Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/3130332e3134372e35322e302f32342d3234203d3e20313339393439.roa
File:                     3130332e3134372e35322e302f32342d3234203d3e20313339393439.roa (raw, json)
Hash identifier:          cixK9QRhQR3yed+eCrNd6ZkJ6H49Mr2sD+89zs3NN78=
Subject key identifier:   5C:8B:68:24:8D:94:C8:2D:AB:CC:E7:5B:4A:45:3B:D4:A3:72:80:28
Certificate issuer:       /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
Certificate serial:       27D900D423E0F7FF10B95E31927E375C2F28513D
Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/3130332e3134372e35322e302f32342d3234203d3e20313339393439.roa
Signing time:             Mon 01 Jul 2024 01:02:52 +0000
ROA not before:           Mon 01 Jul 2024 00:57:52 +0000
ROA not after:            Mon 30 Jun 2025 01:02:52 +0000
asID:                     139949
IP address blocks:        103.147.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl
                          rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d9:00:d4:23:e0:f7:ff:10:b9:5e:31:92:7e:37:5c:2f:28:51:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
        Validity
            Not Before: Jul  1 00:57:52 2024 GMT
            Not After : Jun 30 01:02:52 2025 GMT
        Subject: CN=5C8B68248D94C82DABCCE75B4A453BD4A3728028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:fa:8b:0b:8d:e0:eb:a4:43:a5:04:50:9f:
                    81:60:33:c4:01:00:9b:5d:5b:1e:2c:4c:ed:b7:a9:
                    59:78:01:bb:cb:3d:6c:f5:e1:94:9a:d5:20:80:d4:
                    2a:05:e3:fe:71:90:3c:3e:91:f0:9f:56:d1:a8:4b:
                    9b:97:6d:00:92:ca:a1:19:95:0f:f1:65:60:cd:2e:
                    54:5a:8f:04:4d:c4:60:07:49:1f:7c:10:dd:b8:fb:
                    be:ca:b8:fe:3f:85:99:a2:e5:50:ad:b1:00:a0:d5:
                    87:77:25:70:5c:f6:7f:7f:59:a5:9a:1a:2f:a9:3d:
                    47:b7:c9:ae:40:93:03:7a:51:b0:ca:27:3e:ca:7d:
                    8c:b6:d8:97:e0:b7:cb:e2:ac:c7:3d:3f:89:89:be:
                    bc:96:65:21:c2:56:6b:dc:e4:b5:93:3f:6c:42:c0:
                    17:e1:c2:d2:64:8b:81:64:97:5c:3b:92:e8:bd:4a:
                    f5:51:7c:03:0e:90:03:52:cf:e7:e6:e4:40:d6:1c:
                    53:2d:74:65:2e:12:9d:31:ae:f6:e1:a4:9e:69:30:
                    67:6b:78:35:dd:9a:3a:c6:86:4a:20:99:b6:e5:65:
                    4f:64:8e:b8:5f:07:b5:3a:a4:f4:23:d2:8f:69:ce:
                    45:bd:c6:c2:c9:11:6c:d3:15:a5:20:c4:bb:2b:96:
                    22:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8B:68:24:8D:94:C8:2D:AB:CC:E7:5B:4A:45:3B:D4:A3:72:80:28
            X509v3 Authority Key Identifier:
                keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/3130332e3134372e35322e302f32342d3234203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:9c:e6:5f:22:97:e7:1c:81:0f:b1:a8:f0:04:db:de:aa:6e:
         93:c2:47:40:e4:e8:8f:cd:f1:c4:02:b2:7e:9c:58:6c:54:cd:
         fc:11:f2:6b:f6:a3:2d:f7:15:9d:0b:80:b6:46:4d:df:f3:67:
         2b:7b:3c:31:04:f0:5b:29:30:76:a3:d2:b0:e5:9d:09:2f:ae:
         51:17:5c:ed:46:be:54:bb:63:57:d6:f6:d9:62:12:ad:45:aa:
         ce:f1:29:d7:22:5b:c1:d5:e6:56:84:3b:33:5a:ea:2e:fe:08:
         39:2e:e3:62:5e:73:53:b8:26:17:5a:24:3f:e8:fe:1e:31:fb:
         a1:33:6b:27:3b:8a:38:77:9f:3b:9c:47:44:b0:7a:30:09:dc:
         cf:9a:37:0c:cd:53:6e:6f:8e:ba:cf:30:75:9f:42:d3:be:a5:
         e3:ab:e5:02:21:b2:b7:a2:d3:51:36:e1:bb:c7:5e:df:ba:90:
         e7:fe:30:b3:7f:2e:84:16:2d:30:44:f7:32:f0:8f:8f:33:41:
         ff:50:a7:1a:d6:97:0c:88:17:1d:9c:f6:7a:f4:4c:6d:8d:1e:
         e3:df:6f:11:bd:7a:25:d7:78:7a:3c:17:e4:ef:69:e8:39:ca:
         fc:93:93:61:66:e6:81:19:e9:fa:ea:bb:88:26:c8:02:5f:54:
         1f:76:50:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:14 2024 by rpki-client on console-ams.rpki-client.org