Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31302e302f32342d3234203d3e203539323733.roa
File:                     3130332e34372e31302e302f32342d3234203d3e203539323733.roa (raw, json)
Hash identifier:          dFHjmVg8iByyDE0AoUz/kaQtWk08pnPg8xzNojTvhm0=
Subject key identifier:   2A:41:62:A1:2C:D5:88:DD:85:45:C7:97:64:E2:4F:D6:D6:0F:44:2E
Certificate issuer:       /CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27
Certificate serial:       1CC15C63D10BE53FEF35C054BE068BD771EB9392
Authority key identifier: E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31302e302f32342d3234203d3e203539323733.roa
Signing time:             Fri 18 Oct 2024 17:00:01 +0000
ROA not before:           Fri 18 Oct 2024 16:55:01 +0000
ROA not after:            Fri 17 Oct 2025 17:00:01 +0000
asID:                     59273
IP address blocks:        103.47.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl
                          rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 18 Feb 2025 03:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c1:5c:63:d1:0b:e5:3f:ef:35:c0:54:be:06:8b:d7:71:eb:93:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27
        Validity
            Not Before: Oct 18 16:55:01 2024 GMT
            Not After : Oct 17 17:00:01 2025 GMT
        Subject: CN=2A4162A12CD588DD8545C79764E24FD6D60F442E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1e:7a:cb:8e:81:a1:9f:ce:e1:c1:dd:15:14:
                    82:3a:c4:eb:48:63:42:62:c3:12:7a:bb:fd:6c:b6:
                    3b:75:cc:4a:2a:63:f8:2c:16:2d:fd:42:2d:68:dd:
                    f3:48:66:62:2c:fe:8a:f6:2d:46:db:c7:7d:93:cb:
                    c7:2a:a7:44:8a:c5:3e:8c:3c:0d:7d:a1:d8:2c:8f:
                    5b:48:fc:cf:06:ef:f4:07:ed:00:bb:f1:eb:3a:62:
                    66:02:e5:d7:ca:4b:6c:4f:e1:61:c7:e8:e6:c1:6e:
                    00:5c:f6:a3:75:f0:6a:60:d1:d2:e2:d1:9b:fb:83:
                    ca:c3:5c:ac:e3:b5:d0:fd:b1:75:cd:99:89:56:6d:
                    15:bd:63:fe:47:b8:a1:9b:4e:f2:29:77:75:f3:31:
                    8d:c6:cb:b1:39:f8:88:41:40:c4:83:84:3e:91:dd:
                    be:ee:ec:00:70:f3:06:a0:00:a3:45:7f:5b:fa:15:
                    aa:9c:07:b2:28:28:7f:bb:48:86:67:19:72:5c:4f:
                    7b:86:e7:3c:51:02:13:4a:86:2d:64:cc:6b:6b:66:
                    02:02:d0:a4:01:5a:e8:87:82:6c:23:cd:0c:9b:c9:
                    3c:48:05:e2:fd:65:99:83:79:71:70:c4:2c:1d:f1:
                    8e:4f:4b:37:fd:7a:64:63:0d:97:80:7b:0d:e3:81:
                    dd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:41:62:A1:2C:D5:88:DD:85:45:C7:97:64:E2:4F:D6:D6:0F:44:2E
            X509v3 Authority Key Identifier:
                keyid:E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31302e302f32342d3234203d3e203539323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:e4:23:f6:1d:2d:38:a6:cf:be:e4:6b:39:73:99:32:f7:6f:
         45:e7:da:cc:58:7d:29:8e:26:ac:48:22:a5:55:a0:3d:d8:eb:
         57:48:51:b7:9a:7b:0d:07:d3:81:ae:cc:92:24:d8:da:d3:d2:
         04:45:8b:e6:fb:57:28:13:6f:f5:ea:7f:58:55:4e:3f:c7:40:
         aa:65:d7:7e:82:66:70:de:e1:bb:09:4a:09:f7:3f:b1:7a:00:
         c8:e7:99:6d:94:dc:ce:a8:39:7e:19:f6:f7:2c:d1:e6:04:0f:
         a7:f3:8b:70:d1:ed:20:4e:1c:4c:8f:e6:6b:87:17:9f:c9:f5:
         52:27:c1:c4:2a:a0:f7:b5:64:7d:45:a6:ae:4d:d7:d9:48:bb:
         72:8d:f0:bb:52:44:d2:3c:12:21:99:17:fd:f3:93:7b:32:ca:
         15:c8:04:9a:e6:11:92:19:27:bc:0c:97:68:65:89:00:0c:f5:
         4b:ee:d8:e3:40:1e:35:23:19:83:58:ae:60:3a:03:c4:f3:cc:
         1c:ee:78:ec:c2:6f:20:55:94:a0:ac:17:80:49:3d:97:1d:4a:
         ae:cc:37:55:7c:e5:ff:cc:b1:7c:c7:5f:32:dc:16:6e:be:8a:
         7d:0a:12:4d:a3:c1:7d:7d:40:06:4f:f1:13:6b:6d:99:cc:e8:
         d0:3a:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:38 2025 by rpki-client