Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/3130332e36372e39312e302f32342d3234203d3e20313532303035.roa
File:                     3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (raw, json)
Hash identifier:          smGZgJZZCOs+jVUBHqaBcVcOi1qyQfpKzrUsCCMETHM=
Subject key identifier:   A6:53:4D:D2:14:DB:AC:2C:E2:45:C4:FA:05:D0:8A:DB:6C:96:2E:65
Certificate issuer:       /CN=49011B0D97FF49210FC27249FDD23F7172FD5561
Certificate serial:       6EF6A1EAA8454D0DA2FF90D03FB450745546AEB5
Authority key identifier: 49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/3130332e36372e39312e302f32342d3234203d3e20313532303035.roa
Signing time:             Wed 28 Feb 2024 02:53:10 +0000
ROA not before:           Wed 28 Feb 2024 02:48:10 +0000
ROA not after:            Wed 26 Feb 2025 02:53:10 +0000
asID:                     152005
IP address blocks:        103.67.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl
                          rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f6:a1:ea:a8:45:4d:0d:a2:ff:90:d0:3f:b4:50:74:55:46:ae:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49011B0D97FF49210FC27249FDD23F7172FD5561
        Validity
            Not Before: Feb 28 02:48:10 2024 GMT
            Not After : Feb 26 02:53:10 2025 GMT
        Subject: CN=A6534DD214DBAC2CE245C4FA05D08ADB6C962E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:07:b6:af:df:b3:93:fe:44:64:8f:b5:43:72:
                    67:26:e9:bf:42:c4:4e:a7:82:a9:91:b4:9f:e5:ef:
                    84:c8:2c:06:4c:f0:eb:f4:ef:d5:ff:55:6d:ef:f4:
                    9d:57:34:29:cc:1f:5f:3d:de:6f:99:0d:06:2a:07:
                    8f:08:d2:66:d5:a5:66:d1:8a:d4:ec:6b:ef:15:6f:
                    45:99:af:f4:71:6f:4d:3e:10:51:dd:02:bf:e6:aa:
                    27:b4:71:97:d7:00:30:82:0a:6f:fb:43:56:f7:2d:
                    97:ed:74:09:e9:f8:f5:34:ea:65:11:8b:0b:34:cf:
                    4a:00:60:52:92:1d:3e:b0:4a:1f:de:be:e3:eb:4d:
                    f6:1b:40:47:9c:13:03:6c:62:8b:f8:5c:ba:0f:99:
                    32:e7:f2:f4:7a:44:2f:9b:b2:f4:88:bb:f5:1c:53:
                    06:2f:c0:bc:80:40:f1:1d:a8:67:0c:18:9f:c1:bd:
                    1b:61:fb:9b:04:a7:4c:a6:50:53:1a:50:f1:db:27:
                    0e:ec:7c:21:59:16:bf:74:1d:6d:32:8c:6b:da:c8:
                    40:82:61:d4:2d:bb:c8:74:c3:e2:07:b9:37:5d:b9:
                    63:92:57:99:fd:5a:bd:20:e3:6f:1a:87:86:e1:9f:
                    cb:c6:35:0e:ec:cf:d6:da:a2:90:2e:a2:ec:21:62:
                    28:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:53:4D:D2:14:DB:AC:2C:E2:45:C4:FA:05:D0:8A:DB:6C:96:2E:65
            X509v3 Authority Key Identifier:
                keyid:49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/3130332e36372e39312e302f32342d3234203d3e20313532303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:77:ce:9a:f1:7c:de:b8:c2:6a:4a:68:cb:89:d7:24:72:73:
         36:40:5f:dd:29:64:e6:73:d6:01:9d:55:41:1e:83:98:d7:c5:
         d3:da:3d:b0:41:31:f7:86:1a:07:61:99:49:a6:25:9e:65:36:
         f9:46:53:22:4c:b4:6e:39:dc:3f:50:eb:70:fc:08:3b:d5:bc:
         3f:64:49:45:82:23:1d:9c:76:c0:04:38:f5:0f:03:55:ec:76:
         23:fb:03:a2:45:f1:32:23:70:cd:51:08:a6:39:a8:79:73:9d:
         6f:68:0c:c3:c5:68:13:c5:a6:20:c7:9a:85:73:c5:de:55:aa:
         2b:77:c4:b2:1b:2c:4b:ea:02:f7:2d:54:99:47:26:a7:70:ac:
         87:1e:69:d6:a4:5a:1e:43:b4:c1:19:98:38:52:3f:ff:09:53:
         2f:33:66:1c:66:45:ff:ef:9e:52:52:e4:36:5c:ad:ba:3e:76:
         74:4e:88:bb:ae:bf:c9:04:65:7d:d8:5f:73:d5:e9:3f:15:72:
         24:24:25:42:59:fe:d4:41:31:15:85:b1:05:d4:fb:7e:da:8c:
         9c:50:0c:ed:a8:45:09:3d:0d:09:38:26:f1:94:ae:44:22:a6:
         ca:52:20:e8:74:a9:66:a1:87:4a:49:d6:a2:ec:9c:7c:e6:98:
         aa:0f:81:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:34 2024 by rpki-client on console-fra.rpki-client.org