Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa
File:                     3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (raw, json)
Hash identifier:          KY5Q38tghqbGAveqQA6JKe7i+KFoXalouHQ/ChXrWvk=
Subject key identifier:   A1:01:2F:C2:78:8E:59:0E:5A:58:B1:30:A0:CF:42:14:AA:CF:AC:FE
Certificate issuer:       /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55
Certificate serial:       493706D630D33BC268553CEAF64DCFE147A666B8
Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa
Signing time:             Sat 03 Aug 2024 14:00:00 +0000
ROA not before:           Sat 03 Aug 2024 13:55:00 +0000
ROA not after:            Sat 02 Aug 2025 14:00:00 +0000
asID:                     142327
IP address blocks:        103.168.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl
                          rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 05:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:37:06:d6:30:d3:3b:c2:68:55:3c:ea:f6:4d:cf:e1:47:a6:66:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55
        Validity
            Not Before: Aug  3 13:55:00 2024 GMT
            Not After : Aug  2 14:00:00 2025 GMT
        Subject: CN=A1012FC2788E590E5A58B130A0CF4214AACFACFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:99:b8:e8:c9:06:91:97:91:2d:d5:08:1e:9c:
                    f4:38:70:7d:3e:d0:f9:be:79:b3:8f:eb:7f:b1:e0:
                    93:09:e2:ed:85:5c:b3:d8:95:9a:ba:b6:20:2f:11:
                    fa:f9:66:0a:d3:72:4a:23:79:6c:d4:80:d1:b8:5a:
                    b9:17:3a:c0:df:c9:85:36:f2:3d:7b:10:36:5c:ef:
                    ba:e0:f3:42:88:92:ba:c8:7f:16:64:29:1c:5c:60:
                    c2:40:1c:f0:8c:59:ae:d1:d6:5f:a9:8a:d9:4b:95:
                    be:4b:89:d6:88:5a:5c:eb:7a:bf:36:5b:df:a8:20:
                    98:63:95:66:ef:6e:76:7c:c7:6a:c4:e4:6d:ce:bf:
                    7a:a5:a7:e4:7d:e8:b4:a5:e1:bf:b3:c1:49:e2:77:
                    e3:b2:d0:19:72:e7:ed:19:78:a5:78:ce:45:f2:07:
                    e3:bc:fa:25:a6:a0:f3:f7:ad:0d:23:db:3d:2f:b4:
                    44:f4:e0:7c:75:d6:0b:08:d0:76:a8:d6:97:55:99:
                    46:1b:19:e9:c5:ff:04:e9:75:2a:8f:1a:a4:31:f2:
                    a6:38:08:4e:01:a3:3d:07:11:49:e5:76:64:92:40:
                    20:a1:28:99:8f:67:1d:45:87:78:43:72:0f:0d:6e:
                    87:ed:81:6c:db:ec:51:86:a3:3e:bf:4f:b9:63:76:
                    38:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:01:2F:C2:78:8E:59:0E:5A:58:B1:30:A0:CF:42:14:AA:CF:AC:FE
            X509v3 Authority Key Identifier:
                keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:a2:7c:cb:3a:a4:e0:33:48:33:ad:a9:07:35:bb:5e:28:c4:
         21:84:a1:71:80:53:da:d9:92:20:21:4b:1b:51:32:ed:be:90:
         b3:81:3e:a1:c8:e6:d2:59:79:52:ca:ef:d9:96:d9:7f:d1:24:
         4d:b5:03:c3:bd:ae:33:2f:18:bd:c8:8f:92:6e:a0:5e:08:4f:
         fa:ef:af:1e:59:14:40:0a:53:df:0e:83:43:d8:f3:3e:bb:f8:
         37:05:d5:e6:1e:1c:3a:03:17:68:44:6e:b6:9a:fe:d3:40:73:
         1e:fb:87:49:3b:8a:af:d3:c4:52:e1:57:fc:f8:41:e8:00:37:
         86:29:a7:55:e1:db:cd:54:77:1c:53:ed:a8:48:39:7d:96:98:
         99:71:6e:1b:e4:b2:52:9e:b5:e6:1c:73:f7:67:96:13:02:fc:
         56:01:fd:88:0d:8a:3f:f5:e8:11:24:e7:78:ff:8e:9f:24:87:
         0f:0d:e5:31:ce:54:3c:ea:20:eb:92:07:e1:ea:90:7a:a4:84:
         a3:72:86:2d:66:e8:a9:71:c2:28:57:f8:ab:45:36:bb:7c:03:
         38:75:de:29:5b:1c:77:d8:d3:e0:28:4b:8c:56:48:4a:fd:c2:
         7f:da:4a:c7:0d:1f:39:10:08:d2:d6:0f:24:e5:ca:98:b5:3e:
         a2:22:be:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:00 2024 by rpki-client on console-ams.rpki-client.org