Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31302e302f32332d3233203d3e203539323733.roa
File:                     3130332e34372e31302e302f32332d3233203d3e203539323733.roa (raw, json)
Hash identifier:          rlKPT6Sw2+EZPDLUv/m04ksSr2kbhw7VmVT/BAYmQMM=
Subject key identifier:   18:AE:6A:0C:9D:C9:9E:84:5C:94:6B:2B:81:7A:56:7D:23:36:56:C7
Certificate issuer:       /CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27
Certificate serial:       60939954AD876A0B346AFDE76CAD88F38D65D46A
Authority key identifier: E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31302e302f32332d3233203d3e203539323733.roa
Signing time:             Fri 18 Oct 2024 18:00:01 +0000
ROA not before:           Fri 18 Oct 2024 17:55:01 +0000
ROA not after:            Fri 17 Oct 2025 18:00:01 +0000
asID:                     59273
IP address blocks:        103.47.10.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl
                          rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:93:99:54:ad:87:6a:0b:34:6a:fd:e7:6c:ad:88:f3:8d:65:d4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27
        Validity
            Not Before: Oct 18 17:55:01 2024 GMT
            Not After : Oct 17 18:00:01 2025 GMT
        Subject: CN=18AE6A0C9DC99E845C946B2B817A567D233656C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d7:25:49:a8:2a:cf:2f:99:0b:ab:41:00:98:
                    89:3d:39:7a:a0:dc:70:c1:23:b2:b7:21:fd:0b:43:
                    fe:99:5a:d8:3b:55:c6:0e:cf:5e:17:a8:62:e6:63:
                    54:7e:62:d8:30:c2:e5:bc:e9:a1:62:f7:00:20:05:
                    9d:0b:82:1c:3d:85:90:d0:97:16:b5:6f:12:10:12:
                    74:b2:0f:ad:5f:49:5e:d2:1f:6e:fd:79:4f:8b:f3:
                    3e:2d:7e:a6:b1:d4:c8:e9:9a:96:a7:e6:70:7c:7e:
                    28:00:5b:de:f8:e7:5c:02:0f:a1:f4:ca:ab:a8:8e:
                    4f:83:2d:11:fc:e4:f9:3b:10:c1:a5:16:7e:45:4d:
                    21:20:9e:88:0f:a3:66:7d:79:89:5b:14:f5:46:da:
                    0a:8f:49:d5:ce:4e:d1:5c:34:60:99:84:fb:8c:3f:
                    35:5a:f3:03:09:67:eb:92:5c:3c:a6:54:54:8c:59:
                    89:64:8c:3d:f9:62:a5:a2:7a:a7:38:39:77:4e:8b:
                    2e:7a:c0:2f:17:e0:e7:d4:11:6c:ea:ee:5c:98:a2:
                    7a:d6:0f:fb:53:4e:fb:07:80:8f:bc:31:30:66:6b:
                    21:0e:8c:62:af:c2:91:a8:ab:56:7b:41:ec:0f:10:
                    a2:4c:02:f8:45:39:88:73:03:4a:03:5b:b7:d5:6e:
                    30:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AE:6A:0C:9D:C9:9E:84:5C:94:6B:2B:81:7A:56:7D:23:36:56:C7
            X509v3 Authority Key Identifier:
                keyid:E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31302e302f32332d3233203d3e203539323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:b5:d5:75:ba:67:03:76:62:07:d1:9c:18:59:ad:1c:30:81:
         36:06:d7:56:3c:b8:12:eb:b9:39:58:8d:ae:1a:03:b0:9d:b7:
         ad:3a:41:f8:bf:6c:b2:2c:89:ba:92:10:db:c2:bd:53:60:0f:
         f5:a9:4c:66:73:0b:e4:fa:0c:34:60:8a:c5:b4:ed:7c:f5:28:
         7a:4b:19:b5:21:a1:06:d6:14:0a:d3:67:55:60:31:65:8a:1e:
         1a:6d:14:32:85:1b:7d:af:49:11:25:eb:5d:37:97:4a:cf:0f:
         77:62:df:06:2b:21:12:f6:41:74:d9:44:66:2e:7d:0b:42:8c:
         69:a4:ac:fe:0d:ef:5d:84:4a:1b:75:fe:84:b8:f8:43:8c:b9:
         06:c8:36:3e:51:ab:42:1e:6d:a0:c6:d0:ce:f1:40:87:0a:18:
         bf:3c:d2:98:d3:0b:c3:a2:bc:7e:70:01:64:e5:28:05:a4:89:
         6d:84:d7:f1:17:28:42:e7:4c:23:a0:37:20:e4:2a:86:6f:95:
         cb:ef:07:72:46:a0:02:95:ff:39:1e:24:a3:b5:6d:13:27:04:
         44:68:ea:74:a4:e9:0c:52:0d:4e:11:c9:4d:ae:5f:45:96:9b:
         d4:31:49:f9:22:18:03:cd:dd:ef:29:bf:d1:28:88:1c:4b:80:
         de:0d:1b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:34:08 2024 by rpki-client on console-fra.rpki-client.org