Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132332e302f32342d3234203d3e203438343635.roa
File:                     3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          eBIwtq3IDYbGntPd8udTR7pwimj3OQ7zrJEf3s/YHkM=
Subject key identifier:   5B:B5:38:9F:9B:F2:29:75:E7:7B:CE:D1:7B:57:10:58:E1:7C:F3:C2
Certificate issuer:       /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59
Certificate serial:       1C68ED42125749D30DC662E7B1807582B3F3AFAB
Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132332e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 15 Jul 2024 02:46:47 +0000
ROA not before:           Mon 15 Jul 2024 02:41:47 +0000
ROA not after:            Mon 14 Jul 2025 02:46:47 +0000
asID:                     48465
IP address blocks:        103.51.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl
                          rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:68:ed:42:12:57:49:d3:0d:c6:62:e7:b1:80:75:82:b3:f3:af:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59
        Validity
            Not Before: Jul 15 02:41:47 2024 GMT
            Not After : Jul 14 02:46:47 2025 GMT
        Subject: CN=5BB5389F9BF22975E77BCED17B571058E17CF3C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:47:e3:80:a6:9e:3b:89:a1:8b:e8:cf:f0:4a:
                    be:46:38:6a:47:1c:05:73:46:8b:74:0b:63:39:43:
                    dc:9a:99:bb:ce:ca:41:e2:b2:e5:de:d1:61:f8:0c:
                    fd:0f:b4:00:dc:64:fa:b0:34:d8:7a:c9:3e:7c:2b:
                    45:c7:e3:67:09:5e:38:cb:0c:07:42:4f:c8:64:ca:
                    29:f2:7f:c6:e4:b9:40:8c:7f:52:78:ab:af:02:94:
                    64:ef:d9:4b:c6:e0:16:bc:20:07:2e:5f:d7:aa:72:
                    bc:29:9e:8e:60:74:0b:1a:f0:e8:ae:2d:ac:be:46:
                    c9:52:00:37:b2:ea:db:cf:e2:3d:e6:e2:a1:73:c4:
                    19:03:5e:08:01:5e:f4:c1:61:42:ae:79:0f:63:70:
                    90:74:fd:32:e3:5d:02:50:92:96:d3:d1:3a:db:b3:
                    26:43:3f:59:92:5f:a4:99:ed:ef:b5:b7:ee:a7:05:
                    ba:46:24:c9:10:22:36:9c:88:62:7c:f2:38:6e:1c:
                    45:b2:0a:20:9e:75:b3:12:ce:b5:f9:4e:96:96:5f:
                    fc:02:d8:48:c1:89:91:6b:bd:38:d8:dd:23:0b:fd:
                    27:92:ce:83:0f:26:fe:de:28:32:46:0f:27:f5:39:
                    09:cd:48:d1:96:7e:8b:83:8f:6b:88:a4:9f:b3:78:
                    a2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B5:38:9F:9B:F2:29:75:E7:7B:CE:D1:7B:57:10:58:E1:7C:F3:C2
            X509v3 Authority Key Identifier:
                keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132332e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:7e:49:1e:3c:7e:2c:0f:78:4b:38:b8:e3:c5:3c:6b:1f:da:
         c5:c3:13:2c:2d:83:9f:28:d5:42:bd:49:f2:0f:66:4f:e3:7a:
         b0:42:1b:b9:02:5c:d5:09:64:11:1f:67:4c:ca:92:e0:cb:80:
         48:1d:69:e0:bf:c3:52:67:b4:e5:31:95:77:33:e6:5d:31:f7:
         13:30:5b:68:66:d9:9c:a4:27:da:32:bc:62:62:32:53:ac:c2:
         1b:f4:74:ad:6f:4b:c2:cc:9c:09:2c:07:2b:d1:eb:df:62:fd:
         53:3e:c0:64:d3:ea:41:a5:aa:08:1d:34:bf:76:39:39:4c:12:
         0a:dc:58:24:21:03:8e:f3:af:ad:a0:c2:d6:d0:40:28:60:25:
         00:01:7b:1b:df:e2:21:60:a7:38:3b:7c:73:30:a6:4f:11:22:
         f3:c7:b5:8c:f6:26:66:4a:92:66:ba:b7:77:ed:13:74:4c:b8:
         ad:ff:0b:4f:28:79:8e:84:3c:f1:2f:32:60:d3:7d:be:e2:7d:
         0c:02:5a:1a:8e:f5:cf:4b:94:ce:72:23:70:e5:ab:cd:a9:5b:
         d5:9f:44:a6:53:40:a1:92:73:5c:d4:06:63:13:7f:01:25:77:
         5e:40:cc:5b:2e:eb:80:f7:e5:78:d0:92:30:e9:a1:4d:57:f8:
         af:e7:16:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org