Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa
File:                     3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          a7PTXgKIuAxPVgmOfgSfIiexn0wfFohzIh28xEr3Sns=
Subject key identifier:   E5:2E:CE:AA:53:CC:19:CD:0D:B7:A8:DB:05:43:01:C0:EE:63:A7:A1
Certificate issuer:       /CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7
Certificate serial:       700757E5323318482CAE1F40BC95F28B3792A71B
Authority key identifier: 51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa
Signing time:             Sat 10 Aug 2024 04:00:02 +0000
ROA not before:           Sat 10 Aug 2024 03:55:02 +0000
ROA not after:            Sat 09 Aug 2025 04:00:02 +0000
asID:                     131111
IP address blocks:        103.175.44.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl
                          rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:07:57:e5:32:33:18:48:2c:ae:1f:40:bc:95:f2:8b:37:92:a7:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7
        Validity
            Not Before: Aug 10 03:55:02 2024 GMT
            Not After : Aug  9 04:00:02 2025 GMT
        Subject: CN=E52ECEAA53CC19CD0DB7A8DB054301C0EE63A7A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:7a:91:8f:8b:f4:21:3d:69:a1:0b:65:aa:
                    03:70:62:01:22:51:f9:51:e4:0e:a8:69:ff:71:b6:
                    d7:3f:4a:c3:cb:b3:33:4d:0a:08:90:fd:d8:8a:ab:
                    9c:e4:81:3d:48:da:72:ba:97:91:d8:10:5c:85:83:
                    aa:c9:e7:b9:17:4f:86:ee:fe:88:c3:2c:4d:69:b7:
                    ea:a9:84:23:13:1d:2d:5c:6c:0e:23:e9:41:c1:56:
                    e6:52:ca:5a:d7:39:9e:3d:18:64:4c:d3:2e:69:87:
                    8f:df:77:5b:45:24:c5:2b:e7:3c:3e:aa:21:b4:cb:
                    c4:98:a1:14:cb:8f:47:42:0a:4d:87:11:c8:4e:39:
                    33:67:d6:5b:e7:81:1f:99:40:3a:7e:4c:a9:d3:84:
                    0e:dc:43:ca:7a:5a:7d:26:c5:77:08:e4:53:73:c1:
                    84:93:0a:bc:13:fd:85:16:2b:21:7f:43:c3:12:be:
                    a8:99:1b:97:a5:15:61:27:0f:9c:31:39:45:94:5b:
                    e1:7b:cc:48:75:5b:a2:39:11:fe:14:d2:d3:9c:50:
                    8c:4c:88:9f:cb:2f:72:31:27:d6:54:64:d4:0c:7b:
                    13:e3:b4:5a:8c:05:42:30:a1:02:3b:e2:29:8a:05:
                    b4:fa:29:4b:31:58:d8:82:eb:d2:14:41:52:82:ba:
                    44:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2E:CE:AA:53:CC:19:CD:0D:B7:A8:DB:05:43:01:C0:EE:63:A7:A1
            X509v3 Authority Key Identifier:
                keyid:51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:0b:41:bf:f6:90:5c:2e:5e:48:6c:e9:c4:fa:4b:c8:f9:60:
         c5:e2:cb:ac:82:c1:68:45:ff:b8:b3:c8:e7:dc:48:d5:62:d2:
         8e:65:e0:93:1b:fc:1e:36:2b:83:4d:2b:4f:6b:43:89:e4:9c:
         5c:c6:bc:31:d9:f5:93:a9:b2:3e:c3:c5:2b:ca:67:2d:5d:ce:
         24:61:ac:76:a5:b4:ac:84:67:1c:9c:40:89:a3:0a:9d:98:08:
         cf:59:f5:1d:fb:40:ea:99:b2:ef:b6:a2:6f:e9:6c:bd:51:ad:
         33:bc:78:c4:86:11:63:af:87:dd:ed:5e:a2:c5:2d:0a:69:db:
         3e:7f:29:c3:c2:16:d1:09:a0:83:3f:9d:02:77:cb:1b:68:3a:
         36:7e:f8:62:ec:7f:a1:8d:ed:9e:7c:dc:d8:3c:53:3f:80:88:
         75:95:8b:91:63:bb:a5:d6:6b:8f:f8:d0:ee:52:e7:03:28:30:
         c6:68:90:d5:13:1d:38:90:53:b9:45:f8:f8:5a:86:3a:a4:fb:
         6e:7a:0a:c6:f5:71:57:41:bc:9c:14:87:31:75:2c:ce:f8:62:
         6f:b4:9b:6e:15:49:70:ba:88:f8:4b:be:7d:82:aa:e6:5d:dd:
         eb:a1:68:66:cc:44:85:fc:99:c0:52:02:9f:40:db:b2:66:e1:
         85:ec:55:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:20 2024 by rpki-client on console-fra.rpki-client.org