Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3231302e33352e302f32342d3234203d3e203539313531.roa
File:                     3130332e3231302e33352e302f32342d3234203d3e203539313531.roa (raw, json)
Hash identifier:          AiL+g1EooKWTtHWBu9kN++0bhh/1b9qWboQYM9JSjI0=
Subject key identifier:   D7:3B:31:80:67:34:53:8C:ED:88:50:D5:76:67:E9:BB:86:08:9B:2A
Certificate issuer:       /CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801
Certificate serial:       549382722E70084A65FB1F359B3BD553A0A1F1AC
Authority key identifier: 6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3231302e33352e302f32342d3234203d3e203539313531.roa
Signing time:             Mon 30 Dec 2024 09:02:34 +0000
ROA not before:           Mon 30 Dec 2024 08:57:34 +0000
ROA not after:            Mon 29 Dec 2025 09:02:34 +0000
asID:                     59151
IP address blocks:        103.210.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl
                          rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Feb 2025 18:09:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:93:82:72:2e:70:08:4a:65:fb:1f:35:9b:3b:d5:53:a0:a1:f1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801
        Validity
            Not Before: Dec 30 08:57:34 2024 GMT
            Not After : Dec 29 09:02:34 2025 GMT
        Subject: CN=D73B31806734538CED8850D57667E9BB86089B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:b1:79:db:d3:3c:b9:66:1e:14:fd:68:8e:
                    b2:23:9f:7c:80:cd:b2:b1:19:d4:2a:33:ac:55:4b:
                    e5:d8:b3:e2:a9:83:5b:08:27:7e:fd:16:00:f3:b8:
                    7e:6f:fd:8b:44:32:5e:c0:a4:31:65:d8:07:b4:7a:
                    a7:36:8e:59:22:36:65:a7:32:13:d0:d4:1a:1b:03:
                    5f:70:38:07:5e:53:36:86:04:f1:ab:96:39:46:52:
                    8e:e0:06:e1:07:50:e0:b6:84:df:e6:61:33:fe:87:
                    36:98:6c:41:9d:80:4a:c5:59:0f:80:68:94:84:27:
                    81:63:4c:02:2d:c6:73:89:af:04:6a:cb:d1:99:a6:
                    a6:d7:77:cd:76:f2:1d:81:d1:38:5b:83:43:38:46:
                    e0:90:58:da:81:bb:cd:5c:9e:70:50:7d:3d:44:4d:
                    c3:b9:07:8c:6b:8c:69:3f:7e:e2:4a:f5:43:9c:e4:
                    3e:af:a0:09:0b:cb:8c:a4:1c:89:b5:0b:79:0b:b9:
                    12:f7:1e:66:81:a7:1a:48:c8:3e:10:e0:b9:91:06:
                    1a:27:bf:75:a6:54:ba:c0:16:a3:d4:e2:c6:06:d6:
                    7b:1a:51:96:e8:34:6b:21:19:93:1c:d1:fc:f1:67:
                    b6:6e:05:c6:e5:76:c9:c3:92:eb:ee:9d:1f:8e:27:
                    32:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3B:31:80:67:34:53:8C:ED:88:50:D5:76:67:E9:BB:86:08:9B:2A
            X509v3 Authority Key Identifier:
                keyid:6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3231302e33352e302f32342d3234203d3e203539313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:29:11:3a:72:0e:48:7c:05:60:c7:41:5e:87:76:51:a7:e9:
         23:1d:81:79:c7:96:94:a2:0e:bc:03:5d:d6:68:0b:44:a6:85:
         a5:17:96:8f:b0:7d:cb:aa:7a:de:41:71:9a:25:32:49:27:a1:
         30:a3:e2:65:a3:67:d3:e0:8f:58:ed:f6:68:88:ab:6a:82:2a:
         f4:d6:8d:1e:c6:73:61:53:71:d3:64:c3:f8:ba:ea:7e:d6:c7:
         ba:d0:63:53:a1:44:07:7b:e6:94:bb:5d:c0:b0:70:d9:d6:cd:
         55:96:16:ba:b9:dc:24:7f:61:e8:65:4b:a4:30:b0:25:de:7d:
         bb:84:ae:6c:c4:17:95:92:5f:70:90:d2:0b:7b:00:ce:84:3d:
         b5:ee:df:24:a8:29:82:b4:ec:b1:cd:d2:38:4b:35:c5:b5:2d:
         56:ab:fd:fe:39:96:1e:44:fb:a3:8c:6c:9e:77:fe:2d:49:e7:
         c0:09:90:1a:bc:b5:b5:ab:b8:4d:14:cf:15:fc:f2:ac:1d:42:
         b3:20:8b:a2:c8:c9:62:59:2b:b9:37:74:2a:bd:b5:07:03:ad:
         0e:c9:02:85:54:fc:3f:38:e4:f0:b3:b7:57:9b:85:f8:3f:e9:
         f6:54:99:e2:e7:e5:3b:43:99:08:8c:b8:30:fe:0b:22:11:df:
         42:d1:be:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:12:23 2025 by rpki-client