Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34372e302f32342d3234203d3e203137393935.roa
File:                     3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier:          l/5HgKnT7J8DLMc5KXCSqh4O/akFH+dhFOMVMx/cS/M=
Subject key identifier:   75:5B:E5:3A:CE:A7:E1:64:B1:B8:74:7F:18:37:BF:1F:8F:61:EF:80
Certificate issuer:       /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799
Certificate serial:       51E44A8E5BB959614883EF5E7C991AE4E2AB13A6
Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34372e302f32342d3234203d3e203137393935.roa
Signing time:             Sun 18 Aug 2024 10:00:56 +0000
ROA not before:           Sun 18 Aug 2024 09:55:56 +0000
ROA not after:            Sun 17 Aug 2025 10:00:56 +0000
asID:                     17995
IP address blocks:        103.139.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl
                          rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Mar 2025 14:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e4:4a:8e:5b:b9:59:61:48:83:ef:5e:7c:99:1a:e4:e2:ab:13:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799
        Validity
            Not Before: Aug 18 09:55:56 2024 GMT
            Not After : Aug 17 10:00:56 2025 GMT
        Subject: CN=755BE53ACEA7E164B1B8747F1837BF1F8F61EF80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cd:b1:52:39:9b:36:e5:9b:07:75:b5:e7:d1:
                    d9:88:6f:74:6b:9b:ec:7e:d0:3a:c0:e2:12:1c:02:
                    9e:e2:07:f8:b7:a3:6c:92:7f:82:57:3e:9f:c5:06:
                    0b:f9:fc:89:c8:e9:5c:bb:36:f3:14:05:ab:95:96:
                    77:a3:1f:96:09:db:cd:e7:23:dc:5a:c5:0f:b5:58:
                    a2:cb:96:ae:e2:33:0c:d4:bd:5d:58:cd:fd:19:bc:
                    87:8a:29:e5:74:af:92:ea:66:83:8c:c5:a4:08:0a:
                    05:3f:12:d1:49:b4:8c:8a:30:c8:9a:29:a9:bd:7e:
                    b7:17:96:86:84:92:99:08:28:f3:81:ec:55:44:d2:
                    cf:06:04:7a:89:db:6b:33:d9:17:f9:11:23:4d:ad:
                    8c:41:b5:b6:48:2a:16:ef:64:35:a8:79:73:d9:24:
                    d7:cc:2c:23:25:a2:96:ed:54:f8:c7:ed:38:5b:8f:
                    d8:1d:eb:dd:ad:62:20:c0:d0:0a:ce:63:4a:2d:e5:
                    10:2f:e1:4e:ad:c6:22:ec:70:5c:f0:31:c3:19:2b:
                    bc:ce:4f:98:ca:99:ed:0c:17:ce:aa:aa:f9:4f:9e:
                    0d:33:70:d3:dc:bb:fe:e1:eb:ac:ae:0d:f7:be:cd:
                    30:e1:a7:72:9e:ce:50:72:b7:c5:1d:ed:8d:ac:21:
                    07:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5B:E5:3A:CE:A7:E1:64:B1:B8:74:7F:18:37:BF:1F:8F:61:EF:80
            X509v3 Authority Key Identifier:
                keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34372e302f32342d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:38:56:3b:c3:ec:0b:a5:d8:8b:cf:c5:ce:1b:06:05:e5:9a:
         73:bc:ac:8f:a8:07:69:ae:61:28:0a:fc:65:d4:dd:d1:bc:14:
         39:6c:2e:2a:2e:e7:15:c1:66:39:61:bd:66:ae:0a:51:40:a8:
         51:43:13:a7:eb:36:8d:25:76:cc:a5:bc:e4:15:8b:b3:e2:bc:
         c6:df:1a:cd:65:ab:44:ab:b6:4b:13:c2:eb:fc:fc:6d:f9:c9:
         3d:c1:0d:57:5f:8b:c2:09:f5:78:2a:53:43:2c:d5:b0:21:b7:
         69:84:52:4f:1f:d7:2d:f2:a8:99:4d:94:c0:fe:e8:6a:4b:c5:
         f4:d1:8e:19:a8:2f:b2:f7:fa:bb:aa:81:f8:48:8b:b5:35:f0:
         12:28:52:b2:bc:c7:2a:5b:c8:2f:92:9d:39:b7:60:47:d8:8f:
         1f:b2:da:ed:27:ad:9d:62:70:a6:8c:3f:a6:b9:21:79:95:76:
         28:11:95:12:05:e4:e3:41:16:67:d1:1c:55:da:0f:6f:19:b0:
         10:75:ae:b3:9d:99:17:90:6b:96:99:2c:4b:c9:67:43:9d:32:
         08:18:a8:b8:92:f9:cd:8f:4e:f3:36:e2:e4:27:6d:9f:cc:68:
         50:29:3f:c3:0e:52:79:5b:a3:71:6f:24:20:a0:94:20:56:0d:
         f5:89:f7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:15 2025 by rpki-client