Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa
File:                     3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (raw, json)
Hash identifier:          T0S3XWw9Baqkmd7KJ7AtPtxo+F+4ds2xVtqReHnZLaQ=
Subject key identifier:   B1:6F:E1:52:27:39:F4:B3:E3:4E:63:AE:24:59:64:7C:1C:E3:CB:AB
Certificate issuer:       /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
Certificate serial:       62358213F6615AC77E39860501DE1BB5AA9DA248
Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa
Signing time:             Mon 15 Apr 2024 03:00:01 +0000
ROA not before:           Mon 15 Apr 2024 02:55:01 +0000
ROA not after:            Mon 14 Apr 2025 03:00:01 +0000
asID:                     63488
IP address blocks:        103.233.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl
                          rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:35:82:13:f6:61:5a:c7:7e:39:86:05:01:de:1b:b5:aa:9d:a2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
        Validity
            Not Before: Apr 15 02:55:01 2024 GMT
            Not After : Apr 14 03:00:01 2025 GMT
        Subject: CN=B16FE1522739F4B3E34E63AE2459647C1CE3CBAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:87:88:7b:22:05:a8:90:0f:35:5f:e9:45:ab:
                    50:64:7c:60:23:c7:28:07:cf:72:0b:9d:b8:c8:61:
                    0b:db:88:0c:00:08:a5:5a:ae:a0:60:73:33:1b:3b:
                    ed:82:ac:fc:b4:a9:2e:d8:f0:6b:cb:d8:ff:95:d6:
                    af:97:af:be:94:44:cc:65:5c:de:19:44:15:5b:d2:
                    5a:ba:46:e6:b8:ed:9b:8e:b0:1f:a9:a0:ad:68:04:
                    0e:50:13:e6:79:9a:8c:64:25:2a:62:82:36:97:53:
                    4a:8a:1e:bd:ea:57:59:70:4e:91:aa:71:3b:0b:c1:
                    d7:82:b4:a8:ae:7e:ef:a8:da:f6:12:c2:a3:23:4a:
                    a7:36:c8:b3:6f:e4:8c:ad:db:33:dd:f8:43:20:27:
                    42:cb:30:b8:0d:98:66:dc:12:66:01:69:d1:65:ab:
                    e7:b2:a7:88:63:a1:0c:d3:02:f5:bc:81:7c:48:eb:
                    60:fb:24:dc:91:63:69:13:af:97:d8:86:c3:ab:cf:
                    5a:0d:02:56:50:01:cf:86:b0:76:d4:c9:95:24:0d:
                    90:d5:8e:fb:65:6d:33:4e:00:7a:fc:f8:23:8e:87:
                    1c:6b:d1:15:a7:2f:2d:01:cd:64:42:69:b0:f1:3f:
                    c4:5e:d6:1c:af:de:51:77:93:66:3e:6f:5f:d1:ea:
                    55:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6F:E1:52:27:39:F4:B3:E3:4E:63:AE:24:59:64:7C:1C:E3:CB:AB
            X509v3 Authority Key Identifier:
                keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:4b:4f:fc:01:9d:8a:23:64:19:68:99:fc:9c:23:28:b1:3d:
         1c:6f:c4:eb:1b:58:d8:9d:44:82:2d:8a:82:66:f2:ce:51:5d:
         60:de:9c:1c:4f:c6:df:62:49:24:ab:99:f0:ef:98:70:e6:0e:
         46:c3:43:d3:10:55:58:60:f9:63:5e:d0:92:db:c2:79:b7:bc:
         f3:13:a4:e4:84:9b:44:a1:75:eb:53:a8:1a:21:6d:a8:39:0e:
         d3:ee:31:3a:24:c2:6c:f8:f1:4c:6d:38:57:39:2e:e1:69:2f:
         73:62:63:2e:ae:33:14:f5:7c:11:77:a6:60:9b:6e:af:c5:c5:
         13:0c:e1:3e:8c:4e:29:eb:3d:6a:67:03:ff:d0:49:a6:1a:ed:
         6d:51:29:c5:90:ae:0a:94:86:d2:85:89:86:d7:72:27:43:f9:
         81:14:09:58:64:4f:fb:19:e5:a5:ea:6b:d7:f7:3f:09:f3:76:
         f2:59:3b:10:ad:0c:ae:0b:f3:0c:af:84:ca:e9:17:40:f2:da:
         dd:f9:67:37:ce:16:f3:98:cd:f3:dd:c1:29:28:97:0e:75:dc:
         aa:1c:e8:e9:ec:69:91:cd:0f:20:15:19:eb:b1:e8:da:d4:43:
         c2:e1:9b:62:f1:e6:fc:8f:4f:5e:62:33:aa:18:94:bf:76:84:
         ca:d3:b1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:32 2024 by rpki-client on console-ams.rpki-client.org