Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3130332e34372e3133342e302f32342d3234203d3e203633383539.roa
File:                     3130332e34372e3133342e302f32342d3234203d3e203633383539.roa (raw, json)
Hash identifier:          RzoGAVULQKoltyzBYMLW0yi6KDL7goz4wxpNzsi4gCg=
Subject key identifier:   4F:3C:18:B5:EA:F0:AB:4E:65:72:C6:CD:8B:A0:6C:40:10:15:C4:12
Certificate issuer:       /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Certificate serial:       5356B45D52AA82F74CCE2B3BB1903FC0E73B49C5
Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3130332e34372e3133342e302f32342d3234203d3e203633383539.roa
Signing time:             Sun 11 Aug 2024 09:00:02 +0000
ROA not before:           Sun 11 Aug 2024 08:55:02 +0000
ROA not after:            Sun 10 Aug 2025 09:00:02 +0000
asID:                     63859
IP address blocks:        103.47.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
                          rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 23:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:56:b4:5d:52:aa:82:f7:4c:ce:2b:3b:b1:90:3f:c0:e7:3b:49:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
        Validity
            Not Before: Aug 11 08:55:02 2024 GMT
            Not After : Aug 10 09:00:02 2025 GMT
        Subject: CN=4F3C18B5EAF0AB4E6572C6CD8BA06C401015C412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:95:3b:81:00:c5:86:fd:4a:1b:2e:4d:03:ea:
                    6a:f2:48:01:4d:69:dd:79:32:f6:fb:f3:a0:2b:83:
                    9e:43:80:5b:38:fc:3a:9d:86:91:ad:f9:29:4e:18:
                    04:ec:35:70:4b:7f:94:2c:17:39:75:d6:9a:e8:51:
                    9e:10:c5:95:35:0c:1a:f5:65:b5:da:7b:72:9f:08:
                    7f:19:50:88:e0:8f:80:04:d8:f1:a0:77:dd:a1:a7:
                    e1:6e:0b:4a:38:bf:a7:b0:a1:66:b8:a6:85:39:88:
                    2d:06:75:ff:91:0c:03:55:52:d7:e3:42:fd:76:8d:
                    5f:00:98:3c:36:d6:8c:72:15:6b:be:bf:a9:3f:6c:
                    c6:aa:eb:66:11:bb:2f:21:07:5f:e0:1f:d7:cb:b1:
                    92:34:fe:9c:97:df:30:3f:fe:b9:bb:08:93:32:dd:
                    4e:ae:09:29:a1:32:63:1f:2c:4d:42:86:2f:05:60:
                    59:a9:5c:c5:ab:82:cb:e6:7a:4c:54:8f:d5:91:3e:
                    0c:f3:57:21:4a:54:7f:8d:ca:78:fa:77:97:2c:07:
                    12:e7:a9:ff:1d:34:be:3b:c4:f1:e9:49:b5:ce:fa:
                    e9:34:54:67:ff:d4:8b:51:3e:bf:00:52:ed:d7:48:
                    e9:c5:d5:03:cd:6c:da:c8:52:64:86:17:24:d6:20:
                    cd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3C:18:B5:EA:F0:AB:4E:65:72:C6:CD:8B:A0:6C:40:10:15:C4:12
            X509v3 Authority Key Identifier:
                keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3130332e34372e3133342e302f32342d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:23:8d:15:66:3b:9b:79:5b:0b:ac:4b:77:26:84:92:56:b5:
         08:e7:20:78:32:c9:03:68:db:96:63:e5:2a:4f:df:59:b3:bb:
         fa:16:40:86:26:41:aa:db:6e:e3:67:0e:cd:f0:b3:85:27:af:
         4b:99:e3:5d:aa:66:07:4a:2a:e7:c9:80:44:a1:49:22:8a:e0:
         52:19:5b:cd:f3:b2:73:be:56:50:0d:c7:a6:37:4d:2c:2d:58:
         f0:97:1f:7d:ed:b5:b2:1c:b9:f0:11:a0:01:f5:76:93:bc:c5:
         e9:a3:8a:65:90:5a:95:de:0b:b1:ba:08:df:b4:70:7e:0f:59:
         89:11:46:12:ff:6e:24:e0:dc:42:4d:37:36:33:af:3d:54:77:
         f5:00:40:82:26:ef:ad:e1:2c:1e:f1:33:af:4f:28:df:c2:f5:
         62:b4:72:19:46:68:03:58:1d:4d:76:af:86:fc:37:64:6b:5d:
         df:78:21:3a:47:a1:11:6f:70:8a:c2:49:d7:a2:56:04:59:0b:
         ff:6d:7d:0d:5a:c0:4c:46:b8:e2:be:ef:b2:17:0c:03:48:b9:
         39:c1:37:92:0e:be:2e:e0:92:7b:da:3a:10:b4:4d:b9:63:5b:
         7f:fb:e0:7c:c2:26:5a:16:22:45:cd:39:98:9e:ed:0a:39:f0:
         fc:af:6e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:41 2024 by rpki-client on console-ams.rpki-client.org