Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa
File:                     3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (raw, json)
Hash identifier:          iZzZyQvt1w1ufWWNjvfCPWTbRouV+x+U+Z06gvQr0SE=
Subject key identifier:   09:DF:E6:DE:2A:34:75:27:D8:7B:98:5A:46:73:CF:27:0C:93:D8:AB
Certificate issuer:       /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59
Certificate serial:       43F9A84AC90061720D8281AA69F5C702C9671493
Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa
Signing time:             Wed 22 Nov 2023 04:00:00 +0000
ROA not before:           Wed 22 Nov 2023 03:55:00 +0000
ROA not after:            Wed 20 Nov 2024 04:00:00 +0000
asID:                     150470
IP address blocks:        103.51.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl
                          rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f9:a8:4a:c9:00:61:72:0d:82:81:aa:69:f5:c7:02:c9:67:14:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59
        Validity
            Not Before: Nov 22 03:55:00 2023 GMT
            Not After : Nov 20 04:00:00 2024 GMT
        Subject: CN=09DFE6DE2A347527D87B985A4673CF270C93D8AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e4:8a:52:66:29:06:d5:d6:e0:1b:56:a0:78:
                    2d:b5:3c:c8:12:d0:6b:1f:44:a3:29:0f:78:9d:88:
                    44:76:4e:90:b5:72:c4:37:00:4b:8b:22:d5:6f:d9:
                    7f:c1:a1:32:79:ec:c3:ee:04:98:6f:bd:97:fc:41:
                    27:e7:6a:8c:47:e3:3f:95:18:55:f5:fa:08:42:c7:
                    54:24:62:eb:28:00:3a:90:1e:2d:e9:35:df:2d:1c:
                    2a:28:dc:95:57:83:3a:8f:4d:c6:a9:9f:d8:cf:b7:
                    e5:18:a8:84:86:8e:c5:fd:9a:46:cf:99:52:1e:29:
                    dc:ec:49:06:37:58:0d:0f:42:2b:a6:83:f9:05:84:
                    c7:f2:13:7a:05:5d:52:11:bb:b3:6f:4f:83:b6:b3:
                    af:74:57:93:13:c4:1c:0d:e6:77:3a:73:ec:c2:64:
                    d2:25:a5:1d:98:8b:11:d6:37:7f:79:89:9a:64:d9:
                    62:23:c3:86:de:36:18:a8:b9:3c:03:a0:02:fd:85:
                    17:3d:dc:79:8c:5e:e1:c6:48:a9:72:8d:33:c2:35:
                    35:44:08:7b:c6:a2:b1:3c:75:48:97:e2:b1:99:30:
                    5f:3d:b7:fd:25:d2:f3:df:d9:1f:f2:59:eb:11:91:
                    10:a3:99:e3:03:89:d1:01:0b:62:c0:e6:b9:38:ff:
                    9e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DF:E6:DE:2A:34:75:27:D8:7B:98:5A:46:73:CF:27:0C:93:D8:AB
            X509v3 Authority Key Identifier:
                keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:3e:71:3e:c8:c0:f0:56:92:55:2e:80:37:7d:23:c6:89:f0:
         e3:28:17:04:8a:14:02:d8:ea:52:98:15:ee:cd:f0:2f:a3:72:
         cd:61:74:65:20:97:72:c3:35:2d:9e:ff:5d:1a:99:ce:7a:61:
         5e:2c:9e:bc:d4:5b:db:2a:63:2a:cc:2a:fa:83:fa:6c:8d:9a:
         20:13:25:be:64:f3:61:cf:bc:fe:81:2a:b6:85:18:74:7c:bc:
         9c:8b:e9:09:0f:54:d7:28:56:af:02:02:df:e7:39:84:f5:22:
         d3:ce:f4:1b:45:32:37:a5:8d:3f:fc:51:ed:f9:bc:96:77:4e:
         ba:35:a4:f3:e9:68:b4:08:ab:78:72:9e:9e:20:5e:16:c7:c4:
         fa:e0:69:22:fb:e3:e4:fc:56:74:83:e8:90:3f:82:c6:87:f3:
         c9:25:74:0a:cb:61:28:ab:15:9c:74:2e:49:52:aa:eb:00:68:
         97:e4:40:0b:bd:70:01:f5:fc:9c:87:49:43:61:1e:a0:fc:83:
         86:bc:a1:c3:72:48:32:02:4f:e3:2e:14:a8:34:6d:fc:44:5a:
         87:04:32:71:68:00:f4:54:df:19:0b:5c:fa:ec:b0:92:52:70:
         3b:09:2c:fd:24:32:b5:49:41:7c:d6:c9:56:1f:c5:e9:26:26:
         4f:0f:9c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:52:37 2024 by rpki-client on console-ams.rpki-client.org