Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34372e302f32342d3234203d3e2039333431.roa
File:                     3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          ph3uYTlFMX1BFRHHGEZlKMgJ6csPlVRgtyfF036CKIk=
Subject key identifier:   49:85:2A:CC:D8:95:07:72:62:39:8F:AC:EE:C6:0C:25:1E:17:04:66
Certificate issuer:       /CN=5C7240CA135C93835F95A8E1F3526942D3214EC2
Certificate serial:       17A2883F048A9D550294FC77FFEAC5290B4146C2
Authority key identifier: 5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34372e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 08 May 2024 06:00:00 +0000
ROA not before:           Wed 08 May 2024 05:55:00 +0000
ROA not after:            Wed 07 May 2025 06:00:00 +0000
asID:                     9341
IP address blocks:        103.190.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl
                          rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 19:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a2:88:3f:04:8a:9d:55:02:94:fc:77:ff:ea:c5:29:0b:41:46:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C7240CA135C93835F95A8E1F3526942D3214EC2
        Validity
            Not Before: May  8 05:55:00 2024 GMT
            Not After : May  7 06:00:00 2025 GMT
        Subject: CN=49852ACCD895077262398FACEEC60C251E170466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:93:9f:5e:8d:15:51:da:56:2f:c4:4a:18:11:
                    2b:67:10:c9:e3:4f:e8:ce:c2:cb:af:0b:ff:bc:a4:
                    34:45:fc:f2:80:41:c3:cd:24:16:3c:97:26:fd:a1:
                    98:2c:60:85:6b:59:36:77:4b:f8:7a:11:a4:d7:d4:
                    2f:c6:56:e9:7b:8f:7a:e8:93:1e:d6:0d:08:76:c2:
                    80:11:f1:a1:61:87:de:9f:58:f5:01:1b:71:24:1e:
                    df:5d:62:e8:04:a1:a5:98:66:05:56:08:22:80:33:
                    23:35:54:7f:c2:61:30:42:95:1c:a9:9f:a6:9b:32:
                    fa:ef:d0:fc:49:7d:70:14:e7:02:c7:e4:5d:16:14:
                    61:91:83:05:11:af:d4:86:b4:21:c8:e0:be:82:d9:
                    ae:87:72:af:53:25:62:74:3a:65:09:c1:0c:5d:28:
                    79:b4:49:2e:2e:f5:d5:7b:70:83:7b:3d:4c:ce:00:
                    fb:c7:28:5e:9f:01:77:e8:86:0a:5e:f3:bc:39:cb:
                    71:b6:47:97:f4:f5:33:ff:b0:04:94:8b:35:3a:29:
                    7e:15:fc:92:0e:d3:52:93:82:52:45:c3:c4:b1:2d:
                    df:f2:93:ed:60:53:76:92:69:4c:a8:3d:62:03:24:
                    28:07:5b:63:7d:1a:d7:19:ab:56:9b:b1:ea:c0:5d:
                    20:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:85:2A:CC:D8:95:07:72:62:39:8F:AC:EE:C6:0C:25:1E:17:04:66
            X509v3 Authority Key Identifier:
                keyid:5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34372e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:d2:08:10:ba:6d:a3:42:08:19:a7:43:2e:54:1c:00:31:37:
         69:3f:bc:68:1a:32:f2:09:2b:0d:51:c2:f2:60:90:77:4f:71:
         34:45:1c:b4:c4:b1:c2:a4:ee:09:48:67:7f:46:e3:3d:e1:ee:
         31:73:50:4c:6f:07:9f:28:36:d3:1e:04:0c:68:d1:f3:3c:4b:
         84:67:91:f0:07:60:96:40:ce:cb:bd:cb:dc:67:1a:97:87:b4:
         05:95:a8:13:f1:41:74:3b:72:da:e7:5e:a9:b9:3e:92:95:8e:
         13:4c:1a:32:ff:c5:36:a0:c8:04:7b:27:6f:a8:66:0e:93:d6:
         fd:8f:56:70:e3:8d:2b:2d:d0:bf:6d:6d:f1:83:6f:81:ea:38:
         26:70:10:eb:1b:cf:0f:20:19:d8:02:6a:5f:21:16:a9:9d:80:
         3e:5c:af:f3:f2:3f:e7:e2:82:4f:fd:87:8d:e7:ec:7a:0b:b6:
         8a:3e:54:f4:3e:f2:08:4d:c3:06:b4:22:87:ea:5e:fe:a7:30:
         18:c6:bf:89:fc:90:b2:89:64:b5:c0:69:66:cb:70:2a:a6:9c:
         ff:32:e0:7d:26:ab:6e:a3:b1:fa:1b:dc:b0:f1:e3:a5:cf:a0:
         cc:3e:d3:b4:0e:33:e4:f3:16:ee:f7:be:83:09:32:eb:99:1a:
         1c:e7:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:50 2024 by rpki-client on console-fra.rpki-client.org