Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa
File:                     3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (raw, json)
Hash identifier:          yI+x3QlccThUEQyL4aGgW81et+4syWgCbrFAnQNyq/g=
Subject key identifier:   59:BE:19:08:CF:B9:8D:67:13:99:8D:D7:EB:E4:0F:A4:FB:0A:B6:1B
Certificate issuer:       /CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30
Certificate serial:       5BF7DD51235DC764EB3BB71BC447691DD229527D
Authority key identifier: B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa
Signing time:             Fri 13 Dec 2024 03:03:24 +0000
ROA not before:           Fri 13 Dec 2024 02:58:24 +0000
ROA not after:            Fri 12 Dec 2025 03:03:24 +0000
asID:                     151503
IP address blocks:        103.215.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl
                          rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Feb 2025 11:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f7:dd:51:23:5d:c7:64:eb:3b:b7:1b:c4:47:69:1d:d2:29:52:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30
        Validity
            Not Before: Dec 13 02:58:24 2024 GMT
            Not After : Dec 12 03:03:24 2025 GMT
        Subject: CN=59BE1908CFB98D6713998DD7EBE40FA4FB0AB61B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d6:d3:06:82:7b:c9:c7:fa:3e:48:ba:b1:6b:
                    bd:5a:0c:c8:41:2f:3f:78:cd:dd:d3:9c:5f:26:b1:
                    68:1e:4b:eb:5d:f3:8e:db:c3:fd:99:ca:3c:37:2e:
                    73:51:a5:09:49:f1:ee:46:31:0b:18:09:72:71:62:
                    4a:1c:5f:f2:28:fa:7d:b7:37:c8:73:c4:00:05:b1:
                    01:3f:a7:ce:a8:e4:98:f3:31:ae:d6:3e:a4:05:21:
                    9f:14:f4:81:f6:d4:ad:c1:7c:f4:ea:4b:79:14:9b:
                    86:18:c2:5b:10:48:09:91:9d:5e:cb:87:42:c2:83:
                    57:d2:34:96:0f:73:29:e8:f8:8e:17:d4:42:97:26:
                    dc:36:6c:3c:45:83:53:78:af:3a:7c:f0:dc:3f:c2:
                    19:53:99:32:ee:44:b4:e9:83:b2:e3:fe:f7:02:60:
                    f9:02:ae:e0:c6:75:29:5e:47:e5:b2:5f:31:36:12:
                    41:65:ce:e1:c9:2c:4c:52:2f:18:09:a7:fb:71:10:
                    b6:bf:f5:2a:29:e0:1d:44:23:d3:08:49:27:92:2a:
                    57:48:04:8e:f8:34:39:c2:87:fb:a6:e5:15:df:5c:
                    32:0b:e7:34:4e:40:a4:3c:83:27:55:7f:d8:44:2e:
                    61:5d:32:5f:d8:63:3a:8c:55:1f:32:97:62:f0:12:
                    1c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BE:19:08:CF:B9:8D:67:13:99:8D:D7:EB:E4:0F:A4:FB:0A:B6:1B
            X509v3 Authority Key Identifier:
                keyid:B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:bd:c2:1f:fb:ba:b3:e3:a2:bb:e8:85:63:82:85:94:aa:50:
         b2:34:29:73:34:df:cd:3f:29:23:4b:c9:5d:86:61:03:9b:1f:
         44:42:49:b0:1b:27:a8:b1:7f:ca:05:5f:a7:1f:aa:27:1b:89:
         f7:eb:65:9b:52:34:6d:f4:48:85:60:62:72:14:ba:13:b5:ae:
         92:10:64:ad:4d:32:1c:17:78:b3:66:77:d0:4f:7e:77:a5:5d:
         43:ef:02:17:de:b6:9c:26:d1:b2:9c:5b:30:87:b1:e5:6e:56:
         ef:ea:a6:ef:85:88:0d:ff:35:76:95:d5:a0:d8:ab:1a:0d:2f:
         c1:07:6a:17:7c:4b:25:14:d1:c5:47:22:56:96:05:07:83:81:
         68:75:4e:e0:e5:af:0d:99:b4:b9:08:2d:9f:5b:d6:c9:6f:1b:
         d2:7b:79:7b:53:bd:80:85:a0:cb:8c:7e:5f:1b:bc:52:49:7f:
         97:a7:71:b6:12:2f:3b:ec:19:1f:1f:be:09:00:d0:df:a3:92:
         9a:dd:d4:c5:07:f9:d0:5e:60:38:38:97:f2:dd:0f:af:58:00:
         23:f2:30:1e:41:c8:68:58:98:33:bf:c5:d2:32:b6:f9:5b:5b:
         86:43:b8:76:23:da:1d:c5:b6:98:78:7f:2a:01:6c:3e:5b:70:
         4b:26:a7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:33 2025 by rpki-client