Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa
File:                     3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa (raw, json)
Hash identifier:          B/B1eVeOj1OXFKSuXB13wg1zAB2ubQ8e076O5JYTG3c=
Subject key identifier:   EC:84:FA:2D:A9:E2:E4:BB:01:8A:70:F1:C1:E0:5C:C6:50:B8:13:BB
Certificate issuer:       /CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6
Certificate serial:       20394DF3C9E7CEC6B8BBDA6F21B6395836E03FA8
Authority key identifier: 46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa
Signing time:             Wed 02 Aug 2023 06:00:01 +0000
ROA not before:           Wed 02 Aug 2023 05:55:01 +0000
ROA not after:            Wed 31 Jul 2024 06:00:01 +0000
asID:                     149882
IP address blocks:        103.185.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl
                          rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:39:4d:f3:c9:e7:ce:c6:b8:bb:da:6f:21:b6:39:58:36:e0:3f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6
        Validity
            Not Before: Aug  2 05:55:01 2023 GMT
            Not After : Jul 31 06:00:01 2024 GMT
        Subject: CN=EC84FA2DA9E2E4BB018A70F1C1E05CC650B813BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:38:70:81:99:61:6c:d7:28:4b:dc:b4:62:43:
                    7d:34:b0:a7:3f:ff:d2:72:5b:12:76:6d:73:6d:e4:
                    b9:5c:4e:e5:38:a2:66:c6:83:1e:c2:46:98:a1:30:
                    51:e9:52:37:9c:37:06:0d:18:66:68:8d:c2:f5:38:
                    12:d5:67:cc:e6:42:2a:a0:21:68:ca:0a:23:ce:10:
                    ba:e0:26:87:50:a8:d5:1d:72:74:0d:d2:12:d6:1c:
                    4b:cb:77:ce:43:a3:c2:16:a5:95:a9:99:73:e9:f0:
                    bd:a6:de:d7:91:27:20:f3:c8:51:db:98:d8:f4:b7:
                    b1:7c:b3:79:1c:97:60:6c:53:3a:14:22:55:39:cf:
                    06:78:a6:93:36:db:5e:7c:c4:83:e6:30:b2:52:5e:
                    93:5f:cd:e5:60:12:dd:5d:18:07:8e:46:a8:64:90:
                    89:96:ae:56:b4:74:28:4e:21:4a:53:6f:42:17:0c:
                    e0:09:c3:09:77:56:3a:77:1b:f8:f2:48:53:52:ea:
                    d3:fe:ac:d5:97:a6:38:d0:de:ef:a1:aa:08:22:07:
                    fc:65:50:f9:28:93:73:74:8b:aa:c2:71:a7:2d:db:
                    d0:4d:7e:33:9d:1e:6d:fc:e4:c6:bf:1c:15:5a:05:
                    51:7e:cd:d6:dd:1a:df:3a:34:89:67:2b:24:75:42:
                    5c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:84:FA:2D:A9:E2:E4:BB:01:8A:70:F1:C1:E0:5C:C6:50:B8:13:BB
            X509v3 Authority Key Identifier:
                keyid:46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:8c:84:ab:69:a2:45:af:81:bf:cb:15:0d:a1:db:4e:c3:75:
         ee:ba:77:6f:79:34:f2:2c:68:c1:c3:ca:4f:1a:c6:43:66:91:
         af:00:d6:82:3c:fc:a9:4e:73:0b:c8:29:6c:52:57:7f:0f:22:
         aa:37:27:e4:76:3f:31:81:95:ae:75:b5:b9:c0:62:1b:74:f1:
         30:c0:dd:e8:cc:13:e1:63:85:96:a2:15:fc:79:dc:ab:da:a8:
         8c:a9:de:c0:e4:92:14:4a:39:13:db:b3:e2:81:44:0b:b6:0f:
         ad:3f:b1:de:3f:42:89:da:14:d2:94:cd:cc:b5:1c:62:ee:fb:
         a5:2e:c5:d6:b5:df:40:4c:69:ed:a2:46:29:db:18:b1:3b:09:
         ce:2e:93:20:52:97:0f:63:dc:ac:14:bc:22:5d:d3:01:f5:9e:
         66:9c:7a:db:80:a7:2b:0e:21:83:27:3e:06:fb:7b:59:27:ca:
         0a:bb:fd:5e:2c:ed:65:db:5f:86:ea:13:18:99:10:43:80:b1:
         4b:00:f5:29:91:6d:f7:fa:52:15:95:f0:f0:fe:9f:7d:85:11:
         d5:b7:cb:79:2c:c9:a9:69:ad:18:5d:5e:a1:b8:be:9d:61:92:
         3c:49:cf:6f:c2:de:34:25:46:ee:13:64:64:51:d5:62:7c:b5:
         c2:a1:f9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 11:26:38 2024 by rpki-client on console-ams.rpki-client.org