Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e38312e3130312e302f32342d3234203d3e203538343735.roa
File:                     3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (raw, json)
Hash identifier:          e5ewcFJRxzK/0Z2sEt56z3/VqQWmBHyaNNJjnsuTHZQ=
Subject key identifier:   B6:F2:42:C9:B9:85:50:5E:7D:58:02:78:8F:D1:FC:E8:EC:14:7E:37
Certificate issuer:       /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98
Certificate serial:       2D56F4ED292EEAC63B8F17C228160BAE1A46CAA7
Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e38312e3130312e302f32342d3234203d3e203538343735.roa
Signing time:             Mon 31 Jul 2023 00:13:41 +0000
ROA not before:           Mon 31 Jul 2023 00:08:41 +0000
ROA not after:            Mon 29 Jul 2024 00:13:41 +0000
asID:                     58475
IP address blocks:        103.81.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl
                          rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Apr 2024 21:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:56:f4:ed:29:2e:ea:c6:3b:8f:17:c2:28:16:0b:ae:1a:46:ca:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98
        Validity
            Not Before: Jul 31 00:08:41 2023 GMT
            Not After : Jul 29 00:13:41 2024 GMT
        Subject: CN=B6F242C9B985505E7D5802788FD1FCE8EC147E37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e8:0c:24:71:a4:14:79:5a:f7:6a:85:e0:f7:
                    0e:63:ce:f1:e7:04:c7:8a:3a:aa:a0:d6:ea:38:9e:
                    7c:9c:b1:bd:03:a4:48:1d:00:3e:40:cb:e3:de:0d:
                    fa:33:f5:b7:8e:47:b3:9f:54:5b:cc:a6:13:6c:c5:
                    51:67:34:40:8f:65:7e:91:81:87:97:ea:07:5c:44:
                    c5:46:26:19:86:d9:c1:3c:fe:90:f8:3f:89:e3:82:
                    49:e8:f9:b1:98:96:5f:5c:a0:91:af:47:86:af:2a:
                    75:33:46:e9:dc:16:21:4a:ef:a8:fe:d0:e4:da:a7:
                    53:0d:f2:85:22:78:4f:0f:a1:2b:41:ea:44:cf:58:
                    b3:66:b2:a9:23:4e:7b:c1:b8:ad:44:ff:51:dd:2f:
                    8f:be:b7:81:bf:50:1d:0e:4f:f8:0b:c9:88:3a:03:
                    53:e2:98:38:2e:91:61:dd:65:40:40:a0:58:65:95:
                    53:0e:5e:d1:40:cb:12:ca:d3:52:a7:37:1b:c5:18:
                    19:9c:2c:53:dc:c8:33:aa:37:7c:a1:cf:a6:ca:18:
                    35:99:04:6d:51:31:b1:c1:68:87:4a:ed:02:b1:24:
                    87:2e:36:19:a4:4e:32:74:99:c6:da:65:d4:92:94:
                    1a:31:c2:a1:7a:e0:2d:3b:f1:9b:92:b8:91:aa:82:
                    5e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F2:42:C9:B9:85:50:5E:7D:58:02:78:8F:D1:FC:E8:EC:14:7E:37
            X509v3 Authority Key Identifier:
                keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e38312e3130312e302f32342d3234203d3e203538343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:08:c7:e0:df:05:45:6f:14:ea:5a:35:df:04:58:22:34:d8:
         dc:e5:50:91:2f:c4:e0:52:f9:3e:27:36:d2:2e:95:b1:35:43:
         6a:fb:5d:ea:7e:be:72:8c:64:9a:c6:73:0d:cf:8b:f1:ee:b2:
         cf:c3:88:13:57:eb:ac:02:83:bf:01:df:da:39:81:9e:0a:e4:
         8b:22:23:54:e0:f3:a5:c0:93:11:b9:9f:b3:08:54:6a:a9:1f:
         df:ef:28:7e:7c:03:bf:67:e0:f6:db:87:24:94:10:aa:94:c2:
         c3:05:b0:b1:55:27:c4:fb:8a:7e:93:a4:1b:a8:3a:71:da:26:
         e8:1b:1f:5c:fd:c3:06:46:3a:41:66:cb:8a:c0:96:5c:cf:7d:
         27:2b:b9:f5:a3:f0:fd:c3:b4:24:cd:1b:e5:f8:36:6f:e3:5c:
         2c:93:ff:16:ee:ba:e3:8e:79:b9:80:13:6f:45:02:4e:78:06:
         c4:69:d2:d8:be:f0:87:0d:78:f4:57:a3:cc:b0:f7:b9:8a:ea:
         54:d8:25:af:1e:3d:d1:c1:2f:25:88:34:9d:ef:3d:6e:51:c2:
         62:fc:21:1f:4c:36:37:9f:b1:13:f4:00:d3:f4:0f:68:59:74:
         16:a5:06:bd:2c:ad:bc:8d:b3:2d:79:49:cc:85:c4:3f:77:90:
         85:3a:00:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 08:00:53 2024 by rpki-client on console-ams.rpki-client.org