Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/3130332e35332e3138342e302f32332d3234203d3e203633383734.roa
File:                     3130332e35332e3138342e302f32332d3234203d3e203633383734.roa (raw, json)
Hash identifier:          sc3l8XWA46yVcKy7i7VW+dId2t2AmaozSEsADMIdfW4=
Subject key identifier:   4F:D3:6A:84:89:87:33:66:57:C2:53:2B:04:19:1E:D6:36:D2:A5:5F
Certificate issuer:       /CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C
Certificate serial:       0B1F2DED766A82A0CA82649D4052ED11E067B929
Authority key identifier: A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/3130332e35332e3138342e302f32332d3234203d3e203633383734.roa
Signing time:             Thu 01 Aug 2024 06:00:00 +0000
ROA not before:           Thu 01 Aug 2024 05:55:00 +0000
ROA not after:            Thu 31 Jul 2025 06:00:00 +0000
asID:                     63874
IP address blocks:        103.53.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl
                          rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Feb 2025 13:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1f:2d:ed:76:6a:82:a0:ca:82:64:9d:40:52:ed:11:e0:67:b9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C
        Validity
            Not Before: Aug  1 05:55:00 2024 GMT
            Not After : Jul 31 06:00:00 2025 GMT
        Subject: CN=4FD36A848987336657C2532B04191ED636D2A55F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:9a:82:5b:a3:e7:de:b0:95:a0:25:78:8b:
                    e3:18:cf:3b:8e:61:90:62:ee:a0:ce:e7:45:38:d1:
                    d9:1b:97:32:23:f0:49:96:a8:a2:05:df:41:03:0a:
                    a8:24:e7:f5:6f:90:54:3d:97:ac:e5:f9:92:13:15:
                    b8:28:6b:60:5d:58:f0:e5:58:91:74:57:7a:51:84:
                    50:eb:db:eb:76:52:65:49:fb:3a:f3:a8:9b:70:8f:
                    6a:42:2b:b5:13:4e:91:0e:f1:78:03:ae:6c:e0:e5:
                    85:31:53:c7:83:6a:f1:51:1b:9f:c3:05:89:d8:d0:
                    7c:28:57:1b:ef:3a:65:06:74:25:54:22:0f:8e:b3:
                    a7:5c:7f:66:2c:a5:bd:c4:e6:a0:a6:8d:5a:9a:8a:
                    88:62:5a:2c:36:72:a7:95:6b:e0:cf:c2:ee:af:5b:
                    da:4e:8c:a5:d3:f1:14:29:e2:29:93:78:e2:f1:f3:
                    7e:34:53:53:02:d1:10:c2:3a:73:82:bf:90:0f:a5:
                    e8:f0:b9:60:80:59:41:f2:20:00:62:81:92:f5:f3:
                    59:8d:41:e5:07:58:bb:0a:53:59:b1:5c:23:b7:34:
                    91:e5:c9:08:a5:62:2a:67:03:dd:c0:73:dd:cd:7a:
                    bb:89:72:93:07:2c:4e:c2:aa:1b:7a:b2:73:39:6d:
                    e1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D3:6A:84:89:87:33:66:57:C2:53:2B:04:19:1E:D6:36:D2:A5:5F
            X509v3 Authority Key Identifier:
                keyid:A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/3130332e35332e3138342e302f32332d3234203d3e203633383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:03:ba:d3:27:95:04:a6:61:70:39:52:11:5a:8e:2e:4d:8c:
         06:b4:82:c4:96:d9:f4:fe:4c:99:e5:12:ec:18:9e:9e:a0:f4:
         a7:f8:49:7f:70:99:f7:ae:77:c5:f4:fa:18:62:f5:e4:08:1c:
         7e:1b:4a:a6:ae:76:22:01:37:11:d0:02:b7:3b:13:ca:8c:0e:
         66:4c:68:20:a3:dc:88:f0:67:73:0b:d5:51:15:f0:fb:06:ab:
         fb:63:e8:97:b4:e2:7f:fb:a5:0a:c8:fa:92:23:29:b8:b9:5c:
         bc:0c:a2:44:d2:bc:bc:77:c9:40:81:d0:64:53:61:39:45:ef:
         6e:04:eb:98:cc:39:db:69:fe:6c:81:bb:2e:dc:da:ce:c3:73:
         f8:ba:8a:58:2a:30:fb:cf:5d:26:03:28:69:25:7d:11:1a:20:
         92:29:a2:b4:2f:1c:3d:4a:65:08:fa:04:cd:4f:f9:04:0d:a9:
         0a:40:11:c4:c9:77:f7:c2:e6:89:aa:1e:9b:0a:98:df:03:51:
         d3:68:c0:60:cd:96:01:bb:41:a0:6d:6f:af:a9:10:26:3a:d6:
         47:99:d4:19:0c:0a:65:0f:4c:b2:71:28:53:8b:3c:96:10:26:
         2f:e1:51:1f:85:1e:13:65:98:60:dd:29:f8:30:af:ff:26:29:
         df:09:39:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:24 2025 by rpki-client