Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa
File:                     3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa (raw, json)
Hash identifier:          +ZYF26FYgd6As/TBjEjLj61VAfJyLdpBGHDaayh6uJ8=
Subject key identifier:   4D:F9:6B:39:E5:12:3C:0E:1C:16:B9:2B:C7:EC:BD:C5:49:D0:7C:49
Certificate issuer:       /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial:       5E0809D8A9482630D0563A316A7ECA2AE62485E4
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa
Signing time:             Mon 31 Jul 2023 00:05:38 +0000
ROA not before:           Mon 31 Jul 2023 00:00:38 +0000
ROA not after:            Mon 29 Jul 2024 00:05:38 +0000
asID:                     131775
IP address blocks:        103.251.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
                          rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:08:09:d8:a9:48:26:30:d0:56:3a:31:6a:7e:ca:2a:e6:24:85:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
        Validity
            Not Before: Jul 31 00:00:38 2023 GMT
            Not After : Jul 29 00:05:38 2024 GMT
        Subject: CN=4DF96B39E5123C0E1C16B92BC7ECBDC549D07C49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:38:e6:05:bf:9b:ed:7a:e0:d4:5b:df:bd:
                    a9:d2:ce:a6:c2:8f:39:6f:d3:8a:96:3d:28:f3:13:
                    f3:4d:fd:2a:04:6d:68:5e:6b:b1:29:c6:aa:7d:cc:
                    fc:0b:18:ae:fb:80:b4:1f:62:85:79:c0:cf:79:81:
                    74:4b:10:1b:dd:f4:0f:c7:71:ca:4d:89:6c:ac:ff:
                    80:89:ca:a6:65:c8:a6:9d:27:3c:27:8a:5b:a3:e2:
                    f3:b7:61:f2:2f:5c:94:7c:b5:ed:7d:67:66:56:68:
                    ae:e9:72:db:ac:01:ce:d1:92:63:af:30:56:77:b3:
                    4b:84:c9:61:ee:63:59:82:bf:02:e0:c4:f2:87:af:
                    87:33:be:78:36:c1:d7:e8:5b:96:06:ed:fa:20:c9:
                    18:b0:ff:24:2b:46:7f:8d:8f:94:46:ba:ab:54:67:
                    6d:a2:5c:d1:e9:dc:7f:8e:dd:42:cd:28:72:d9:3a:
                    dc:0d:6b:f9:46:a7:72:2b:72:c1:63:a5:5c:21:f1:
                    20:0e:3a:b4:24:cc:3b:b6:ad:60:c6:1a:16:94:7d:
                    21:4c:46:6e:28:17:47:c8:19:42:0b:63:ee:d3:8e:
                    c9:5e:50:f7:36:6e:b4:cf:6c:93:7a:be:77:0a:68:
                    47:e2:1a:7c:80:1f:5c:1a:20:f7:c2:69:fa:55:4c:
                    d3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F9:6B:39:E5:12:3C:0E:1C:16:B9:2B:C7:EC:BD:C5:49:D0:7C:49
            X509v3 Authority Key Identifier:
                keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:17:f4:67:fa:5b:21:ff:3f:d2:d8:0c:4b:37:5b:32:8e:0d:
         ae:91:7d:f8:15:ba:cd:a0:66:8a:18:36:6f:c0:49:c5:02:48:
         2e:21:8c:da:d8:6e:4c:79:fd:ef:b9:9a:e8:dc:aa:80:e3:7f:
         ac:68:8c:d2:a2:80:20:3e:23:d0:e4:b6:20:c8:ab:3e:f9:f6:
         1f:c7:9d:c1:2c:5c:18:39:22:23:6d:bc:80:71:f5:f4:6b:f8:
         4f:40:e1:d7:86:7b:4d:ad:23:d0:ac:a6:c3:6d:02:3c:21:69:
         28:6b:19:a0:11:9a:b3:f5:94:29:69:86:20:c2:03:03:88:88:
         c4:63:10:ca:83:68:0c:65:33:8a:d5:f6:7e:ee:8c:a4:49:52:
         7c:64:f7:dd:fc:5f:75:ed:4f:aa:ad:41:eb:d4:a8:56:b2:9a:
         b6:ca:b2:38:78:17:f9:02:d4:d1:ba:13:f6:63:b8:b8:71:cc:
         a4:7b:a9:21:c5:d6:ab:2c:c2:b4:6e:bd:61:19:9b:fa:90:3b:
         bc:a2:af:1b:0d:5f:d2:e8:a4:d5:70:fa:48:fa:23:f3:8e:4b:
         42:e0:e4:68:5f:ba:44:56:37:32:93:f6:aa:5f:4b:01:a0:13:
         d7:cf:f5:99:40:b2:70:b1:e3:7c:43:ed:c8:e1:ce:44:8e:33:
         e5:2c:fb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:27:18 2024 by rpki-client on console-fra.rpki-client.org