Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa
File:                     3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (raw, json)
Hash identifier:          nx3DFIuUzInyTBwQCTgELzBv7Mmwz0hD2tPu+GVUIUM=
Subject key identifier:   59:9C:FA:20:91:9B:8D:07:AF:E6:AA:5A:88:79:2B:B1:58:6C:C1:2A
Certificate issuer:       /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8
Certificate serial:       505456F128932A3CB6BEC31C65DF2D09DB1934A4
Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa
Signing time:             Fri 21 Jul 2023 16:20:21 +0000
ROA not before:           Fri 21 Jul 2023 16:15:21 +0000
ROA not after:            Fri 19 Jul 2024 16:20:21 +0000
asID:                     147124
IP address blocks:        103.175.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl
                          rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 06:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:54:56:f1:28:93:2a:3c:b6:be:c3:1c:65:df:2d:09:db:19:34:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8
        Validity
            Not Before: Jul 21 16:15:21 2023 GMT
            Not After : Jul 19 16:20:21 2024 GMT
        Subject: CN=599CFA20919B8D07AFE6AA5A88792BB1586CC12A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:42:9f:be:84:40:41:5d:3f:32:f7:e6:26:ad:
                    2c:c5:8c:01:d3:16:db:4b:54:8c:2e:df:dc:e7:a1:
                    56:80:5d:ce:4d:2c:c8:cf:7e:87:79:d5:59:7d:1a:
                    72:42:73:ea:c4:ff:27:ef:53:c2:9a:52:5e:a5:44:
                    06:f6:01:d2:a1:b5:6c:ed:a5:f3:97:7b:67:90:ba:
                    75:b0:88:47:89:4d:e4:83:b4:b1:71:dc:84:01:0d:
                    45:dc:6a:b9:9a:07:21:0a:de:a1:d2:32:bd:dd:e4:
                    15:91:3e:90:66:0a:fe:06:7b:6e:1a:e4:8f:09:25:
                    ce:8f:2b:c0:c4:3c:f2:fc:8d:fc:89:26:ed:cd:40:
                    2d:14:ad:6a:47:39:88:2b:57:40:36:3a:39:d8:fb:
                    a5:6f:2d:cf:dc:59:95:e7:06:3e:6d:2f:96:7d:14:
                    fc:e0:ce:e4:bb:36:65:7d:f5:99:a8:f1:f8:17:dc:
                    0c:10:12:7e:4c:57:bd:98:f0:cb:f5:38:8f:74:7e:
                    fc:95:94:9f:66:e0:f0:3b:0b:4f:52:c6:3b:a7:72:
                    d8:c5:a0:55:70:d2:3d:5e:00:18:b1:d4:2a:84:4c:
                    8a:89:28:81:25:c3:ac:e0:7d:1b:76:f3:19:33:89:
                    72:1e:55:14:95:b5:b6:56:a2:2d:52:eb:42:1b:29:
                    47:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9C:FA:20:91:9B:8D:07:AF:E6:AA:5A:88:79:2B:B1:58:6C:C1:2A
            X509v3 Authority Key Identifier:
                keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:60:8f:0f:21:b5:64:8c:e9:f2:b0:35:e7:16:af:b1:00:fb:
         60:6c:1c:72:df:20:0f:21:7e:8a:82:a9:4d:79:90:0a:58:c1:
         0a:99:fb:36:b0:db:ee:55:66:fa:40:21:f1:b7:8b:fc:6f:2e:
         26:99:97:b1:e3:0c:65:4e:db:d1:e8:b9:41:a5:03:43:b4:24:
         aa:f6:68:4d:19:90:27:8d:03:a4:b2:4f:9f:64:f4:ec:0a:f7:
         a1:05:1d:2c:d5:24:00:67:de:a1:fe:08:37:dd:27:d1:a7:48:
         50:7e:ca:90:7c:80:73:ad:8e:7d:f2:ca:b9:3f:d1:a5:af:32:
         d0:f0:1f:44:a5:d4:4c:cc:a7:b8:3c:e3:c9:96:1b:f0:ad:ac:
         46:60:a9:14:91:6d:62:15:e1:63:c2:38:e9:17:6e:04:80:fc:
         0f:48:08:7e:0c:12:1b:2c:29:32:82:e9:8c:f6:09:ac:c6:d7:
         84:f3:2e:b3:cb:82:08:48:2f:93:28:6d:2d:81:fd:0d:d6:90:
         f5:9a:20:38:ba:98:9f:b6:c9:4c:9d:97:52:84:1d:04:fd:63:
         7e:88:4e:db:b9:6a:f3:dc:28:30:c2:34:38:0d:a9:d6:d8:e0:
         e1:e5:b7:6a:53:08:14:5b:e0:d7:81:70:1c:6a:0d:35:f2:66:
         0e:6d:8e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:07:12 2024 by rpki-client on console-ams.rpki-client.org