Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa
File:                     3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (raw, json)
Hash identifier:          gTf7HVctkL73B5LKelOzjPmQekBgYxan1Jgz5t5ugDs=
Subject key identifier:   B0:EE:19:32:8D:5D:A8:54:B5:6F:92:D1:2A:49:FA:02:1E:D5:B1:7D
Certificate issuer:       /CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30
Certificate serial:       7DBD57EAF6C1BCA79FAAF71F471AA4EBD7C50968
Authority key identifier: B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa
Signing time:             Fri 12 Jan 2024 03:02:44 +0000
ROA not before:           Fri 12 Jan 2024 02:57:44 +0000
ROA not after:            Fri 10 Jan 2025 03:02:44 +0000
asID:                     151503
IP address blocks:        103.215.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl
                          rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:bd:57:ea:f6:c1:bc:a7:9f:aa:f7:1f:47:1a:a4:eb:d7:c5:09:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30
        Validity
            Not Before: Jan 12 02:57:44 2024 GMT
            Not After : Jan 10 03:02:44 2025 GMT
        Subject: CN=B0EE19328D5DA854B56F92D12A49FA021ED5B17D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:04:74:c6:79:58:fc:27:63:13:57:e5:85:
                    e5:0f:56:f4:59:26:ce:6a:e2:bb:22:cb:cf:ef:c9:
                    60:87:cc:87:b8:13:94:71:d0:c0:09:9c:3f:35:5c:
                    b9:de:7f:50:c1:d3:a6:e3:4e:8e:e8:ca:a5:8d:76:
                    80:d4:85:60:29:87:41:f9:98:a2:2c:ae:db:e8:dd:
                    54:85:43:28:6a:a9:03:97:74:4f:94:f7:73:02:da:
                    7b:49:56:db:f8:97:ec:a2:a2:aa:87:68:7f:0a:f9:
                    d2:01:da:ba:c0:9e:2f:96:7c:81:a9:b2:1f:34:f7:
                    e0:7a:e8:96:e1:e8:e9:fe:65:af:cf:be:e7:fb:fa:
                    18:df:f9:47:00:e2:1c:3c:9e:82:99:10:67:7b:5d:
                    d2:5f:f7:e1:07:2b:04:2f:5a:5b:ee:24:2c:cc:c3:
                    89:7d:4a:8c:49:d0:a5:2c:23:9c:81:18:41:71:38:
                    7b:e7:f2:5b:ae:b5:21:53:10:27:7a:bd:ff:17:75:
                    6e:1d:59:87:82:d0:00:68:29:a0:49:21:14:e3:6f:
                    31:7a:fd:27:b5:ae:d6:04:0c:e1:ac:d9:a0:10:ee:
                    5c:36:9b:71:e3:85:28:90:7e:f7:42:df:ff:fa:5b:
                    4b:72:a9:8d:9e:54:dd:f1:49:f5:27:25:f6:df:03:
                    3a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EE:19:32:8D:5D:A8:54:B5:6F:92:D1:2A:49:FA:02:1E:D5:B1:7D
            X509v3 Authority Key Identifier:
                keyid:B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:42:4b:69:c4:b2:56:6b:b8:08:46:17:aa:38:56:ea:02:73:
         9c:d6:02:40:32:db:95:0b:b3:ac:f0:ad:65:42:ec:69:0a:cc:
         c6:40:16:3e:ca:66:c6:d2:c6:de:01:23:d0:5e:49:e4:82:6b:
         86:83:cd:cb:26:45:74:e3:b9:43:d8:8c:d6:46:9c:63:9b:9e:
         cb:08:4f:6c:ea:4f:38:4e:43:14:d3:a8:2a:b2:90:57:2e:06:
         5c:e4:2b:c1:47:40:80:a8:ad:01:ae:01:d7:7f:7c:1b:5d:ca:
         fa:a2:cf:ca:c6:8e:99:e5:59:86:82:42:05:eb:99:cc:b2:7f:
         42:5d:33:75:39:e8:46:99:80:09:15:2b:fd:24:fc:9b:77:90:
         cb:70:5d:e2:81:5a:46:1f:b5:47:41:3c:20:2b:51:fe:be:a6:
         82:3e:c7:62:15:07:e7:be:33:b1:52:bf:10:d3:cf:df:93:e8:
         de:ff:92:99:96:da:26:49:34:6d:14:e6:67:5e:8f:19:af:69:
         c6:0c:a2:d2:19:d4:3d:34:e7:b6:a3:d1:d3:8b:85:80:c5:ce:
         a3:69:7b:cc:39:f6:6e:dd:ba:23:de:21:ea:5c:ef:e0:f6:e0:
         64:6d:af:ba:f5:d8:40:31:9f:a5:77:96:f8:38:f6:c6:bc:5c:
         26:2d:c5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:44:21 2024 by rpki-client on console-fra.rpki-client.org