:87:3d:93:9e:a2:4f:54:
                    42:6a:ed:22:79:0a:90:50:94:6e:84:b4:5d:19:d3:
                    7f:50:cc:2e:78:e9:6e:9d:83:f5:ee:47:2b:f5:7f:
                    7d:f1:a1:0d:89:15:e8:33:39:b6:9a:e0:48:df:c3:
                    90:a5:3c:8e:40:b4:4b:99:61:54:4c:e5:d7:51:fa:
                    ad:3b:1b:4a:35:fb:84:6a:70:b0:0b:ba:f6:7f:4a:
                    66:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C6:4D:57:78:FE:EE:0B:04:14:9C:B6:1A:D0:D5:F4:FB:62:E5:32
            X509v3 Authority Key Identifier:
                keyid:F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:aa:10:b2:4f:11:b9:e3:8d:67:64:de:b5:a9:e1:7c:87:c0:
         cd:d0:10:7f:10:d0:ac:6e:32:7c:9e:4b:8d:0e:2c:4e:f7:87:
         1b:2a:21:d2:1d:80:08:d0:85:8e:53:da:71:8c:0c:16:50:b3:
         e9:5a:de:85:a4:6e:44:ed:67:24:29:40:97:ef:53:c3:33:b1:
         db:9f:3c:36:b8:35:42:30:41:4b:70:1f:6f:fb:95:9f:21:77:
         d9:c0:3e:fb:4c:03:87:96:aa:bb:6c:bf:12:06:a6:07:38:2a:
         ef:0b:76:ee:dd:2c:30:69:81:ed:ed:5d:6f:0a:fc:8e:f1:c0:
         ca:7b:9a:ba:a2:a2:59:91:15:a1:65:3a:29:29:1d:d6:c1:11:
         44:f5:72:e5:3c:eb:ee:44:bf:4b:77:57:d0:f8:39:02:7f:49:
         40:c5:86:df:13:e6:59:e0:d4:bb:ee:78:97:98:cb:ca:45:65:
         e2:6d:4c:68:bf:24:bf:9f:21:f8:80:2d:4b:64:c0:0f:64:1e:
         b9:ea:f2:75:83:aa:2b:44:f6:7b:28:6b:45:ff:9d:65:6b:aa:
         37:e7:fa:ac:fe:d2:03:02:f5:4c:6a:c4:5b:a1:ba:d7:e9:c4:
         99:b5:fd:7b:e4:71:6f:82:45:51:d0:d1:0e:df:f1:e3:38:83:
         b6:de:c3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:07 2024 by rpki-client on console-fra.rpki-client.org