Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e3235312e34342e302f32332d3233203d3e20313331373735.roa
File:                     3130332e3235312e34342e302f32332d3233203d3e20313331373735.roa (raw, json)
Hash identifier:          R/pmSckAzCBBd9eE9dTuhGrupo175bXiTZCM1Q0vylk=
Subject key identifier:   49:94:32:B3:40:2D:2D:47:CD:9E:EF:B3:2D:77:BD:56:58:C4:4A:5A
Certificate issuer:       /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial:       244888C1F1C3758297CD29F7A92025323EC0835D
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e3235312e34342e302f32332d3233203d3e20313331373735.roa
Signing time:             Sat 09 Sep 2023 14:00:01 +0000
ROA not before:           Sat 09 Sep 2023 13:55:01 +0000
ROA not after:            Sat 07 Sep 2024 14:00:01 +0000
asID:                     131775
IP address blocks:        103.251.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
                          rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:48:88:c1:f1:c3:75:82:97:cd:29:f7:a9:20:25:32:3e:c0:83:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
        Validity
            Not Before: Sep  9 13:55:01 2023 GMT
            Not After : Sep  7 14:00:01 2024 GMT
        Subject: CN=499432B3402D2D47CD9EEFB32D77BD5658C44A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:18:73:50:41:3b:92:86:79:33:f0:50:d2:8f:
                    c1:fa:6b:b2:24:da:49:47:b7:9b:f7:5f:e6:01:30:
                    f9:2e:95:d2:1e:13:a0:c4:93:3b:29:d2:08:b9:1e:
                    18:fc:b0:18:95:96:5d:73:08:cf:b2:82:a5:ea:98:
                    69:29:af:c8:c6:d7:03:d5:ab:09:71:ff:f3:b0:57:
                    9b:00:91:b3:cb:e0:de:cc:96:a7:7e:3f:f6:11:73:
                    9a:3f:6e:64:e3:c5:84:70:1e:6f:e9:38:00:c4:42:
                    4b:07:b0:e1:61:45:9b:c8:9d:b6:ed:fb:1e:a0:43:
                    17:7c:2c:8e:83:08:83:0d:7f:5d:ea:60:57:0e:ef:
                    fe:e7:99:96:5c:94:99:d0:1f:0d:8b:28:a0:13:0d:
                    21:1c:28:8d:21:21:5e:05:05:28:2d:55:2e:a7:8d:
                    56:ae:cd:3e:69:28:b1:b3:df:88:88:96:8a:c4:98:
                    69:74:1d:e5:30:df:92:7a:fa:55:7f:5a:c9:b6:a3:
                    04:9d:ae:fd:ee:82:a3:f3:6e:2e:c9:df:3d:d9:3b:
                    b1:ac:c3:f0:ee:c4:c9:7d:37:86:bc:86:e3:17:51:
                    0e:38:37:88:b0:23:73:9b:cc:d5:f7:6b:69:33:5a:
                    89:a3:23:2e:be:5f:a5:83:4f:d9:7c:3b:42:ea:23:
                    5a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:94:32:B3:40:2D:2D:47:CD:9E:EF:B3:2D:77:BD:56:58:C4:4A:5A
            X509v3 Authority Key Identifier:
                keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e3235312e34342e302f32332d3233203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:c6:dd:34:b1:7b:84:c6:32:a9:bf:3b:83:35:59:41:29:87:
         20:24:cc:86:71:02:db:bc:dc:7d:bd:2d:18:61:0c:a5:36:a0:
         13:3f:57:96:cb:01:33:59:98:7e:11:e8:99:07:f9:d7:22:1f:
         dc:98:72:15:f6:a0:df:6d:a9:85:d3:a6:5e:0f:bf:60:32:13:
         26:98:00:a1:8f:ce:6b:5d:19:6a:f1:a6:bc:b4:6a:b5:67:75:
         54:53:91:be:a4:e3:52:68:a9:8f:1a:73:e7:64:e6:90:a0:d3:
         01:4c:60:18:55:44:88:ae:a1:e9:7f:51:d7:46:a9:ac:a1:42:
         7b:73:ba:d4:c1:b1:1c:f4:4c:26:bd:0c:d8:61:b7:fd:b4:14:
         da:8a:20:7d:e0:67:64:6c:5b:ae:cb:eb:76:d6:d7:7f:bc:21:
         39:b4:99:88:39:84:e5:bc:70:49:bd:c7:58:04:3a:0f:a2:82:
         e5:df:da:34:69:30:97:32:3c:73:76:33:42:6d:28:d0:3b:6f:
         fe:e2:30:55:7f:c1:1d:f9:76:43:e4:79:20:09:b0:45:6b:45:
         d5:2d:4d:e2:f9:4b:26:da:e2:18:4d:68:de:7e:b9:f2:58:cc:
         24:ba:d0:5d:c3:5c:1e:86:a9:9e:4b:13:fc:cc:5d:34:90:38:
         05:da:48:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:17:39 2024 by rpki-client on console-ams.rpki-client.org