Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e352e302f32342d3234203d3e20313332363639.roa
File:                     3130332e3131322e352e302f32342d3234203d3e20313332363639.roa (raw, json)
Hash identifier:          AUCUlj1/SmwhkZb5V1LnSJybxbo1E4CWcWKHW852STI=
Subject key identifier:   A0:62:E6:B1:CD:05:61:2F:7F:D1:64:24:C5:3C:9B:0E:4F:93:89:FC
Certificate issuer:       /CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853
Certificate serial:       4858EB219D05EC51A760F708A72A0F7C660076CB
Authority key identifier: 0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e352e302f32342d3234203d3e20313332363639.roa
Signing time:             Tue 26 Mar 2024 09:00:00 +0000
ROA not before:           Tue 26 Mar 2024 08:55:00 +0000
ROA not after:            Tue 25 Mar 2025 09:00:00 +0000
asID:                     132669
IP address blocks:        103.112.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl
                          rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:58:eb:21:9d:05:ec:51:a7:60:f7:08:a7:2a:0f:7c:66:00:76:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853
        Validity
            Not Before: Mar 26 08:55:00 2024 GMT
            Not After : Mar 25 09:00:00 2025 GMT
        Subject: CN=A062E6B1CD05612F7FD16424C53C9B0E4F9389FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:da:38:2e:b7:55:72:86:81:d0:54:36:c2:
                    0d:fa:61:d8:ec:20:56:51:56:8e:7e:5c:4d:17:a6:
                    20:e2:33:d2:00:8c:87:ca:d2:3d:6f:80:b3:5c:32:
                    24:74:95:2f:1b:71:73:81:fe:f4:66:41:a3:74:a8:
                    63:d1:74:14:3c:a3:50:59:48:3f:38:78:2a:76:b1:
                    5c:7f:9e:47:73:c3:97:4f:ae:31:bf:d7:64:79:5a:
                    27:35:92:13:08:45:3c:dd:bc:ca:d6:24:55:3c:c2:
                    88:78:2e:01:6d:8b:63:8a:5d:3e:20:65:cd:bc:f6:
                    bb:08:78:e5:b6:5b:31:fb:83:11:7a:47:7d:6a:31:
                    34:c2:42:64:84:36:d8:46:18:1f:83:ab:83:fa:90:
                    98:8a:68:eb:3c:e8:13:68:6f:d7:20:02:16:cf:66:
                    ed:4c:dd:2f:46:7f:70:9a:dd:79:a9:75:37:d4:fe:
                    da:11:6b:50:a4:3a:4d:9d:51:14:64:c4:84:61:aa:
                    05:33:6d:dc:70:cd:1d:9d:c7:1a:19:13:d6:f8:74:
                    c6:17:0a:13:65:e9:ca:5a:d1:5a:f4:8f:ba:63:f5:
                    74:ae:3e:5f:c3:15:54:4f:9f:b8:37:0e:3c:ea:5a:
                    2e:ad:c2:6c:2e:88:77:62:2e:92:16:1c:78:20:76:
                    49:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:62:E6:B1:CD:05:61:2F:7F:D1:64:24:C5:3C:9B:0E:4F:93:89:FC
            X509v3 Authority Key Identifier:
                keyid:0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e352e302f32342d3234203d3e20313332363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:86:4f:ac:00:86:18:bc:c7:d4:70:94:4e:bb:c7:d2:38:1b:
         4d:c1:1b:59:04:92:e5:50:09:f7:5c:6e:12:01:17:4b:e7:4d:
         0d:ce:12:11:93:b2:76:20:2b:a8:1c:31:d4:2b:0f:30:92:5b:
         c8:dd:00:b6:d4:95:f0:80:ca:a6:13:f9:60:46:c0:e5:2d:f1:
         33:6d:52:5d:7b:35:a6:12:c8:92:28:e5:46:c3:3f:e6:72:27:
         45:f2:3d:5d:39:2d:8c:79:d4:59:fd:27:fe:1a:1d:42:75:8d:
         ea:ef:a0:bf:d3:f8:05:ad:7a:79:b3:82:e7:61:21:00:bf:47:
         dd:b9:ca:36:4e:c5:1f:9d:e9:75:29:38:71:b4:cb:ae:37:25:
         2a:cf:73:ef:55:ad:48:8f:31:51:e6:9d:25:1e:e2:d5:ed:74:
         00:e5:94:7d:04:ca:5c:9a:2c:84:62:3c:aa:1e:72:d9:0d:a5:
         0f:60:1f:e2:2a:ae:8a:30:9b:29:cc:4d:3a:cc:8f:b6:2c:e3:
         05:e2:e2:6e:aa:c4:97:cb:2a:d9:30:96:f8:5e:b6:d6:15:8d:
         e8:41:f7:6e:eb:e4:e9:89:ea:23:36:ff:c3:a4:09:da:f4:09:
         ae:74:2b:9a:7d:2f:4f:62:2d:d6:8a:c8:95:3d:9e:70:30:5d:
         00:17:4b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:53 2024 by rpki-client on console-fra.rpki-client.org