Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e38312e3130302e302f32342d3234203d3e203538343735.roa
File:                     3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (raw, json)
Hash identifier:          +nDtlT3xAOTXpOYO31IZulCWcoaWoP+VdiSKh3LmXZc=
Subject key identifier:   5C:C4:FE:4F:A5:F7:15:1D:DA:25:FC:70:BC:2F:4B:9E:FB:94:A4:BA
Certificate issuer:       /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98
Certificate serial:       59CE241DEDB60A3604F9FFC13465DDA1F73D39D6
Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e38312e3130302e302f32342d3234203d3e203538343735.roa
Signing time:             Mon 31 Jul 2023 00:13:41 +0000
ROA not before:           Mon 31 Jul 2023 00:08:41 +0000
ROA not after:            Mon 29 Jul 2024 00:13:41 +0000
asID:                     58475
IP address blocks:        103.81.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl
                          rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 19:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ce:24:1d:ed:b6:0a:36:04:f9:ff:c1:34:65:dd:a1:f7:3d:39:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98
        Validity
            Not Before: Jul 31 00:08:41 2023 GMT
            Not After : Jul 29 00:13:41 2024 GMT
        Subject: CN=5CC4FE4FA5F7151DDA25FC70BC2F4B9EFB94A4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:17:0f:c6:85:3c:18:77:f7:52:2c:ec:6c:fd:
                    5a:81:7c:13:5c:30:9c:98:4f:51:7c:10:e7:56:7a:
                    be:4c:f5:fb:9e:53:d5:a2:36:e3:d0:de:b3:7e:26:
                    13:59:77:f8:52:62:73:40:d4:f3:e1:2c:bc:42:4c:
                    ad:fa:5d:ed:8f:0d:32:ef:42:3d:99:c8:64:b7:8c:
                    0e:49:ec:63:4c:ec:f4:e4:b6:ca:53:76:d7:9b:d2:
                    a3:58:02:5d:c8:64:80:dc:88:69:6a:1a:db:3e:a5:
                    67:03:8b:ea:aa:68:72:47:92:19:3b:20:8e:f7:21:
                    06:e5:6d:c7:6a:7d:9b:f5:65:cf:ef:dc:cd:0f:9c:
                    15:b9:40:1f:26:ff:25:a4:87:54:96:07:07:da:1b:
                    cc:28:d9:97:10:43:26:7b:8c:61:b7:ce:7d:69:c0:
                    34:55:ef:74:3d:bd:6a:11:63:d6:01:d8:0e:e0:59:
                    c2:c3:f5:a8:3b:cb:b3:1a:29:5f:30:7e:71:d6:37:
                    e8:a6:02:5c:f0:63:0a:3b:d1:57:f9:c7:a7:0d:da:
                    f9:1c:42:8e:b4:73:49:2f:8f:70:80:fb:75:ba:b0:
                    01:fa:f7:d9:4d:3b:98:03:da:8f:47:03:0e:9a:7f:
                    1e:b9:b2:34:09:81:a2:7b:a1:80:aa:70:74:cf:f4:
                    ef:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C4:FE:4F:A5:F7:15:1D:DA:25:FC:70:BC:2F:4B:9E:FB:94:A4:BA
            X509v3 Authority Key Identifier:
                keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e38312e3130302e302f32342d3234203d3e203538343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:b5:0f:2a:eb:88:1c:6e:71:2c:2a:c2:14:9f:65:f8:ec:b8:
         c5:f4:97:46:93:5e:e7:de:3d:9f:08:39:f8:ea:af:7b:4d:71:
         da:ba:11:6d:66:e6:e3:2a:c0:3a:38:f3:7e:21:8e:99:cd:3d:
         21:6c:be:52:f7:8d:07:0f:3f:75:b3:15:68:35:6a:a8:03:cb:
         e4:2f:d0:5f:cd:6a:dc:a9:1d:54:fe:0b:f6:e5:a8:51:2e:a2:
         d2:69:94:54:33:f6:26:35:2a:a1:a4:87:cb:d2:4e:23:c5:81:
         14:90:b4:ad:9a:1a:30:25:c6:fb:7e:9b:66:60:5f:93:28:4f:
         ec:9f:ca:5c:57:c0:f9:be:39:bc:a1:63:89:c2:a8:ae:04:98:
         32:fb:4f:f0:9e:9a:85:52:33:57:93:ed:85:8f:5c:1b:3f:87:
         9c:49:18:25:a4:e5:b1:74:37:f1:43:a2:66:03:99:42:5f:05:
         cd:e4:4f:67:7b:89:ac:30:5d:4a:97:fa:8c:77:f5:31:e5:9f:
         b4:00:4b:6f:bf:de:a9:fe:8d:4e:53:f3:d3:70:db:da:a0:6b:
         a2:69:b0:c5:c5:5c:e8:ec:7e:10:31:29:38:de:14:a7:9e:8c:
         3d:0a:ed:5f:09:64:59:d5:a6:48:58:31:95:70:82:1a:f5:bf:
         1e:21:40:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 15:08:54 2024 by rpki-client on console-fra.rpki-client.org