Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/3130332e3138332e35362e302f32342d3234203d3e203438343635.roa
File:                     3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          FcF8duvYIXOvc3WqSyocBSQypEigGKGbtBz9pQSGDto=
Subject key identifier:   04:8B:F9:B2:B1:08:E3:1C:58:6E:1C:E1:A1:75:96:FA:73:58:4C:DA
Certificate issuer:       /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C
Certificate serial:       2669D7B24F1745949FD9467C3D7F5708688304F4
Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/3130332e3138332e35362e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 15 Jul 2024 02:54:47 +0000
ROA not before:           Mon 15 Jul 2024 02:49:47 +0000
ROA not after:            Mon 14 Jul 2025 02:54:47 +0000
asID:                     48465
IP address blocks:        103.183.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl
                          rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:69:d7:b2:4f:17:45:94:9f:d9:46:7c:3d:7f:57:08:68:83:04:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C
        Validity
            Not Before: Jul 15 02:49:47 2024 GMT
            Not After : Jul 14 02:54:47 2025 GMT
        Subject: CN=048BF9B2B108E31C586E1CE1A17596FA73584CDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6f:33:ee:3e:6c:f6:46:46:bd:d9:86:20:b9:
                    1e:a9:5d:eb:bd:c4:3d:28:a3:b4:24:9c:a2:9d:ed:
                    45:1c:70:b0:6a:d6:91:ad:e7:82:d4:09:cb:91:56:
                    15:43:f7:8b:e7:26:9b:d5:2e:c9:b4:d0:d3:67:95:
                    19:c8:83:74:87:d9:6b:77:8d:ef:72:9a:6b:f6:73:
                    7a:18:46:f2:1c:92:96:e3:29:41:f8:0a:e1:8b:8d:
                    7a:50:23:cd:cb:a8:d1:33:2b:b9:c4:c1:99:4c:8e:
                    4a:63:70:6a:0d:a4:50:41:fe:2c:0f:fa:81:eb:2d:
                    ce:96:75:b0:f8:7d:2f:c0:0b:38:9e:c8:b9:ce:b5:
                    4d:00:05:bb:2f:87:05:a4:37:0d:63:8e:aa:d8:a0:
                    26:91:3f:e1:54:b5:b6:cd:65:ab:63:ec:46:f2:f4:
                    79:74:98:cc:b1:90:7b:85:fc:90:a9:c9:26:04:2e:
                    f8:5e:eb:15:23:ed:23:56:8d:83:ad:14:0c:98:44:
                    8d:8e:27:de:72:eb:93:62:da:fe:b2:01:86:40:74:
                    0a:57:50:d5:eb:4f:c8:b0:82:f3:58:60:ec:bd:e3:
                    5c:40:fe:42:7d:be:3d:ac:36:71:b0:bb:3d:47:03:
                    df:06:46:0f:25:33:18:b4:7f:3e:29:62:0d:e0:54:
                    3c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8B:F9:B2:B1:08:E3:1C:58:6E:1C:E1:A1:75:96:FA:73:58:4C:DA
            X509v3 Authority Key Identifier:
                keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/3130332e3138332e35362e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:c8:a1:50:f8:01:42:e0:9c:1f:66:94:22:c5:b7:5f:58:d4:
         49:59:c8:1e:69:33:46:93:d1:1a:fc:fc:23:4d:7b:0a:b7:c9:
         ab:dc:c3:58:80:fc:28:8a:e0:40:a4:71:cf:76:4d:30:f4:4d:
         cd:65:bb:70:de:10:dc:9a:c3:cb:c7:39:2d:fa:c0:35:5b:29:
         f0:bb:8b:29:e0:f9:d9:9f:ee:f0:69:9b:52:ae:ea:eb:bc:cc:
         cc:84:b5:5a:32:3d:c2:55:11:19:51:aa:8e:c4:80:4c:b1:42:
         65:9a:b9:ec:52:c0:1f:9a:db:e6:80:93:d1:2d:2c:96:f3:6f:
         1d:ed:62:de:0d:1b:af:25:db:0f:b3:76:b5:8b:56:f4:eb:bb:
         bc:8c:fd:63:3e:cf:18:c8:a9:4e:dc:40:02:05:4d:34:1f:6a:
         45:41:6f:10:33:c6:20:18:cc:f9:22:3d:dc:04:48:66:d8:2a:
         9a:8b:a8:6d:12:6e:0d:12:97:77:31:66:ef:6c:4c:5f:88:ee:
         05:33:63:be:11:31:b4:18:39:a3:a6:94:25:78:67:33:fa:16:
         4a:cc:cf:d8:75:a0:91:f1:26:29:2d:6b:84:2a:fb:aa:a2:86:
         5f:0d:a0:ce:3e:be:e3:e6:c5:49:90:ab:14:4c:42:a8:a2:97:
         b4:e0:e9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:57 2024 by rpki-client on console-fra.rpki-client.org