Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa
File:                     3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa (raw, json)
Hash identifier:          v3P2e1WwY9BCdirRZcnCsc/yunKwyQRv3HvhHbggZqQ=
Subject key identifier:   FE:A5:21:47:88:54:4E:15:DD:7D:CE:81:3D:E9:D1:B4:25:C1:78:81
Certificate issuer:       /CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6
Certificate serial:       4B4373EEE65C7485EEF69A619E69FEA6356DD476
Authority key identifier: 46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa
Signing time:             Wed 03 Jul 2024 06:00:02 +0000
ROA not before:           Wed 03 Jul 2024 05:55:02 +0000
ROA not after:            Wed 02 Jul 2025 06:00:02 +0000
asID:                     149882
IP address blocks:        103.185.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl
                          rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 15:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:43:73:ee:e6:5c:74:85:ee:f6:9a:61:9e:69:fe:a6:35:6d:d4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6
        Validity
            Not Before: Jul  3 05:55:02 2024 GMT
            Not After : Jul  2 06:00:02 2025 GMT
        Subject: CN=FEA5214788544E15DD7DCE813DE9D1B425C17881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:35:85:e3:ce:b7:6f:bc:37:6c:6b:a4:2f:36:
                    83:c8:29:4d:b9:bd:26:da:07:19:2f:ac:c2:a9:63:
                    97:9c:31:7f:da:bc:11:81:73:3a:5b:de:ad:de:bd:
                    34:7c:65:b8:88:d6:1f:af:29:e8:91:6c:ac:8a:a3:
                    94:dc:07:e0:86:3c:09:36:91:5f:73:f5:23:84:dd:
                    9c:7e:eb:35:74:9f:fb:c1:d0:26:21:bb:db:28:11:
                    6c:0f:6f:fb:5b:7e:33:13:c0:cf:7f:5e:8e:ca:3d:
                    0a:9d:18:07:40:79:8a:1e:06:37:8a:ce:bb:08:e5:
                    a4:2a:aa:24:26:ff:a4:4d:87:40:7e:53:ee:f2:da:
                    72:b8:42:39:28:f1:98:5a:61:dc:41:c3:95:23:9e:
                    88:aa:e9:57:ea:1e:b2:50:49:9c:f8:7d:ea:dd:68:
                    88:58:00:f8:07:8a:9b:b7:76:0a:3a:25:9a:a4:24:
                    81:99:8e:58:be:0c:f3:58:3e:16:a7:53:a7:f8:66:
                    a4:cc:08:40:fb:72:51:86:0f:b7:4b:39:0d:bc:6e:
                    f6:d7:b5:40:08:77:c3:9e:e2:42:f7:c4:0d:21:ad:
                    66:68:9c:88:fc:85:6b:69:fe:96:51:fc:5c:84:dc:
                    8f:de:dd:0f:b0:d4:eb:7c:46:51:56:2b:2c:ad:41:
                    cb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A5:21:47:88:54:4E:15:DD:7D:CE:81:3D:E9:D1:B4:25:C1:78:81
            X509v3 Authority Key Identifier:
                keyid:46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:16:d2:63:c5:bb:1d:35:e3:51:47:50:59:08:ea:28:9b:bf:
         d1:6f:64:dc:8b:86:16:90:8e:09:2c:a7:92:6e:6c:2d:c3:6b:
         04:6a:d1:08:79:7f:fe:18:82:5e:3b:d5:f4:c6:86:98:95:6f:
         28:31:51:d7:c2:6e:d2:a9:eb:a5:c7:c2:51:a9:e7:ba:39:2a:
         c8:20:14:c0:19:ae:5b:47:1a:46:b8:cd:44:8e:d1:7f:7d:af:
         1e:81:2c:0f:21:8d:78:52:f6:ba:84:dd:05:e4:21:86:5c:83:
         14:fe:9d:fb:23:0c:0c:9e:04:b2:e9:e7:18:53:17:a8:af:39:
         e8:ec:60:23:8f:77:2a:ac:05:8b:b1:eb:bc:8c:af:b4:22:1f:
         59:80:ce:12:cb:f7:70:94:f2:ab:a6:96:6f:d4:ce:62:37:37:
         40:2f:e5:29:86:7b:44:6e:f3:c0:a9:0a:0d:53:61:f9:26:80:
         51:42:70:81:7e:a1:bd:c3:88:de:51:3d:c8:ee:2a:d1:54:3e:
         97:f2:ba:61:a5:4a:77:66:d7:10:85:b9:44:a5:53:01:9a:42:
         c8:c3:d7:e4:85:99:63:02:a4:a9:cf:b3:f7:30:9d:40:52:bc:
         7f:44:73:18:9b:fc:7e:0e:90:4e:4c:0b:25:ed:79:80:d6:f2:
         2a:0c:4f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:27 2024 by rpki-client on console-ams.rpki-client.org