Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa
File:                     3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa (raw, json)
Hash identifier:          yuxN239Qjzp0vsOWy9IF6xkFXMfsU1hpkmyJ2PRKTLs=
Subject key identifier:   2A:82:69:09:CA:B3:B1:B8:A6:68:11:AB:23:E3:E9:3C:C6:E3:EB:18
Certificate issuer:       /CN=03315D0E966A85B878EA9058B8CF03EAF2881889
Certificate serial:       34B32DE408DAB83B2D7C36003D0BA790ED280D6E
Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa
Signing time:             Mon 31 Jul 2023 00:07:36 +0000
ROA not before:           Mon 31 Jul 2023 00:02:36 +0000
ROA not after:            Mon 29 Jul 2024 00:07:36 +0000
asID:                     135448
IP address blocks:        103.97.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl
                          rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 14:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b3:2d:e4:08:da:b8:3b:2d:7c:36:00:3d:0b:a7:90:ed:28:0d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889
        Validity
            Not Before: Jul 31 00:02:36 2023 GMT
            Not After : Jul 29 00:07:36 2024 GMT
        Subject: CN=2A826909CAB3B1B8A66811AB23E3E93CC6E3EB18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:43:a6:c6:ad:11:aa:09:f5:47:98:42:e9:09:
                    e3:c5:25:4e:60:bd:93:8a:5e:bf:d8:aa:1d:da:d7:
                    4f:17:cf:7d:15:13:1d:39:8e:0b:bd:5a:52:40:4a:
                    ce:82:a8:4c:14:11:f7:b9:4c:e3:47:d8:41:fc:04:
                    88:78:87:37:21:52:59:19:2d:28:44:dd:12:e7:88:
                    39:a7:a1:56:55:39:19:8f:bb:b7:70:72:e4:02:e6:
                    cb:e0:ee:fc:2e:41:00:ec:fe:94:5e:1a:a4:30:1c:
                    5d:d5:36:8e:75:33:ba:fa:e2:ea:a4:bf:c8:46:1c:
                    ed:ad:c5:c2:2f:f3:89:b7:ac:f5:68:03:1a:b3:29:
                    52:af:21:2e:b0:85:3c:b8:b2:e6:97:e2:e0:17:f1:
                    5b:be:4b:9c:f4:d5:da:44:35:f9:3f:60:63:3e:cf:
                    9e:2a:4b:a0:41:64:a2:2e:34:da:fc:79:6b:f3:b0:
                    8c:af:8c:97:4c:79:a9:9e:06:ea:99:57:e7:0f:1f:
                    e1:a5:25:25:d1:73:d7:51:86:e5:5a:8f:9e:0a:aa:
                    33:87:35:f0:20:f5:ce:8a:ed:48:fc:2d:0b:85:14:
                    48:bf:17:e7:8b:cf:1e:50:1d:aa:c9:8a:90:90:8c:
                    3d:0f:55:98:1e:84:40:d9:58:d7:2d:03:d8:58:0f:
                    30:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:82:69:09:CA:B3:B1:B8:A6:68:11:AB:23:E3:E9:3C:C6:E3:EB:18
            X509v3 Authority Key Identifier:
                keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:15:4a:32:66:45:17:d4:ed:be:57:fe:0c:2a:84:08:d5:90:
         41:c8:95:30:a7:7c:35:50:20:8d:cb:13:9d:26:5b:ea:cf:a7:
         32:02:18:83:06:f4:dd:b4:0e:7c:41:ad:c9:94:f3:48:5f:f8:
         2f:c1:33:29:24:bd:09:e6:d3:d1:42:ed:64:30:d4:6a:bb:ef:
         b2:8e:f7:42:78:1a:be:0f:34:12:f5:d3:42:85:40:45:0c:bd:
         25:8e:9d:52:d1:34:85:00:7e:c0:81:82:0c:50:ac:35:3e:fe:
         51:ad:32:03:36:29:e2:a0:e7:da:e6:ce:91:ec:e4:5a:b2:57:
         b8:4e:53:a4:38:e1:5b:dc:cf:82:dc:45:b2:83:82:b2:4a:04:
         85:b3:98:bc:c3:38:09:0a:d9:0b:49:77:02:b7:d6:ed:e0:a7:
         4f:16:ea:f1:0a:71:17:46:9d:89:37:05:5d:1a:f4:0e:1f:b6:
         bf:52:90:8e:19:31:73:60:84:19:6e:f6:e2:15:85:ad:0b:a6:
         de:b7:da:2f:9c:96:53:43:bd:ad:aa:05:67:4e:65:19:91:52:
         6b:67:af:c9:a2:c7:d4:07:09:95:12:7a:fa:0c:db:14:59:b1:
         a7:49:e6:74:3c:f0:aa:b1:51:5f:9d:31:25:83:57:ac:3f:5c:
         aa:db:e5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 13:57:48 2024 by rpki-client on console-ams.rpki-client.org