Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa
File:                     3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (raw, json)
Hash identifier:          1v4ba7LsWYzkmrUUas5phQC6K2QN9Q5rS+nYtFeCnFQ=
Subject key identifier:   72:FD:7B:FE:45:FF:2C:11:66:B8:E1:E0:5A:54:E8:B4:1B:E5:84:AD
Certificate issuer:       /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641
Certificate serial:       7F85AB00BAA3EB9C9A09A1EC2F089AA69D3485A0
Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa
Signing time:             Thu 30 May 2024 05:21:03 +0000
ROA not before:           Thu 30 May 2024 05:16:03 +0000
ROA not after:            Thu 29 May 2025 05:21:03 +0000
asID:                     133835
IP address blocks:        103.58.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl
                          rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:85:ab:00:ba:a3:eb:9c:9a:09:a1:ec:2f:08:9a:a6:9d:34:85:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641
        Validity
            Not Before: May 30 05:16:03 2024 GMT
            Not After : May 29 05:21:03 2025 GMT
        Subject: CN=72FD7BFE45FF2C1166B8E1E05A54E8B41BE584AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:16:8c:0f:fa:4b:c3:4d:ac:67:07:af:d3:e5:
                    4f:31:33:fc:a5:6d:c6:79:50:34:25:94:07:5d:c7:
                    6a:d3:47:6c:6d:a5:e1:f8:39:f8:0d:f2:ea:69:10:
                    6a:f6:ff:f2:d7:e1:22:99:1d:f5:ab:13:66:a5:fa:
                    6a:c1:61:42:ab:82:d3:e0:99:8a:36:8d:de:1b:af:
                    0a:53:11:78:51:a9:24:31:8c:a2:f2:94:e7:86:72:
                    e4:f4:fd:e4:84:5c:92:58:aa:50:3f:c9:e3:fa:a2:
                    d9:82:07:07:39:13:c9:20:b8:0e:41:ff:d8:f8:a4:
                    96:46:d3:b4:5f:33:b3:4f:6b:96:df:2f:89:13:cc:
                    38:f5:00:ef:2f:cb:21:57:97:c2:c6:29:1e:74:b6:
                    52:3d:88:61:51:85:ed:ae:ea:81:0f:b5:22:ee:45:
                    1f:a2:d5:a3:02:3f:8f:a9:d1:17:1b:bb:30:86:64:
                    7f:96:93:72:a4:a1:28:6a:92:5d:d3:92:19:37:3d:
                    52:9e:c5:8c:1a:46:5a:22:ff:f6:a9:95:65:03:75:
                    06:62:9e:b3:8d:1e:af:d6:56:a7:a9:58:c2:f4:43:
                    2a:2f:e1:27:77:21:73:e4:7f:2f:02:dd:76:9c:82:
                    c3:b2:6a:67:99:9a:e9:82:3d:e1:dc:59:0a:69:b8:
                    a1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FD:7B:FE:45:FF:2C:11:66:B8:E1:E0:5A:54:E8:B4:1B:E5:84:AD
            X509v3 Authority Key Identifier:
                keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:a0:f3:46:67:55:bc:95:2e:9e:49:e6:7c:aa:07:86:f5:c3:
         48:a5:bb:2c:48:43:ed:f8:e2:d9:49:fa:d8:4c:9a:44:24:ab:
         f9:b2:02:f5:07:47:ed:48:d5:72:9c:3e:95:ac:8a:cb:f9:1a:
         15:df:32:d2:a4:fe:97:1c:18:04:e1:a3:df:fb:09:0f:fc:76:
         19:54:7c:09:0b:4b:25:9b:90:a2:07:5b:5f:6b:9a:34:5e:0f:
         96:1c:cf:49:45:05:13:62:a8:e3:bc:c0:4e:2f:d3:6a:d0:46:
         97:f0:86:36:5a:ab:41:74:06:f1:6a:3e:f3:a2:56:b1:83:a9:
         b8:c7:97:d3:0b:ce:70:f0:08:76:fc:8f:6e:33:09:42:32:c0:
         f5:e0:e9:b4:07:31:0f:f8:4e:87:16:8d:ae:5b:37:73:4c:27:
         3f:2d:2e:70:a2:07:9e:58:40:e1:7c:c9:66:1b:8c:78:b4:10:
         01:8b:75:e2:32:31:2a:21:e9:69:df:4f:80:bb:18:ff:a7:7e:
         7b:2c:5b:31:54:23:fd:ad:23:4c:b1:32:9f:bb:d6:87:b9:28:
         03:40:2b:ac:9f:6d:7d:c8:0d:ca:47:5d:46:7f:08:1c:0e:b0:
         41:f2:18:8d:63:4c:2e:12:8f:43:74:a1:33:4a:83:81:dc:f3:
         92:73:ba:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org