Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/3130332e3135312e33352e302f32342d3234203d3e20313430343133.roa
File:                     3130332e3135312e33352e302f32342d3234203d3e20313430343133.roa (raw, json)
Hash identifier:          9whMZyQc5kGITFDURkn08TowRIJK5F+uofFRS/O2+ck=
Subject key identifier:   6E:42:66:21:D6:16:BF:DA:4E:DC:37:B0:71:FE:13:9E:DB:6A:C2:79
Certificate issuer:       /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial:       1E4DEA1C5077BF20453D8B9C2B88E7B8DBF97712
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/3130332e3135312e33352e302f32342d3234203d3e20313430343133.roa
Signing time:             Mon 07 Oct 2024 07:02:09 +0000
ROA not before:           Mon 07 Oct 2024 06:57:09 +0000
ROA not after:            Mon 06 Oct 2025 07:02:09 +0000
asID:                     140413
IP address blocks:        103.151.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
                          rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4d:ea:1c:50:77:bf:20:45:3d:8b:9c:2b:88:e7:b8:db:f9:77:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
        Validity
            Not Before: Oct  7 06:57:09 2024 GMT
            Not After : Oct  6 07:02:09 2025 GMT
        Subject: CN=6E426621D616BFDA4EDC37B071FE139EDB6AC279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:55:05:75:28:48:7d:6c:76:8a:2b:fc:5e:
                    c5:1f:b4:d0:fa:7c:a4:16:69:a6:62:6e:c3:e5:fa:
                    78:f6:25:c0:9d:5b:3d:8c:85:1e:85:ff:6f:a1:39:
                    1b:48:ba:d6:24:5c:61:0d:63:5e:6f:9c:75:55:07:
                    36:46:a1:3b:df:0e:74:3c:3b:21:e4:6b:8b:57:0f:
                    c5:ce:2c:51:ed:1e:56:b5:d3:ad:a3:e9:07:b4:1d:
                    15:ca:ef:0e:36:7e:9c:ff:73:bd:c6:03:02:f6:8a:
                    56:f2:17:2a:63:6d:9e:8f:8b:51:11:a9:5a:7c:d5:
                    09:52:6a:dc:ca:dc:03:fc:c1:13:58:a2:a0:3a:f3:
                    42:c2:6d:30:a4:e6:2d:16:a5:da:7b:72:e8:08:e3:
                    33:37:50:4b:ca:92:41:6d:f2:35:7f:a9:6a:d2:e7:
                    59:f7:fc:bf:06:65:e0:cd:9a:fa:1a:91:48:a7:56:
                    79:39:33:11:0d:9e:ef:32:2d:3f:2b:df:be:a9:75:
                    d5:c9:97:0b:f8:d5:c9:c5:1c:db:2b:9e:38:87:8e:
                    83:aa:48:ec:61:ac:27:b3:0c:80:f5:c6:34:e6:36:
                    54:5e:7a:8c:28:22:da:db:c9:f2:7f:bd:d7:25:64:
                    6c:7a:8d:71:85:ee:ce:d7:20:b9:7d:38:ee:81:67:
                    25:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:42:66:21:D6:16:BF:DA:4E:DC:37:B0:71:FE:13:9E:DB:6A:C2:79
            X509v3 Authority Key Identifier:
                keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/3130332e3135312e33352e302f32342d3234203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:e4:36:ca:8c:88:67:fc:ac:7b:4d:09:b0:6c:32:fb:30:7f:
         a7:42:98:c3:99:79:25:0e:8f:c1:d8:4b:b0:eb:67:2d:fa:26:
         b1:bf:78:d0:84:b9:ea:f5:b1:f2:a5:19:46:33:14:b9:52:db:
         23:30:3c:d5:5d:1e:14:b9:55:66:01:de:45:c6:d2:32:09:51:
         6e:55:95:51:5e:9a:ad:f3:69:ec:ae:2f:46:72:6a:64:71:cb:
         83:d7:96:db:2c:b5:4c:4d:9e:da:51:f6:a3:b4:9a:fb:79:87:
         c1:bf:56:c4:19:ba:e4:05:d0:01:23:b2:5d:c9:05:77:d1:38:
         27:39:dc:41:12:e4:f8:20:96:43:24:9a:84:22:ef:9b:d8:85:
         35:c3:bc:50:cc:6f:88:20:b2:5a:60:13:8b:fe:05:4e:d8:df:
         a2:8d:71:30:54:55:0c:46:a3:1a:4e:d0:4c:e3:ba:31:51:14:
         7b:b7:2d:1b:e1:03:66:8e:53:95:b6:a8:4d:0b:a2:33:b4:1f:
         ee:57:be:3e:54:d2:bb:ff:91:e9:9b:85:84:19:63:20:99:4d:
         7f:3e:17:47:e7:e5:0a:24:16:d7:3a:87:2a:c7:99:f7:38:a8:
         b9:5a:c6:be:ba:eb:03:17:42:49:ae:1c:7f:7f:4f:74:b0:2c:
         53:aa:08:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:30:28 2024 by rpki-client on console-ams.rpki-client.org