Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa
File:                     3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (raw, json)
Hash identifier:          yL52fqAXTaBNhpX2QuhtjgtaEHKpbUc+IQPv9BCdw/4=
Subject key identifier:   2E:57:7F:4D:D3:75:F6:65:46:3D:A3:91:89:B2:6A:9C:29:DE:29:5A
Certificate issuer:       /CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC
Certificate serial:       47251D97245526BE1763E5F1146DA4B382F85DB4
Authority key identifier: B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa
Signing time:             Thu 16 Nov 2023 08:00:00 +0000
ROA not before:           Thu 16 Nov 2023 07:55:00 +0000
ROA not after:            Thu 14 Nov 2024 08:00:00 +0000
asID:                     134658
IP address blocks:        103.210.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl
                          rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:25:1d:97:24:55:26:be:17:63:e5:f1:14:6d:a4:b3:82:f8:5d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC
        Validity
            Not Before: Nov 16 07:55:00 2023 GMT
            Not After : Nov 14 08:00:00 2024 GMT
        Subject: CN=2E577F4DD375F665463DA39189B26A9C29DE295A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:00:2a:b6:ae:55:60:e6:d7:7b:91:0b:7a:7a:
                    bc:76:10:d2:c8:76:05:4f:b5:f8:a2:5d:44:2a:4b:
                    cb:bc:1a:6d:5f:dc:2d:e4:90:4c:8f:db:68:ef:07:
                    09:93:37:e5:e1:77:6a:e9:9f:38:d1:44:71:56:c6:
                    1a:82:58:c4:a6:3d:d0:92:9b:35:54:7a:f4:a7:37:
                    7e:12:6d:b7:76:d9:35:63:9d:fa:ad:32:9d:d0:ec:
                    37:bb:b6:bb:37:ab:e9:a8:37:cb:dd:fc:a4:58:48:
                    70:6f:35:ae:50:99:e1:bb:20:1d:25:cb:5e:2d:53:
                    5b:24:ca:0e:7a:93:4b:31:b4:c6:ad:7e:b0:76:5e:
                    b4:79:3e:f8:b8:f3:40:7d:0a:27:cd:db:3e:bb:22:
                    b8:bf:b9:16:9a:31:cc:3d:62:54:d7:05:c2:b7:ab:
                    16:a6:9e:b7:fe:cd:f1:24:31:32:72:0c:4d:56:6d:
                    d8:25:cd:6f:b9:8d:9e:52:21:02:97:70:6a:68:c3:
                    94:be:5b:e5:c6:0b:34:00:fc:a2:23:c2:bd:f6:64:
                    7b:02:70:8f:55:5f:0d:86:d3:0c:65:45:28:2e:02:
                    9b:4d:22:78:19:93:5d:2b:59:13:b9:4d:c5:e6:58:
                    26:ec:36:25:18:e5:b5:a6:f5:f6:11:ea:ea:aa:f5:
                    33:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:57:7F:4D:D3:75:F6:65:46:3D:A3:91:89:B2:6A:9C:29:DE:29:5A
            X509v3 Authority Key Identifier:
                keyid:B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:31:d7:16:88:ed:7c:42:f8:07:ad:82:35:45:92:3a:46:c7:
         c9:a6:8c:ea:cf:20:32:c2:18:f7:15:65:27:57:af:f7:6f:1f:
         fa:69:93:e9:11:aa:3c:d1:cb:a6:3b:88:ef:9b:24:e9:4e:fe:
         52:6b:14:cb:b5:10:02:3b:cc:1f:43:d5:b1:e5:97:a3:26:01:
         f2:0e:b9:b0:75:31:a7:53:c9:af:28:35:2c:62:29:5a:b6:91:
         21:cf:1c:59:62:8f:2a:d6:cd:35:41:5d:cf:d0:94:90:82:1a:
         d6:18:c1:04:fd:71:35:d8:0d:6c:30:9a:7b:c7:e5:fc:ce:90:
         15:3c:00:42:0a:79:90:12:cd:87:ec:21:22:e7:7c:78:b4:ae:
         87:2c:ee:35:d0:a2:e5:8c:ed:e4:10:c9:5d:80:1c:ad:27:86:
         1f:2f:9c:8f:76:69:46:f5:71:14:31:0b:62:34:2b:ae:9d:4c:
         f3:0f:bc:49:f1:81:81:cc:e2:fc:25:71:b7:8d:f7:1e:b8:d8:
         fe:da:24:10:a2:83:2f:b9:f2:92:eb:dc:a1:bb:7e:9d:ac:bd:
         f6:d8:4f:e9:31:c6:c9:c2:74:f4:4f:c5:bc:fd:93:6f:0f:50:
         36:19:76:4c:1d:bf:08:9c:e4:9b:08:6f:3a:7a:22:b5:29:e7:
         c9:95:9e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:09:21 2024 by rpki-client on console-ams.rpki-client.org