Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e3235312e34342e302f32342d3234203d3e20313331373735.roa
File:                     3130332e3235312e34342e302f32342d3234203d3e20313331373735.roa (raw, json)
Hash identifier:          84PIRcllwkJjFI3tBIGUUMmGWZ+GTkMgIOHtfLCmjiU=
Subject key identifier:   48:B6:87:59:DB:FB:A5:9B:BD:9E:1A:EA:B9:63:B4:66:11:B5:89:6D
Certificate issuer:       /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial:       30C7F97F9D167A114D3A8C6FD90C888C53D87C5D
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e3235312e34342e302f32342d3234203d3e20313331373735.roa
Signing time:             Mon 31 Jul 2023 00:05:39 +0000
ROA not before:           Mon 31 Jul 2023 00:00:39 +0000
ROA not after:            Mon 29 Jul 2024 00:05:39 +0000
asID:                     131775
IP address blocks:        103.251.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
                          rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 05:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c7:f9:7f:9d:16:7a:11:4d:3a:8c:6f:d9:0c:88:8c:53:d8:7c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
        Validity
            Not Before: Jul 31 00:00:39 2023 GMT
            Not After : Jul 29 00:05:39 2024 GMT
        Subject: CN=48B68759DBFBA59BBD9E1AEAB963B46611B5896D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:74:30:63:d0:0f:0b:12:c9:f6:40:d2:0e:34:
                    e2:35:9e:96:9a:a9:02:52:cd:08:2a:40:22:e3:d0:
                    fb:08:e5:60:86:73:f8:b2:90:15:73:27:79:e3:a0:
                    a1:2a:17:45:14:34:38:07:9d:7e:8b:7b:a7:22:53:
                    a5:a3:12:ca:f2:60:ce:cc:91:ea:49:c1:68:be:0d:
                    5f:ed:7e:a4:74:49:30:9f:52:d5:2c:58:92:e2:3e:
                    9d:72:bc:c7:da:4b:2a:70:d7:20:8e:f7:b5:77:06:
                    bb:24:b4:0e:3a:15:b7:b4:4b:bd:0a:a8:7b:42:22:
                    d5:35:08:a0:21:2c:60:82:5e:8e:f2:4e:c4:92:11:
                    d2:09:ad:e0:c3:8e:fa:57:26:81:34:65:dd:2b:d4:
                    5c:eb:87:87:06:1a:61:4e:18:d3:bb:9f:63:84:e8:
                    d2:5f:62:25:42:54:d9:ec:33:d3:c8:af:31:6b:d8:
                    5d:97:18:02:47:d9:e5:cd:4c:24:f4:72:95:42:a0:
                    59:bc:26:1f:18:0f:56:18:b6:d8:a7:42:fa:ea:79:
                    78:c9:ae:2b:50:f4:8a:ac:18:85:f5:08:b7:09:0b:
                    4c:2f:79:8d:46:8e:d3:48:ed:16:d9:e5:31:e8:7b:
                    4a:83:e9:48:6a:ec:ef:09:94:0d:bb:ae:5a:64:68:
                    3b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B6:87:59:DB:FB:A5:9B:BD:9E:1A:EA:B9:63:B4:66:11:B5:89:6D
            X509v3 Authority Key Identifier:
                keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e3235312e34342e302f32342d3234203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:f9:a7:f1:fc:1c:e8:be:84:5b:3f:98:2b:77:37:25:f6:fb:
         e6:17:38:db:f6:c0:11:81:21:8e:c0:8f:23:49:64:11:1e:dc:
         a6:f1:a5:95:c4:b0:c3:d9:af:d4:97:a8:42:38:b6:9d:ad:ab:
         ed:52:09:2e:62:09:df:a6:4a:b3:06:a9:10:d7:e3:61:1b:ba:
         b7:27:88:f8:81:13:a7:1f:dc:15:93:29:41:81:38:99:58:68:
         4b:1f:2d:dd:66:50:65:9a:01:25:15:da:e1:e0:15:5c:ed:4e:
         84:21:6b:d4:54:c7:15:e9:72:d0:7e:5b:34:33:ce:c4:11:3e:
         f2:9a:2f:aa:48:35:ff:92:b1:95:4a:49:21:21:73:b0:e8:e9:
         f0:ea:e9:3d:11:24:55:72:a9:87:8f:91:5e:ce:06:87:90:64:
         4d:51:51:ef:70:27:0f:8f:44:25:d2:0c:05:6f:4e:90:02:cb:
         f6:4a:ec:06:b3:b4:08:61:da:ba:95:1f:ac:f6:c0:13:df:b6:
         a1:43:a4:f2:2f:be:40:95:ec:60:f3:00:be:25:13:43:c1:75:
         82:5f:62:48:3f:36:33:d3:7d:04:21:2d:c9:5c:26:ad:b4:a6:
         d0:bd:a0:20:c9:a7:e4:f6:1e:ab:97:59:fe:d4:74:ce:e3:4d:
         be:4d:45:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 05:56:56 2024 by rpki-client on console-fra.rpki-client.org