Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa
File:                     3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (raw, json)
Hash identifier:          D4EkIlEcE1wtYu4llvh2kzSAskHUdWXvwrriG+hYUDU=
Subject key identifier:   4C:97:44:57:7B:DD:9F:16:85:AA:C0:67:38:33:7B:35:3E:58:A8:C2
Certificate issuer:       /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8
Certificate serial:       4F6F49B5D3701498B70349E5C312B04E0041820D
Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa
Signing time:             Fri 21 Jun 2024 17:00:01 +0000
ROA not before:           Fri 21 Jun 2024 16:55:01 +0000
ROA not after:            Fri 20 Jun 2025 17:00:01 +0000
asID:                     147124
IP address blocks:        103.175.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl
                          rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:6f:49:b5:d3:70:14:98:b7:03:49:e5:c3:12:b0:4e:00:41:82:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8
        Validity
            Not Before: Jun 21 16:55:01 2024 GMT
            Not After : Jun 20 17:00:01 2025 GMT
        Subject: CN=4C9744577BDD9F1685AAC06738337B353E58A8C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a8:a9:65:5b:40:c6:7c:b6:a2:c6:09:06:30:
                    ee:72:ea:ca:40:f4:32:44:ef:e3:75:6c:3a:0c:f7:
                    66:51:a3:ce:6b:09:8c:3f:35:93:d2:be:28:85:09:
                    2f:4f:13:73:13:27:64:67:10:aa:7b:8b:62:6d:af:
                    7d:13:c5:35:48:6a:60:6f:2f:69:04:cc:97:72:c9:
                    3a:ee:eb:a7:68:01:4c:e4:51:7d:d3:fb:39:b4:f9:
                    62:c1:21:03:38:e2:d1:ad:b3:50:b4:b1:a5:99:0a:
                    85:ce:50:a0:3a:98:24:5f:37:94:f0:39:8c:f2:6d:
                    7d:33:9d:04:4a:52:a1:bd:1a:9c:fb:50:e2:ff:a9:
                    22:05:89:74:fb:d6:27:ab:87:c8:8a:2c:35:f1:d8:
                    1a:6c:4a:c1:56:a6:7f:68:4d:a8:0f:a5:49:f4:67:
                    75:11:a1:6d:14:2b:b4:b5:2a:fb:39:f1:d3:f6:ab:
                    37:e8:c2:8e:e9:d6:6c:ab:85:ea:47:9e:a2:30:75:
                    a5:10:48:05:d1:4e:a2:e4:d2:68:ed:b6:58:42:a8:
                    d4:45:fe:0c:54:b4:8d:78:58:0b:7a:5b:22:33:5c:
                    e1:9b:97:07:34:4b:fd:d3:61:2f:54:22:1e:fc:86:
                    e3:e0:ca:85:7d:de:4e:af:36:2a:47:a7:c4:5a:ad:
                    59:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:97:44:57:7B:DD:9F:16:85:AA:C0:67:38:33:7B:35:3E:58:A8:C2
            X509v3 Authority Key Identifier:
                keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:12:6b:ef:f0:dc:be:96:74:a8:23:64:2b:2e:45:31:88:08:
         6a:1c:7c:b1:c7:ed:e9:d5:7c:52:40:27:50:37:3d:dd:2d:92:
         2e:ee:24:09:05:c4:3f:10:02:35:2e:51:64:6f:67:e2:dc:c2:
         08:f0:35:a3:b8:ea:bc:1d:e6:25:08:29:c7:7c:89:ff:a4:3f:
         5c:41:e7:27:fe:44:e1:30:f9:cc:93:7d:4e:39:eb:af:aa:76:
         e5:d8:1d:f4:2f:67:05:0c:32:c8:42:a7:ea:69:77:be:b8:70:
         8f:1e:6f:0b:e6:ff:e1:ae:07:52:13:02:64:3b:d0:cb:d8:7e:
         2a:84:9a:5c:58:8f:7e:a3:71:a2:22:7b:b8:7f:5f:eb:f2:32:
         47:84:bd:93:f8:84:cc:fe:b2:29:7b:fc:b5:72:1e:d8:2d:d6:
         93:17:8d:b2:68:dc:86:39:50:4b:a7:69:22:3f:b7:22:89:7c:
         55:81:78:6b:c7:06:f6:29:2b:82:2a:6e:90:ee:16:cc:88:07:
         b7:01:b7:84:ea:71:ed:8a:3d:24:7e:43:b2:dd:6d:7d:35:65:
         57:51:c2:70:5d:8a:2f:96:15:8a:1b:fa:df:b6:31:bf:3d:c4:
         e7:79:50:57:40:c1:46:d0:10:65:e9:92:71:69:be:c0:fc:6f:
         fa:19:64:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:55 2024 by rpki-client on console-ams.rpki-client.org